11–20 of 111 posts
I'd be curious whether there's any security concerns on this one. Could an attacker craft a message that gets access to execute commands into a client terminal?
Doesn't seem to be working, the chat is frozen and I can't type anything.
Normal talk in unices system can do that. Irc have exange data between server and minimalize data trafic. still irc is better, but meybe in future
There was also `write` [0]. It would literally parse /etc/utmp [1] to find out which terminal the recepient user was logged on, then it would open that terminal and write(2) the message to it. Ah, wonderful user isolation. [0] https://man.cat-v.org/unix-6th/1/write [1] https://man.cat-v.org/unix-6th/5/utmp
But unless I'm missing something, what's the difference between this and IRC?
This is actually cool! But unless I'm missing something, what's the difference between this and IRC?
I'd be curious whether there's any security concerns on this one. Could an attacker craft a message that gets access to execute commands into a client terminal?
Yeah, though SSH is already very mature at processing text, so it's a surprisingly good fit for a chat. I would also remember that any machine you SSH from is going to give the server some metadata like IP address, public keys (which aren't useful as creds but can be for tracking). Really fun little project though
Additionally you should disable SSH forwarding. Relevant thread from the startup selling coffee over SSH: https://news.ycombinator.com/item?id=40227624