Sshield, a secure(r) SSH agent written in Rust

Hacker News

sshield is a drop-in SSH agent replacement written in Rust which stores keys in an encrypted SQLite database instead of in ~/.ssh. I opted to use russh, which is a Rust implementation of the SSH protocol and ssh-agent for greater memory safety. It allows importing settings and keys from OpenSSH as well as creating, updating, showing and deleting keys. Whenever a program requests using the key for signing, a prompt is displayed to the user for confirmation. This way: 1. Your keys don't get leaked (unless the server process' memory is dumped, but that requires root on *nix systems) 2. Your keys don't get misused and inadvertedly sign something malicious. It is still a work in progress, but I've been able to switch with fairly minor inconveniences that are just the result of not having it globally installed. The repo will soon have a Nix overlay or package output with all the right settings enabled for daily production usage. Other planned features include using one of the Linux sandboxing APIs, like Landlock or seccomp to further lock down server process to reduce the chance of an RCE being triggered and a way to store the database on different cloud storage mediums so you can use their ACLs to further lock down access to the database and back up keys simultaneously.

Visit product View on Hacker NewsJul 30, 2023

Share card

Actual performance

3points

Did not reach leaderboard

Launch Intel predictions

Analyze your own launch →

Product HuntOn track for Day 1 leaderboard · Strong signals: agent, user, using · Missing: mac, agents, macos

93%93% predicted probability of success on Product Hunt, based on ML models trained on real launch data.

best fitHighest predicted score across all platforms for this description.

Hacker NewsStrong engagement from HN community · Strong signals: io · Missing: https docs, excited, just released

67%67% predicted probability of success on Hacker News, based on ML models trained on real launch data.

nativeThis product was originally launched on this platform.

Indie HackersFits the IH revenue-focused audience · Missing: supports, reddit linkedin, podcasting

61%61% predicted probability of success on Indie Hackers, based on ML models trained on real launch data.

TrustMRRLess likely to generate early MRR · Strong signals: way · Missing: mobile apps, ios, personal

45%45% predicted probability of success on TrustMRR, based on ML models trained on real launch data.

AppSumoMay struggle as an AppSumo deal · Strong signals: soon · Missing: plus, platform, intuitive

45%45% predicted probability of success on AppSumo, based on ML models trained on real launch data.

Acquire.comPre-revenue stage for this audience · Missing: arr, mrr, revenue

17%17% predicted probability of success on Acquire.com, based on ML models trained on real launch data.

BetaListMay not resonate with beta-testers · Missing: web3, chat, crypto

0%0% predicted probability of success on BetaList, based on ML models trained on real launch data.

Incorrect prediction on native model

Similar products

SeKey: An SSH Agent for OS X, Using Secure Enclave and TouchID, in Rust48%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

SeKey: An SSH Agent for OS X, Using Secure Enclave and TouchID, in Rust

Hacker News169

Rux, a hobbyist microkernel written in Rust66%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Rux, a hobbyist microkernel written in Rust

Hacker News14

AVR-VM – VM with JIT-compiler for ATMega32 written in Rust69%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

AVR-VM – VM with JIT-compiler for ATMega32 written in Rust

Hacker News78

Catfs – Cache AnyThing Filesystem Written in Rust79%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Catfs – Cache AnyThing Filesystem Written in Rust

Hacker News7

Encrusted – A Zork Interpreter Written in Rust / WebAssembly78%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Encrusted – A Zork Interpreter Written in Rust / WebAssembly

Hacker News6

Toy C Compiler written in Rust72%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Toy C Compiler written in Rust

Hacker News4

Eole, a Lévy-optimal lambda calculus evaluator written in Rust57%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Eole, a Lévy-optimal lambda calculus evaluator written in Rust

Hacker News106

Published Thanks-Dependencies written in Rust52%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Published Thanks-Dependencies written in Rust

Hacker News3

Bytebeat written in Rust (bytebeat-rs)59%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Bytebeat written in Rust (bytebeat-rs)

Hacker News4

Mixed Boolean Arithmetic Expression Obfuscator Written in Rust63%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Mixed Boolean Arithmetic Expression Obfuscator Written in Rust

Hacker News3

Browse all products Analyze your launch