Show HN: I made Devzat – It's like Discord but in the terminal, over SSH • Hacker News Board

Re: Show HN: I made Devzat – It's like Discord but in the terminal, over SSH

#131

Post by ilaksh » Wed, Mar 16, 2022, 9:50 AM UTC

Seems frozen

Re: Show HN: I made Devzat – It's like Discord but in the terminal, over SSH

#132

Post by raspyberr » Wed, Mar 16, 2022, 10:09 AM UTC

zozbot234 wrote: post #129

0xbadcafebee wrote: post #24

> It's like discord but in the terminal, over SSH so it's IRC?

More like a BBS partyline. IRC requires a custom client, not just a terminal connection.

You can do IRC just with nc.

Re: Show HN: I made Devzat – It's like Discord but in the terminal, over SSH

#133

Post by OrderlyTiamat » Wed, Mar 16, 2022, 10:54 AM UTC

leowoo91 wrote: post #120

Did you know you are exposing your identity for each "permission denied" error? SSH repeatedly tries all of your public keys to authenticate. Someone was able to harvest that and figure multiple github profiles of the client in past.

huh that's... really bad. Is there some way of turning that off? grepping through the man file didn't tell me about any options.

Re: Show HN: I made Devzat – It's like Discord but in the terminal, over SSH

#134

Post by AlecSchueler » Wed, Mar 16, 2022, 11:20 AM UTC

Aeolun wrote: post #108

kevinnotspacey wrote: post #103

Earlier quoted context omitted.

My age is very similar to yours :P

Proving his point?

Their point, surely, as quackduck may not be male.

Re: Show HN: I made Devzat – It's like Discord but in the terminal, over SSH

#135

Post by rmbyrro » Wed, Mar 16, 2022, 12:28 PM UTC

deutschew wrote: post #119

quackduck wrote: post #111

Earlier quoted context omitted.

Oh, interesting I guess it just feels like people into tech and software would yk, not engage in hate speech. Then again, I'm pretty new to the world in general.

Quoted post unavailable.

He also loves monopolies

Re: Show HN: I made Devzat – It's like Discord but in the terminal, over SSH

#136

Post by Brian_K_White » Wed, Mar 16, 2022, 12:35 PM UTC

worthless-trash wrote: post #85

sonicggg wrote: post #23

Earlier quoted context omitted.

But unfortunately it is highly censored. And if you're part of any community that is banned, your account is banned as well. It happens often. Something I experienced, as a former member of a nootropics server. I don't find the service very trustworthy, but I think that if you're a gamer, it may work out just fine for you.

I got banned for demonstrating spectre and meltdown to a work audience, during the presentation. FML.

This is everything right here.

Re: Show HN: I made Devzat – It's like Discord but in the terminal, over SSH

#137

Post by jart » Wed, Mar 16, 2022, 1:18 PM UTC

exabrial wrote: post #19

make sure one's ssh-agent forwarding is off when connecting to strange hosts :)

Are you telling me that everyone who clones a repo from GitHub via SSH is in fact authorizing GitHub to use their private key? Why hasn't anyone made a slick web page with a catchy name like AuthBleed or SecretAgent to describe that one yet?

Re: Show HN: I made Devzat – It's like Discord but in the terminal, over SSH

#138

Post by jart » Wed, Mar 16, 2022, 1:42 PM UTC

quackduck wrote: post #82

Holy crap, moderation is hard.

One thing you might consider doing is using https://github.com/USER.keys to verify the identity of the person connecting. Then use the GitHub API to verify they have at least N followers and has existed for N days. It would be wonderful to have a social network for open source developers on the command line.

Re: Show HN: I made Devzat – It's like Discord but in the terminal, over SSH

#139

Post by jbirer » Wed, Mar 16, 2022, 1:49 PM UTC

Looks like the n-word filter is working.

Re: Show HN: I made Devzat – It's like Discord but in the terminal, over SSH

#140

Post by exabrial » Wed, Mar 16, 2022, 2:20 PM UTC

jart wrote: post #137

exabrial wrote: post #19

make sure one's ssh-agent forwarding is off when connecting to strange hosts :)

Are you telling me that everyone who clones a repo from GitHub via SSH is in fact authorizing GitHub to use their private key? Why hasn't anyone made a slick web page with a catchy name like AuthBleed or SecretAgent to describe that one yet?

The default OpenSSH settings are safe. You have to explicitly whitelist servers or domains in `.ssh/config`, but if you were to blatantly blast:

Host * ForwardAgent yes

The scenario you talk about is certainly possible, especially since OpenSSH does not require a "tap" for each authorization once the agent is unlocked. (Side note: this is one thing hardware u2f keys absolutely got correct).