11–20 of 119 posts
Earlier quoted context omitted.
Kinda unforgivable to be on front page of HN in 2021 without https
Why exactly? Other than a lot of "potential problems" security theater? People still send postcards, where they don't care if people read what's written on it..
Are there are any security precautions in using ssh (or telnet, netcat or curl for that matter) to connect to an unknown service like this?
Earlier quoted context omitted.
Kinda unforgivable to be on front page of HN in 2021 without https
Why exactly? Other than a lot of "potential problems" security theater? People still send postcards, where they don't care if people read what's written on it..
Try it: `ssh sshtron.zachlatta.com`
Earlier quoted context omitted.
Why exactly? Other than a lot of "potential problems" security theater? People still send postcards, where they don't care if people read what's written on it..
Practically speaking, it is because some modern browsers (and extensions) will throw up an error (either by-passable or not) if it's HTTP only. Yeah it's not necessary in many cases, but it's growing to be the standard expected behavior.
Earlier quoted context omitted.
Why exactly? Other than a lot of "potential problems" security theater? People still send postcards, where they don't care if people read what's written on it..
Practically speaking, it is because some modern browsers (and extensions) will throw up an error (either by-passable or not) if it's HTTP only. Yeah it's not necessary in many cases, but it's growing to be the standard expected behavior.
Are there are any security precautions in using ssh (or telnet, netcat or curl for that matter) to connect to an unknown service like this?
A privacy precaution would be to `ssh -o PreferredAuthentications=password -o PubkeyAuthentication=no jobs.hackclub.com`. By default ssh will send all its public keys to a server unless given an identify file to use as an arg or in ~/.ssh/config.