SetuSSH v0.1.2-build.13

What's in v0.1.2 build 13

Updating on Ubuntu or Debian with apt: this build keeps the version number 0.1.2, so apt sees nothing new. Update with sudo apt update && sudo apt install --reinstall setussh.

Tunnels

• Start works again after a tunnel fails. Before, if a tunnel could not start once (a port already in use, a refused sign-in, an unanswered host key question), pressing Start again did nothing until SetuSSH was restarted.
• Stop now stops straight away, even while something is connected through the tunnel. Before, Stop could wait for as long as a connection stayed open, while the row still said "running". Stopping a tunnel now also closes the connections running through it.
• When a tunnel cannot start, its row says why in plain words, for example that the port is already in use on this computer, or that the server would not open the port.
• When a connection through a running tunnel fails, the row now says why, for example that the server refused to forward it or could not reach the destination. Before, the connection simply closed with no message.
• The "Tunnel started" message no longer pops up again and again while traffic passes through a tunnel.
• The New tunnel window checks the ports and hosts before saving and says what to fix. An empty port field used to make Create do nothing.
• A session that connects through a tunnel on another session, such as one saved as 127.0.0.1:2221, now says when that tunnel is not running, instead of asking whether the SSH server is running.
• A tunnel's traffic count now includes the last data received.
• A SOCKS tunnel whose SSH connection was going down could raise an unexpected error. It now refuses just that one connection.

Everything else is as in build 12.

---

SetuSSH, terminal, files and tunnels on one connection.

Free for 7 days, no key and no account. After that it keeps
working with up to 10 saved sessions; the AI assistant needs a key.
Request full access any time.

Windows and macOS are still under test. SetuSSH is developed
daily on Linux, so that build has the most real hours behind it.
The Windows and macOS builds pass the same automated checks and a
platform audit, but expect rough edges. If it crashes, the app
offers to send a report, which is the fastest route to a fix.

Windows

Download SetuSSH-Setup-*.exe and run it. Builds are not
code-signed yet, so SmartScreen shows "Unknown publisher". Click
More info, then Run anyway.

macOS

macOS will say "SetuSSH is damaged and can't be opened." It is
not damaged. That is what Gatekeeper shows for any app Apple has not
notarised, and the checksums below prove the download is intact.

Do not open the app from the disk image. In order:

1. Open the .dmg: arm64 for Apple Silicon, x64 for Intel.
2. Drag SetuSSH onto the Applications folder beside it.
3. Eject the disk image.
4. Run this once, then open SetuSSH normally:

xattr -cr /Applications/SetuSSH.app

Or use System Settings, then Privacy & Security, then
Open Anyway, after the first blocked attempt. On macOS 15 and
later the old right-click and Open trick no longer works.

Linux

The .deb is recommended: sudo apt install ./SetuSSH-*-amd64.deb
The .AppImage is portable but needs libfuse2 and may require
--no-sandbox.

SetuSSH v0.1.2-build.12

What's in v0.1.2 build 12

Updating on Ubuntu or Debian with apt: this build keeps the version number 0.1.2, so apt sees nothing new. Update with sudo apt update && sudo apt install --reinstall setussh.

Smaller screens

• The window for adding or editing a server now always fits inside SetuSSH. On a laptop screen at 125% or 150% scaling, its title and the Create and Save buttons stay in view, and only the form scrolls. Before, the window could run off the top and bottom of the screen.
• SetuSSH now opens at a size that fits your screen, and it can be made smaller than before. On a small laptop screen with Windows scaling, the bottom of the window no longer sits behind the taskbar.
• The window that asks you to approve an AI client's action fits short windows the same way.
• If Create or Save finds a problem with what you entered, the message now scrolls into view.

Everything else is as in build 11.

---

SetuSSH, terminal, files and tunnels on one connection.

Free for 7 days, no key and no account. After that it keeps
working with up to 10 saved sessions; the AI assistant needs a key.
Request full access any time.

Windows and macOS are still under test. SetuSSH is developed
daily on Linux, so that build has the most real hours behind it.
The Windows and macOS builds pass the same automated checks and a
platform audit, but expect rough edges. If it crashes, the app
offers to send a report, which is the fastest route to a fix.

Windows

Download SetuSSH-Setup-*.exe and run it. Builds are not
code-signed yet, so SmartScreen shows "Unknown publisher". Click
More info, then Run anyway.

macOS

macOS will say "SetuSSH is damaged and can't be opened." It is
not damaged. That is what Gatekeeper shows for any app Apple has not
notarised, and the checksums below prove the download is intact.

Do not open the app from the disk image. In order:

1. Open the .dmg: arm64 for Apple Silicon, x64 for Intel.
2. Drag SetuSSH onto the Applications folder beside it.
3. Eject the disk image.
4. Run this once, then open SetuSSH normally:

xattr -cr /Applications/SetuSSH.app

Or use System Settings, then Privacy & Security, then
Open Anyway, after the first blocked attempt. On macOS 15 and
later the old right-click and Open trick no longer works.

Linux

The .deb is recommended: sudo apt install ./SetuSSH-*-amd64.deb
The .AppImage is portable but needs libfuse2 and may require
--no-sandbox.

SetuSSH v0.1.2-build.11

What's in v0.1.2 build 11

Updating on Ubuntu or Debian with apt: this build keeps the version number 0.1.2, so apt sees nothing new. Update with sudo apt update && sudo apt install --reinstall setussh.

Publisher name

• The app, the installers and the licence now name SetuSSH as the publisher and copyright holder.
• On Windows, the installer updates your existing SetuSSH in place, as before. If you pinned SetuSSH to the taskbar, pin it again after updating so the pinned icon and the open window share one button. SetuSSH's notification settings in Windows start again from the defaults.
• On macOS, the app's identifier has changed, so macOS may ask once more for permissions it asked for before.

Everything else is as in build 10.

---

SetuSSH, terminal, files and tunnels on one connection.

Free for 7 days, no key and no account. After that it keeps
working with up to 10 saved sessions; the AI assistant needs a key.
Request full access any time.

Windows and macOS are still under test. SetuSSH is developed
daily on Linux, so that build has the most real hours behind it.
The Windows and macOS builds pass the same automated checks and a
platform audit, but expect rough edges. If it crashes, the app
offers to send a report, which is the fastest route to a fix.

Windows

Download SetuSSH-Setup-*.exe and run it. Builds are not
code-signed yet, so SmartScreen shows "Unknown publisher". Click
More info, then Run anyway.

macOS

macOS will say "SetuSSH is damaged and can't be opened." It is
not damaged. That is what Gatekeeper shows for any app Apple has not
notarised, and the checksums below prove the download is intact.

Do not open the app from the disk image. In order:

1. Open the .dmg: arm64 for Apple Silicon, x64 for Intel.
2. Drag SetuSSH onto the Applications folder beside it.
3. Eject the disk image.
4. Run this once, then open SetuSSH normally:

xattr -cr /Applications/SetuSSH.app

Or use System Settings, then Privacy & Security, then
Open Anyway, after the first blocked attempt. On macOS 15 and
later the old right-click and Open trick no longer works.

Linux

The .deb is recommended: sudo apt install ./SetuSSH-*-amd64.deb
The .AppImage is portable but needs libfuse2 and may require
--no-sandbox.

SetuSSH v0.1.2-build.9

What's in v0.1.2 build 9

Updating on Ubuntu or Debian with apt: this build keeps the version number 0.1.2, so apt sees nothing new. Update with sudo apt update && sudo apt install --reinstall setussh.

Security fixes from a full review of SetuSSH

AI assistant

• Commands it runs without asking are now judged by what they actually do. Some commands that change things were treated as reads, among them kubectl config set-credentials, git remote set-url, git branch -D, docker context use and fuser -k. They now ask first, and so do DNS lookups, which could carry data off a server.
• Downloading code and piping it into a shell, reverse shells, and writing to SSH keys, cron, sudoers or shell start-up files always ask, whatever the assistant is allowed to do.
• Secrets in lines that set a variable such as DB_PASSWORD or GITHUB_TOKEN are removed before anything goes to the AI provider.
• An approval shows the whole command, and says when part of a long file is not shown. A note the assistant wants to keep is shown in full, with the servers it applies to.

MCP

• "Run routine" now runs only reads, and commands SetuSSH can tell only look. Writing or uploading a file, typing into a terminal and every other command ask first. The setting is now called "Run routine reads, ask before changes".

Files and connections

• File transfers only use a local file or folder you picked in SetuSSH's own dialog or dropped on the window.
• Downloads keep a file's restrictive permissions and never write through a link. "Edit in place" copies are kept where only you can read them.
• Remote Desktop checks a certificate you pinned even when the server shows a different one signed by an authority.
• Tunnels in an imported file no longer start by themselves.
• SSH no longer offers compression before you have logged in.

The app

• Linux AppImage: it no longer looks for libraries in the folder it is started from. If you use the AppImage, download it again.
• The installed app can no longer be run as a plain Node.js program, or have code loaded into it through environment settings or a debugger.
• The window gets only the clipboard and fullscreen, never the camera, microphone or other devices, and released builds no longer offer developer tools.

Everything else is as in build 8.

---

SetuSSH, terminal, files and tunnels on one connection.

Free for 7 days, no key and no account. After that it keeps
working with up to 10 saved sessions; the AI assistant needs a key.
Request full access any time.

Windows and macOS are still under test. SetuSSH is developed
daily on Linux, so that build has the most real hours behind it.
The Windows and macOS builds pass the same automated checks and a
platform audit, but expect rough edges. If it crashes, the app
offers to send a report, which is the fastest route to a fix.

Windows

Download SetuSSH-Setup-*.exe and run it. Builds are not
code-signed yet, so SmartScreen shows "Unknown publisher". Click
More info, then Run anyway.

macOS

macOS will say "SetuSSH is damaged and can't be opened." It is
not damaged. That is what Gatekeeper shows for any app Apple has not
notarised, and the checksums below prove the download is intact.

Do not open the app from the disk image. In order:

1. Open the .dmg: arm64 for Apple Silicon, x64 for Intel.
2. Drag SetuSSH onto the Applications folder beside it.
3. Eject the disk image.
4. Run this once, then open SetuSSH normally:

xattr -cr /Applications/SetuSSH.app

Or use System Settings, then Privacy & Security, then
Open Anyway, after the first blocked attempt. On macOS 15 and
later the old right-click and Open trick no longer works.

Linux

The .deb is recommended: sudo apt install ./SetuSSH-*-amd64.deb
The .AppImage is portable but needs libfuse2 and may require
--no-sandbox.

SetuSSH v0.1.2-build.8

What's in v0.1.2 build 8

Updating on Ubuntu or Debian with apt: this build keeps the version number 0.1.2, so apt sees nothing new. Update with sudo apt update && sudo apt install --reinstall setussh.

Security and library updates

• SetuSSH now runs on Electron 41.10.7, up from 41.7.1. It carries the security fixes released since then for Chromium and V8, the browser and JavaScript engines inside the app, including fixes for 12 published vulnerabilities.
• Newer versions of the libraries behind the AI assistant (the Anthropic and OpenAI clients), the menus, dialogs and other controls, and the app's internal state.

Everything else is as in build 7.

---

SetuSSH, terminal, files and tunnels on one connection.

Free for 7 days, no key and no account. After that it keeps
working with up to 10 saved sessions; the AI assistant needs a key.
Request full access any time.

Windows and macOS are still under test. SetuSSH is developed
daily on Linux, so that build has the most real hours behind it.
The Windows and macOS builds pass the same automated checks and a
platform audit, but expect rough edges. If it crashes, the app
offers to send a report, which is the fastest route to a fix.

Windows

Download SetuSSH-Setup-*.exe and run it. Builds are not
code-signed yet, so SmartScreen shows "Unknown publisher". Click
More info, then Run anyway.

macOS

macOS will say "SetuSSH is damaged and can't be opened." It is
not damaged. That is what Gatekeeper shows for any app Apple has not
notarised, and the checksums below prove the download is intact.

Do not open the app from the disk image. In order:

1. Open the .dmg: arm64 for Apple Silicon, x64 for Intel.
2. Drag SetuSSH onto the Applications folder beside it.
3. Eject the disk image.
4. Run this once, then open SetuSSH normally:

xattr -cr /Applications/SetuSSH.app

Or use System Settings, then Privacy & Security, then
Open Anyway, after the first blocked attempt. On macOS 15 and
later the old right-click and Open trick no longer works.

Linux

The .deb is recommended: sudo apt install ./SetuSSH-*-amd64.deb
The .AppImage is portable but needs libfuse2 and may require
--no-sandbox.

SetuSSH v0.1.2-build.7

What's in v0.1.2 build 7

Updating on Ubuntu or Debian with apt: this build keeps the version number 0.1.2, so apt sees nothing new. Update with sudo apt update && sudo apt install --reinstall setussh.

SetuSSH downloads have a new home

• Builds are now published at github.com/SetuSSH/setussh-releases, under the SetuSSH organisation on GitHub. setussh.com and the apt repository stay where they are.
• The app now checks the new address for updates. Earlier builds still check the old one, which carries this build too, so they are told about it. After you install build 7, updates come from the new address.

Everything else is as in build 6.

---

SetuSSH, terminal, files and tunnels on one connection.

Free for 7 days, no key and no account. After that it keeps
working with up to 10 saved sessions; the AI assistant needs a key.
Request full access any time.

Windows and macOS are still under test. SetuSSH is developed
daily on Linux, so that build has the most real hours behind it.
The Windows and macOS builds pass the same automated checks and a
platform audit, but expect rough edges. If it crashes, the app
offers to send a report, which is the fastest route to a fix.

Windows

Download SetuSSH-Setup-*.exe and run it. Builds are not
code-signed yet, so SmartScreen shows "Unknown publisher". Click
More info, then Run anyway.

macOS

macOS will say "SetuSSH is damaged and can't be opened." It is
not damaged. That is what Gatekeeper shows for any app Apple has not
notarised, and the checksums below prove the download is intact.

Do not open the app from the disk image. In order:

1. Open the .dmg: arm64 for Apple Silicon, x64 for Intel.
2. Drag SetuSSH onto the Applications folder beside it.
3. Eject the disk image.
4. Run this once, then open SetuSSH normally:

xattr -cr /Applications/SetuSSH.app

Or use System Settings, then Privacy & Security, then
Open Anyway, after the first blocked attempt. On macOS 15 and
later the old right-click and Open trick no longer works.

Linux

The .deb is recommended: sudo apt install ./SetuSSH-*-amd64.deb
The .AppImage is portable but needs libfuse2 and may require
--no-sandbox.

SetuSSH v0.1.2-build.10

What's in v0.1.2 build 10

Updating on Ubuntu or Debian with apt: this build keeps the version number 0.1.2, so apt sees nothing new. Update with sudo apt update && sudo apt install --reinstall setussh.

Electron 43

• SetuSSH now runs on Electron 43 (Chromium 150), which is supported and gets security fixes. Electron 41, used up to build 9, has reached the end of its support.
• On macOS, desktop notifications now need a signed app, and SetuSSH's Mac builds are not signed yet. When a notification cannot be shown there, the Dock icon bounces instead.

Security

• Commands the AI assistant runs without asking always run the real program, even when the server defines an alias or shell function of the same name. type and jobs now ask first.
• Settings has a new AI activity section: the latest actions the AI assistant or a connected AI client took, and whether that record has been changed outside SetuSSH.
• The MCP server limits how fast a client can call it. When full access trusts a server's host key for the first time, a notification says so as it happens.
• The Remote Desktop connection helper answers only SetuSSH's own window.

Everything else is as in build 9.

---

SetuSSH, terminal, files and tunnels on one connection.

Free for 7 days, no key and no account. After that it keeps
working with up to 10 saved sessions; the AI assistant needs a key.
Request full access any time.

Windows and macOS are still under test. SetuSSH is developed
daily on Linux, so that build has the most real hours behind it.
The Windows and macOS builds pass the same automated checks and a
platform audit, but expect rough edges. If it crashes, the app
offers to send a report, which is the fastest route to a fix.

Windows

Download SetuSSH-Setup-*.exe and run it. Builds are not
code-signed yet, so SmartScreen shows "Unknown publisher". Click
More info, then Run anyway.

macOS

macOS will say "SetuSSH is damaged and can't be opened." It is
not damaged. That is what Gatekeeper shows for any app Apple has not
notarised, and the checksums below prove the download is intact.

Do not open the app from the disk image. In order:

1. Open the .dmg: arm64 for Apple Silicon, x64 for Intel.
2. Drag SetuSSH onto the Applications folder beside it.
3. Eject the disk image.
4. Run this once, then open SetuSSH normally:

xattr -cr /Applications/SetuSSH.app

Or use System Settings, then Privacy & Security, then
Open Anyway, after the first blocked attempt. On macOS 15 and
later the old right-click and Open trick no longer works.

Linux

The .deb is recommended: sudo apt install ./SetuSSH-*-amd64.deb
The .AppImage is portable but needs libfuse2 and may require
--no-sandbox.