Security and privacy

Nobody gets in without your yes

• Having the ID isn’t enough. It also takes the password, and the password is new every time you share.
• You approve every computer. FeuSh asks before letting anyone in. If nobody answers within 60 seconds, the connection is rejected.
• Wrong passwords pause the entry. After 20 wrong passwords in total, FeuSh stops accepting connections for 10 minutes. If it wasn’t you, stop sharing and share again to change the password.
• You see everything. Every command shows on the shared computer before it runs, and you can stop it.

The connection

The connection is encrypted end to end and goes straight between the two computers. When the network doesn’t allow that, the traffic goes through a relay that can’t read it.

On the same local network, computers find each other by ID even without internet.

The 9-digit numbers

When you share, FeuSh also publishes a short number for your computer in a small directory (dir.feush.com), so it can be said over the phone.

The directory sees the IP address of computers that register or look up a number, and which number belongs to which ID. It never sees the password or the traffic, and the connection never goes through it.

To not use it, share with feu share --no-directory. People then connect with the long ID.

The log

Each shared computer keeps its own log: who came in, what ran, when and how it ended. It also notes screenshots and files that were sent or brought, but never their content, nor the output of the commands, nor the password.

The log stays on that computer. FeuSh doesn’t upload it anywhere.

Report a problem

If you find a security problem, write to [email protected].