Video Tut: Set Up SSH Access To Your Own Pinephone .onion (security enhancement)
#1
Lightbulb 
Many Pinephone users have ssh access open. Result being their Pinephone's ssh server shows up/is by default accessible on the open internet. This can be dangerous (especially given many undoubtedly use weak number passwords (ie: guessable numbers doubling for screen unlock pin)),

So I thought fellow Pinephone users may find this video helpful.

A quick (5min), easy video walkthrough/guide. A simple to implement security enhancement (using Mobian Pinephone as example in the video but will work on any Linux).
Make your Pinephone ssh server only accessible as a Tor .onion address (Blocking access/portscans/shodan for users on standard internet).

https://youtu.be/syKZNMVxTM4

After following the video, edit  /etc/ssh/sshd_config and uncomment/edit the line to match:

ListenAddress 127.0.0.1

Optionally (in case anything in ssh config goes wrong) block using iptables issue the following afterwards:

Code:
sudo iptables -A INPUT -p tcp -s 127.0.0.1 --dport 22 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 22 -j DROP

The above iptables commands block ssh access to your Pinephone from all parties outside your Pinephone localhost address itself (used by tor locally). This means it won't show up when portscanned, won't show up on shodan, and cannot be brute forced without having your personal .onion address. Smile
- RTP

"In the beginner's mind there are many possibilities, in the expert's mind there are few." -Shunryu Suzuki


[ Pinephone Original | Pinetab v1 / v2 Enjoyer ]


Linux Device Privacy / Security Playlist





Possibly Related Threads…
Thread Author Replies Views Last Post
  bookworm vs trixie discussion for mobian in pinephone regular. zetabeta 15 1,514 03-25-2024, 09:07 AM
Last Post: anonymous
  unofficial kali linux for pinephone help needed pinesmell 5 3,452 01-08-2024, 02:50 PM
Last Post: ERPlegend
  Axolotl on PinePhone / Mobian arno_nuehm 219 160,365 03-26-2023, 01:49 AM
Last Post: shulamy
  PinePhone won't boot after software update jb2000 2 1,250 03-17-2023, 07:26 AM
Last Post: Zebulon Walton
Wink Pinephone lost graphic during mobian system upgrade cmpin 4 2,060 03-01-2023, 04:45 PM
Last Post: anonymous
  Debian bookworm security repo user641 2 1,476 02-17-2023, 01:12 AM
Last Post: user641
  Battery problem with a Pinephone keyboard and Mobian elode 2 2,102 12-22-2022, 07:10 PM
Last Post: acid andy
  Sending Pinephone SMS from Desktop biketool 5 2,752 09-13-2022, 01:46 PM
Last Post: anonymous
  How to get Pinetime working with Pinephone arkadione 12 6,946 08-28-2022, 12:30 PM
Last Post: Fish
  PP Keyboard doesn't charge Pinephone (Mobian) jojuma 1 1,158 08-06-2022, 01:10 AM
Last Post: elode

Forum Jump:


Users browsing this thread: 1 Guest(s)