PuTTY 0.68 has been released(chiark.greenend.org.uk)
chiark.greenend.org.uk
PuTTY 0.68 has been released
http://www.chiark.greenend.org.uk/~sgtatham/putty/releases/0.68.html
151 comments
Release Notes:
Isn't this "DLL hijacking" thing a bit overblown? The directory an application runs from on Windows has always been considered part of the security perimeter of the application.
If you can drop a malicious DLL where putty.exe lives, can't you just drop a malicious putty.exe?
If you can drop a malicious DLL where putty.exe lives, can't you just drop a malicious putty.exe?
It's bad if you use an insecure browser like Chrome. Chrome allows any website you visit to download DLLs directly to your Downloads directory without user interaction. Then, any installer you download and run will use the infected DLLs unless specifically keyed to look in system32 for them.
Additionally, something can infect your PC and alter your PATH. Then PuTTY might pick up a fake Windows DLL from elsewhere on your machine. But if your machine is infected and something is messing with the Windows path, you have bigger problems.
Additionally, something can infect your PC and alter your PATH. Then PuTTY might pick up a fake Windows DLL from elsewhere on your machine. But if your machine is infected and something is messing with the Windows path, you have bigger problems.
Thankfully Chrome has fixed this issue. I just tried this and Chrome actually warns you about downloading DLLs and requires further user interaction to actually download DLL to the downloads folder:
Screenshot: https://i.imgur.com/MvRwZBi.png
Screenshot: https://i.imgur.com/MvRwZBi.png
All DLLs or just specific ones? I'd heard a while ago they were going to blacklist specific ones instead of just making it so a user has to purposely decide to download a file.
I'm surprised they finally did something since we've been warning people not to use Chrome because of this issue for years.
I'm surprised they finally did something since we've been warning people not to use Chrome because of this issue for years.
Not a windows person, so I can't speak to how the directory is treated, but I've watched enough people run applications from the Downloads directory to wonder about it.
That's an interesting point, otherwise I'd say it's basically the Windows equivalent of LD_PRELOAD. Running executables from the "downloads" directory is certainly a thing though, never realized the security implication there (beyond trusting the download natch)
[deleted]
with putty i would be surprised if most didn't run it straight from the desktop. i would be a dirty liar if i said i haven't, countless times.
This. Without an installer that puts a link into the start menu, everyone I've ever worked with just dumps it on the desktop. I used to throw a symlink into the start menu, but when other devs used my machine they expected it to be on the desktop. Just one of those quirks of using PUTTY
But why not just use the installer?
For a long time, there wasn't an installer for putty, so a lot of us became accustomed to just dropping the binary on our desktop or "bin" folder", but there is an installer now. Also, certain corporate environments that preclude the installer from working correctly, but won't mind you "installing" a program to your desktop/local app data.
I find the corporate environment thing suspicious. I could imagine that if you don't have admin access, you can't install to Program Files, but couldn't you still install to your home directory, and still get those lovely start menu shortcuts?
Not really.
Windows, by default requests elevated rights from the user (the UAC dialog) if you run any exe that has 'setup' or 'install' in the name, or if the manifest inside/alongside the exe defines a requirement for elevated rights.
You can spot these files as they have a little Windows 'shield' overlay on their icons (Windows overlays that itself if it detects a file needing elevated rights).
So, unless you can elevate your rights (i.e. be admin, or type in admin credentials), you can't run most installers.
However, prior to Windows 7 your personal start menu folder wasn't locked down - and as a non-admin you could easily add/remove shortcuts from it. Since Windows 7 onwards it's now protected, so you need to elevate to be able to write to it.
Windows allows you to run (by default) software from ANY folder you like, but you can only (by default, again) write to some of your user folders and the the %TEMP% location.
So downloading the PuTTY exe and running it from the downloads folder or desktop is perfectly legitimate, although not good practice.
As an aside: I'm not sure if Chrome still does it, but I recall that if you try to install it and you don't have admin rights, it just puts an icon on your desktop, and installs all the chrome files into a folder under ProgramData which resides in your user hierarchy, instead of the locked down Program Files area. Which is one way of getting around the lack of admin-rights.
Windows, by default requests elevated rights from the user (the UAC dialog) if you run any exe that has 'setup' or 'install' in the name, or if the manifest inside/alongside the exe defines a requirement for elevated rights.
You can spot these files as they have a little Windows 'shield' overlay on their icons (Windows overlays that itself if it detects a file needing elevated rights).
So, unless you can elevate your rights (i.e. be admin, or type in admin credentials), you can't run most installers.
However, prior to Windows 7 your personal start menu folder wasn't locked down - and as a non-admin you could easily add/remove shortcuts from it. Since Windows 7 onwards it's now protected, so you need to elevate to be able to write to it.
Windows allows you to run (by default) software from ANY folder you like, but you can only (by default, again) write to some of your user folders and the the %TEMP% location.
So downloading the PuTTY exe and running it from the downloads folder or desktop is perfectly legitimate, although not good practice.
As an aside: I'm not sure if Chrome still does it, but I recall that if you try to install it and you don't have admin rights, it just puts an icon on your desktop, and installs all the chrome files into a folder under ProgramData which resides in your user hierarchy, instead of the locked down Program Files area. Which is one way of getting around the lack of admin-rights.
I was going to say putty does not have an installer, but TIL putty now has an installer..
Can't say anything definitive about “overblown”, but I like the change.
Windows security model is inadequate, but it's good to work around it anyway.
Windows security model is inadequate, but it's good to work around it anyway.
Thank so much for posting this. Perchance, could you remove the quote formatting as it makes it nearly impossible to read on mobile?
Security fix: an integer overflow bug in the agent forwarding code. See vuln-agent-fwd-overflow.
Security fix: the Windows PuTTY binaries should no longer be vulnerable to hijacking by specially named DLLs in the same directory (on versions of Windows where they previously were). See vuln-indirect-dll-hijack.
Windows PuTTY no longer sets a restrictive process ACL by default, because this turned out to inconvenience too many legitimate applications such as NVDA and TortoiseGit. You can still manually request a restricted ACL using the command-line option -restrict-acl.
The Windows PuTTY tools now come in a 64-bit version.
The Windows PuTTY tools now have Windows's ASLR and DEP security features turned on.
Support for elliptic-curve cryptography (the NIST curves and 25519), for host keys, user authentication keys, and key exchange.
Support for importing and exporting OpenSSH's new private key format.
Host key preference policy change: PuTTY prefers host key formats for which it already knows the key.
Run-time option (from the system menu / Ctrl-right-click menu) to retrieve other host keys from the same server (which cross-certifies them using the session key established using an already-known key) and add them to the known host-keys database.
The Unix GUI PuTTY tools can now be built against GTK 3.
There is now a Unix version of Pageant.
Security fix: the Windows PuTTY binaries should no longer be vulnerable to hijacking by specially named DLLs in the same directory (on versions of Windows where they previously were). See vuln-indirect-dll-hijack.
Windows PuTTY no longer sets a restrictive process ACL by default, because this turned out to inconvenience too many legitimate applications such as NVDA and TortoiseGit. You can still manually request a restricted ACL using the command-line option -restrict-acl.
The Windows PuTTY tools now come in a 64-bit version.
The Windows PuTTY tools now have Windows's ASLR and DEP security features turned on.
Support for elliptic-curve cryptography (the NIST curves and 25519), for host keys, user authentication keys, and key exchange.
Support for importing and exporting OpenSSH's new private key format.
Host key preference policy change: PuTTY prefers host key formats for which it already knows the key.
Run-time option (from the system menu / Ctrl-right-click menu) to retrieve other host keys from the same server (which cross-certifies them using the session key established using an already-known key) and add them to the known host-keys database.
The Unix GUI PuTTY tools can now be built against GTK 3.
There is now a Unix version of Pageant.
Cheers. A couple of nice features here, might even start using the 64 bit version though I doubt it will have much impact.
Or visit the source: http://www.chiark.greenend.org.uk/~sgtatham/putty/changes.ht...
Thanks, this is probably a better landing page for HN than the linked release page!
I had a quick hunt for it but couldn't see it on the release page.
I had a quick hunt for it but couldn't see it on the release page.
This release also adds support for the ChaCha20 AEAD cipher and encrypt-then-MAC modes for non-AEAD ciphers. Not sure why those aren't included in the release notes.
> Support for importing and exporting OpenSSH's new private key format
What new private key format is that?
What new private key format is that?
Buried in the FAQ and not in the changelog for some reason:-
As of 0.68, PuTTY will no longer fall back to SSH-1 if the server doesn't appear to support SSH-2; you must explicitly ask for SSH-1.
As of 0.68, PuTTY will no longer fall back to SSH-1 if the server doesn't appear to support SSH-2; you must explicitly ask for SSH-1.
This is the information I came to find. Thanks!
Why would such a small, simple program need to be 64 bit? Exactly what changes when moving puTTY from 32 bit to 64 bit? It now takes up more memory?
We are well beyond moving to 64bit on a needs-only basis. At this point it's about dropping legacy and future proofing. There's also no reason 64bit apps should have a larger memory footprint; the ISA and addressing modes are actually much tidier.
Here are the reasons they now provide a 64bit version: http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/w...
The most likely reason is ASLR support, since you have more address space available for randomisation. Other than that, you can probably get a slight boost in performance from the differences between x64 and x86, but lose out if the code is particularly pointer-heavy.
Long time user of Putty, like many here. I liked this quote from their FAQ (A.3.3 What's the point of the Unix port? Unix has OpenSSH):
"There were development advantages as well; porting PuTTY to Unix was a valuable path-finding effort for other future ports, and also allowed us to use the excellent Linux tool Valgrind to help with debugging, which has already improved PuTTY's stability on all platforms."
"There were development advantages as well; porting PuTTY to Unix was a valuable path-finding effort for other future ports, and also allowed us to use the excellent Linux tool Valgrind to help with debugging, which has already improved PuTTY's stability on all platforms."
This sort of development is often illuminating. I develop on *BSD, Linux, Solaris (SPARC), and MacOS X when I can, and even though they're "all UNIX", interesting insights abound, and dealing w different endianess (SPARC == big, Intel == small), and library differences, etc is rarely more trouble than it's worth.
On Windows 10, with Windows Subsystem for Linux installed, I don't find myself using Putty anymore.
Are you using an insider build or a different shell than Windows' cmd? I find myself using Putty to connect to a Linux subsystem ssh server just to get a decent terminal emulator with full colour support!
Give this a whirl: https://github.com/mintty/wsltty
The latest Insider builds are a lot better, including full color support.
It's apparently coming to stable in April: https://news.ycombinator.com/item?id=13695267
You may be interested in ConEmu:
https://conemu.github.io/ https://conemu.github.io/en/BashOnWindows.html
https://conemu.github.io/ https://conemu.github.io/en/BashOnWindows.html
I did try conemu when bash for windows was first released, but ran into some problems. Will definitely try again, thanks! Though the wsltty linked below looks promising as well
I still use Putty for serial support since 'screen /dev/ttyACM0 115200' does not yet work in WSL.
Same here, but I can't figure out how to fix my main annoyance with the WSL: deactivating the bell!!! There is no reason for my computer to be making noises when I'm using tab completion!!!!!!!!!!
Have you tried this?
To disable beep of the bash you need to uncomment/add set bell-style none in your /etc/inputrc file
To disable beep of programs like vim (I've tested only with that) you need to create - if it's not already there - a .bash_profile and add setterm -blength 0
http://stackoverflow.com/a/36726662
To disable beep of the bash you need to uncomment/add set bell-style none in your /etc/inputrc file
To disable beep of programs like vim (I've tested only with that) you need to create - if it's not already there - a .bash_profile and add setterm -blength 0
http://stackoverflow.com/a/36726662
I don't use PuTTY either for the same reasons as you, but I do continue to use Pageant. I use a mix of Windows and Linux tools and I only really want to enter my SSH cert credentials at start-up. So I still end up installing it.
I also use Bitvise for tunneling on the Windows side as well.
I also use Bitvise for tunneling on the Windows side as well.
You can use Pageant with oter tools than Putty's own tools?
Sort of... the Bitvise SSH client I use for tunneling, it comes out of box understanding that Pageant is an available agent and will reference it; a lot of tools know that PuTTY is common and therefore expect the tools to be present.
With git and tools that use Git, PuTTY distributes plink.exe, which acts as a helper. So you set something like...
With git and tools that use Git, PuTTY distributes plink.exe, which acts as a helper. So you set something like...
GIT_SSH=c:\Program Files\Putty\plink.exe
Similarly, I use Git Bash, haven't used Putty in at least 3 years.
I always preferred putty's terminal window, not sure why, even though git bash's can be customized as well.. can you save sessions in git bash?
the problem is that putty's terminal window (as far as I know) doesn't work in local, so if you are doing local terminal-based work (vagrant git etc) and then you need to ssh, you can't do everything with putty's terminal, but you can do all of the above with git bash.
I use cygwin symlinked into the windows home directory, works great and unlike the microsoft ubuntu hack you can set permissions temporarily
I only miss the right click on the taskbar icon with the stored connections! I would be nice if you could pin aliases in the Ubuntu icon...
I'd love to try it, but I'm not in an environment where the build of windows I'm using is new enough yet.
Give MSYS2 a try: http://www.msys2.org/
Or cygwin that has easy to use gui package manager, iirc. Msys2 is a mess, but for non-development uses it should be ok, once you learn how to win in pacman.
It always makes me sad to see that the PuTTY download page is served over unsecure HTTP.
But the downloads themselves aren't -- those are served out of https://the.earth.li/~sgtatham/putty/0.68/
For later reference, here's some sha512sum excerpts for version 0.68:
ea03a52d344699c10e66e4f0424fba2b31d13d00ed24e1822c8ebe80fa589ce862419e5e852d6e1cb986637ea4e04d6cbe5ff3f1171ca403c9e55681877a712d w32/putty.zip
71c98de058e3f3fda9558cea955a5da28f41ae45464cafe9ea0b22ecf8cfeb56b1b047fb4b694b0c8e7c230f631dce9dd5bad26d70240b07b64ba27c3500d1fb w32/putty.exe
2b6b1acc51fc9cfe8a08e17afc4ac7d962af4575d55806456aa1a42c563f14457cc81d7e625191fd856b4be9a0e885cef78da4018d542010eba18718bb73fecd w32/putty-0.68-installer.msi
debceaa83bb48e7adcc99d03bf152f599477bf960da8c7ea3924925ac5322a9470c4254285d6ff403ad5da78c4c19c25ea5b0c1da45c61d9f0b306b16d0d28f7 w64/putty.zip
29d47c1f5a51e9d59720ccea8eacc317f4b8b839c71f957db713e62d2a9526502fefc01855be97e9e8020d1f343a6a14346a21f4843c12d93ee038a8f9810966 w64/putty.exe
8262c133e3569dcc188e5ac2360ebd3cc09d9edd2f78d6eaaf0e2762fba511de07ce614ba4fedf5f62fe64dd17d5a626dc63a579ee1fc1ef90f45e9e1f0c3d06 w64/putty-64bit-0.68-installer.msi
aacd9ec017e3cf56924d75d69f1610512662630c699ee09b4d9012f4e34e608b5b335444cf2529bcfe9c4edbded1c7247338d859385108544b27eeeb74d505c6 putty-src.zip
For later reference, here's some sha512sum excerpts for version 0.68:
ea03a52d344699c10e66e4f0424fba2b31d13d00ed24e1822c8ebe80fa589ce862419e5e852d6e1cb986637ea4e04d6cbe5ff3f1171ca403c9e55681877a712d w32/putty.zip
71c98de058e3f3fda9558cea955a5da28f41ae45464cafe9ea0b22ecf8cfeb56b1b047fb4b694b0c8e7c230f631dce9dd5bad26d70240b07b64ba27c3500d1fb w32/putty.exe
2b6b1acc51fc9cfe8a08e17afc4ac7d962af4575d55806456aa1a42c563f14457cc81d7e625191fd856b4be9a0e885cef78da4018d542010eba18718bb73fecd w32/putty-0.68-installer.msi
debceaa83bb48e7adcc99d03bf152f599477bf960da8c7ea3924925ac5322a9470c4254285d6ff403ad5da78c4c19c25ea5b0c1da45c61d9f0b306b16d0d28f7 w64/putty.zip
29d47c1f5a51e9d59720ccea8eacc317f4b8b839c71f957db713e62d2a9526502fefc01855be97e9e8020d1f343a6a14346a21f4843c12d93ee038a8f9810966 w64/putty.exe
8262c133e3569dcc188e5ac2360ebd3cc09d9edd2f78d6eaaf0e2762fba511de07ce614ba4fedf5f62fe64dd17d5a626dc63a579ee1fc1ef90f45e9e1f0c3d06 w64/putty-64bit-0.68-installer.msi
aacd9ec017e3cf56924d75d69f1610512662630c699ee09b4d9012f4e34e608b5b335444cf2529bcfe9c4edbded1c7247338d859385108544b27eeeb74d505c6 putty-src.zip
And obviously a network attacker would never think to modify the insecurely served downloads page to point to a different download URL.
This is a possibility. But downloads have been served out of "the.earth.li/~sgtatham/putty/" for years. Yes, it's owned by someone else and exploding turtles all the way down [1], but now that "the.earth.li/~sgtatham/putty/" is HTTPS, the checksums are properly authentic as attested by the same operator as the one who has supplied PuTTY downloads for years.
I've mirrored the most important checksums here, another HTTPS site, so that if any of them ever differ you know to distrust the files.
[1] https://news.ycombinator.com/item?id=7334269
I've mirrored the most important checksums here, another HTTPS site, so that if any of them ever differ you know to distrust the files.
[1] https://news.ycombinator.com/item?id=7334269
>I've mirrored the most important checksums here, another HTTPS site, so that if any of them ever differ you know to distrust the files.
Or maybe you're a very motivated attacker.
Or maybe you're a very motivated attacker.
This requires custom knowledge. If an attacker swaps out the page and serves the links from some other unusual site (or even the.earht.li), who is going to notice? Only old-school people with that custom knowledge who also check the source of the download link.
I find it bizarre that the server is managed by the guy who wrote dpkg (which involves GPG), yet still doesn't have https on it...
I find it bizarre that the server is managed by the guy who wrote dpkg (which involves GPG), yet still doesn't have https on it...
It also accounts for who administers that domain. Usually uncommon domain doesn't sound more secure than been provided from larger known sources.
At least the binaries are authenticode signed now, so checking they are legit is just a right click away.
How is that supposed to help? Even if the legitimate binaries are Authenticode-signed now, a malicious non-Authenticode-signed binary substituted by an attacker MITMing the insecure HTTP connection will appear to the downloader to look just like the legitimate non-Authenticode-signed binaries of previous versions that they’ve been downloading for years.
Because you can add the signing cert to your AppLocker whitelist, and now it will be checked every time it runs. Then you push that out by GPO, and now everyone has that same whitelist protection.
Also, as mentioned other places on the thread, the downloads are over HTTPS.
Edit: see the following https://technet.microsoft.com/en-us/library/dd723683(v=ws.10...
Also, as mentioned other places on the thread, the downloads are over HTTPS.
Edit: see the following https://technet.microsoft.com/en-us/library/dd723683(v=ws.10...
Right clicking is one click too many. Wouldn't it be better to get the binary securely in the first place?
At this point it's totally inexcusable. Just buy the SSL cert already, or get a free one from Let's Encrypt.
Note the "s". TLS 1.2, AES 256 GCM, ECDHE_RSA. Hard to ask for more than that.
https://the.earth.li/~sgtatham/putty/0.68/
https://the.earth.li/~sgtatham/putty/0.68/
The only "s" I see is in 'sgtatham' and 'releases'. If the webpage that lists the link is unsecured, who's to say that the listed links are valid?
http://www.chiark.greenend.org.uk/~sgtatham/putty/releases/0...
http://www.chiark.greenend.org.uk/~sgtatham/putty/releases/0...
Reminds me of this article posted back in 2014 by Chris Palmer https://noncombatant.org/2014/03/03/downloading-software-saf...
I wonder why it's still the case. Lack of resources to enable HTTPS ? lack of manpower ? ..
When I started my career nearly 20 years ago, back before one could convince a Fortune-100 company to let its peons use Linux on our desktops and Apple hadn't yet had its renascence, PuTTY was a veritable godsend: it did what was needed, and did it remarkably well.
It's been years since I was allowed to add a Linux box, and years since I switched to Linux full-time, and now I honestly think that I'd reject a job offer which required Windows (and maybe even one which required macOS) — but for all those years of Just Working™, thanks PuTTY!
It's been years since I was allowed to add a Linux box, and years since I switched to Linux full-time, and now I honestly think that I'd reject a job offer which required Windows (and maybe even one which required macOS) — but for all those years of Just Working™, thanks PuTTY!
PuTTY is a good example where the author resisted to turn it into bloatware. It is minimal and does the thing it is supposed to do.
Pretty happy with the Kitty fork of putty, which is a lot less spartan with features.
https://www.fosshub.com/KiTTY.html
https://www.fosshub.com/KiTTY.html
And I would recommend MobaXterm, definitely also worth to try.
http://mobaxterm.mobatek.net/
http://mobaxterm.mobatek.net/
I just wanted to recommend ZOC (Which may some people still know from the good old Amiga times). It's available for Windows and MacOS. ZOC does have some really incredible features (integrated file transfer, multi-execution, team-directories). It's similar prices as MobaXterm, but doesn't have XWindows support.
If you don't need X-Window support, but rich terminal/ssh features, it may be a ($70) try.
https://www.emtec.com/zoc/index.html
If you don't need X-Window support, but rich terminal/ssh features, it may be a ($70) try.
https://www.emtec.com/zoc/index.html
It's definitely very good and has a lot to offer, but I still can't justify $70 for some reason. The free version offers enough functionality to be a very good PuTTY alternative though.
I was about to, until I read the fine print and realized it's $70 to buy, but you'll only get updates for a year; after that you buy again or stick with your current version - no bug fixes. Were there a more reasonable price for non-commercial use, I would have no problem buying sooner.
On the other hand, its has the only windows Mosh implementation...the best thing since sliced bread and tmux!
On the other hand, its has the only windows Mosh implementation...the best thing since sliced bread and tmux!
For mosh there's a cygwin build and also https://chrome.google.com/webstore/detail/mosh/ooiklbnjmhbcg...
Since I switched to cygwin for ssh on windows I haven't looked back, putty is awful for someone coming from Linux normally and only forced to use Windows for certain things.
Yeah. I use a modified mintty-solarized-dark theme for cygwin, and symlinked my windows home dir into the cygwin one.
I never got around on writing a blag about how to do this, but I like it a lot
I never got around on writing a blag about how to do this, but I like it a lot
Exactly the same for me, mintty with solarized theme because I use solarized on all my other terminals in Fedora for example.
I used to use PuTTY as my go-to windows SSH client. After some time I decided to integrate a piece of software with Pageant and I decided to open up the source to PuTTY. The poor quality of the source code terrified me, it seemed sort of "all over the place" and there seemed to be little to no concern for security and defensive programming.
Secure software design and development is what I do for a living, so perhaps I am a bit more paranoid than the casual user - but this is one of the most widely deployed security tools in an enterprise, this shouldn't be "okay". Some defensive efforts are just common sense and are recommended by your compiler (eg. don't use sprintf and strcpy when you can snprintf and strncpy). Also, it doesn't hurt to check error conditions consistently.
PS. To echo what a lot of folks have already said, how on earth can the author implement cryptographic algorithms and simultaneously think there is any value in publishing a hash of the binary "for security". Using a hash as a means of integrity validation in the context of security raises huge red flags about the authors mindset.
Secure software design and development is what I do for a living, so perhaps I am a bit more paranoid than the casual user - but this is one of the most widely deployed security tools in an enterprise, this shouldn't be "okay". Some defensive efforts are just common sense and are recommended by your compiler (eg. don't use sprintf and strcpy when you can snprintf and strncpy). Also, it doesn't hurt to check error conditions consistently.
PS. To echo what a lot of folks have already said, how on earth can the author implement cryptographic algorithms and simultaneously think there is any value in publishing a hash of the binary "for security". Using a hash as a means of integrity validation in the context of security raises huge red flags about the authors mindset.
Putty used to be the go-to tool for Windows SSH, but nowadays I'm using Bitvise SSH client. It's worth a try.
Have you ever tried XShell5?
https://www.netsarang.com/products/xsh_overview.html
It's free for Home/school use. I have tried all Windows SSH clients, and it is by far the best SSH client I have ever used.
It's free for Home/school use. I have tried all Windows SSH clients, and it is by far the best SSH client I have ever used.
What advantages does it offer over PuTTY?
Easy to open multiple terminals from the same connection, built-in SFTP. Probably better font rendering or something.
Odd, I moved into the opposite direction. But now I'm using git bash.
SecureCRT is what I always used on Windows but it's not free.
I've stopped using PuTTY and now use MinTTY with the Ubuntu subsystem and the regular old Ubuntu SSH client. Specifically this thing: https://github.com/mintty/wsltty
It's real nice and even supports 24bit colour if you're into that.
It's real nice and even supports 24bit colour if you're into that.
Another option: SSH inside WSL in windows 10.
The default terminal was a bit limited for me, but I hear they're making big improvements to it in later builds.
I tried that briefly too, and I couldn't launch screen. It seems to trigger some old bug in screen. How far is the WSL terminal from the usual fanfare (screen, tmux, proper colors in the terminal and text editors, and other edge cases for scrollback etc.) ?
Loved putty for years, but these days I've been using mosh over ssh. Having persistent sessions and text prediction means no more dropped connections, no more waiting a couple seconds if the wifi is buggy for whatever reason. Personally I use chrome's mosh extension: https://chrome.google.com/webstore/detail/mosh/ooiklbnjmhbcg...
Works great and I can pin it to my taskbar.
Relevant recent discussion on mosh: https://news.ycombinator.com/item?id=11572146
Relevant recent discussion on mosh: https://news.ycombinator.com/item?id=11572146
The State Synchronization Protocol still does not have specification doco, as far as I am aware.
Putty is great and has been for a very long time. Always glad to see it still in active development.
Though, for Windows, once I found MobaXterm I never looked back. Of course on the Linux side nothing to me beats tmux or terminator.
Though, for Windows, once I found MobaXterm I never looked back. Of course on the Linux side nothing to me beats tmux or terminator.
And the SSH part of MobaXterm is based on PuTTY
Yes, and unfortunately you have to use the version in there (you can't upgrade nor use another client). Otherwise I love mobaxterm and bought a few licenses.
I honestly didn't know that. Very cool!
I wish they would finally implement file transfers via copy/paste mechanism inside an active terminal window. As far as I know this feature would be unique across platforms.
If someone does know of an SSH terminal client that does this, please reply.
If someone does know of an SSH terminal client that does this, please reply.
Reminds me of the bad old days of kermit and x/y/zmodem. http://www.extraputty.com/features/xmodem.html looks like a throwback to those days, over an ssh session. I wonder what you have to run on the server side for it to work?
Does uuencode or base64 work for you? I use it a lot to move stuff (aka my toolkit) to systems where I'm connected via citrix -> rdp -> ssh -> ssh. Amazingly, it works fine, though it can be slow.
Does uuencode or base64 work for you? I use it a lot to move stuff (aka my toolkit) to systems where I'm connected via citrix -> rdp -> ssh -> ssh. Amazingly, it works fine, though it can be slow.
$uuencode sheet1.xml sheet1.xml | pbcopy
$uudecode (paste, which varies depending on how I'm connected)
$ls -l sheet1.xml
There is another throwback for me here when one of our clients had disabled Citrix file transfers and only allowed text based clipboard (due to imposed security policies).
So we had to:
So we had to:
- zip a directory hierarchy or a single file uuencode
- copy to shared clipboard
- paste into a terminal on the other end using a here document
- uudecode the output
- checksum the source/destination copy for file integrity purposes
I wonder what you have to run on the server side for it to work?
sz(1) I assume (a tool with considerable seniority). Found for example in the lrzsz package on Debian.
sz(1) I assume (a tool with considerable seniority). Found for example in the lrzsz package on Debian.
EDIT: Realized you wanted to paste a file, instead of drop a file. I'm not really aware of anything that manages that.
This page[1] says SecureCRT can do it, and I saw some things referencing that Konsole can too. I searched for 'drag and drop zmodem' to get started.
[1] https://www.vandyke.com/support/tips/dragdropft.html
This page[1] says SecureCRT can do it, and I saw some things referencing that Konsole can too. I searched for 'drag and drop zmodem' to get started.
[1] https://www.vandyke.com/support/tips/dragdropft.html
How about dragging to the terminal? This is a feature of mobaxterm. Upon ssh'ing to a system, a sftp session is automatically opened as well.
Thanks that's the form of the function I was referring to.
Indeed as previously mentioned there are xmodem/uuencode alternatives but none of them would be as efficient and reliable as native SFTP/SCP.
Indeed as previously mentioned there are xmodem/uuencode alternatives but none of them would be as efficient and reliable as native SFTP/SCP.
Years ago, when I worked on Windows, putty was a great soft. Since that time I switched to MacOS/Linux with Fish shell at work and running just a simple ssh command from terminal is a bliss. I still have Windows machine at home and I am missing terminal every time I must click though to login to my remote machine. Putty is no fun anymore... User interface has not been improved for years and, sadly, it's not working for me anymore.
Try WSL, I think it is a good putty substitute.
Putty is fantastically fast on Linux! I wish there was a way to use it as an xterm replacement without having to SSH to localhost.
Has anybody figured out how to do this?
Has anybody figured out how to do this?
Putty is actually quite slow, due to not implementing AES with the Intel intrinsics. Trying to transfer files using pscp, or WinSCP (which uses putty) over a local network link runs into a CPU bottleneck.
Has much changed since this?
https://noncombatant.org/2014/03/03/downloading-software-saf...
Related comments: https://news.ycombinator.com/item?id=9577861
https://noncombatant.org/2014/03/03/downloading-software-saf...
Related comments: https://news.ycombinator.com/item?id=9577861
I'd like the putty download to be over https and the installer to be signed.
Or, at least, sha512 hashes available on the https download site.
As it is, the download source for putty is one of the weakest chains in internet security!
The downloaded binary is served over https, it's signed.
Putty always served me well when stuck on a windows boxen, so it's good to know it hasn't been forgotten.
Two things for those of you who use putty I think would be mosh (chromium if you have to, cygwin my preffered), and winscp.
Two things for those of you who use putty I think would be mosh (chromium if you have to, cygwin my preffered), and winscp.
When is PuTTY going to support URL highlighting? Even plain old xterm can do it. Someone made a patch for it once but I'd rather have the support built in.
I've got 4 instances open right now. Thanks, Simon and co!
The default colour scheme on Putty is not very good in my opinion. know I can change it manually but it would be nice if the default for new connections was better.
Lack of of Ed25519 support is a deal-breaker for me. It's one of the reasons why I'm using SecureCRT instead.
Isn't Ed25519 support added in this release?
Oops, indeed, I somehow missed that.
PuTTY is one of the first things I install when setting up a new Windows machine!
Now if only I could click a link and have it open in a browser.
I'm currently using a PuTTY fork called KiTTY and it has that feature as well: https://www.9bis.net/kitty/?page=URL%20hyperlinks
[deleted]