Live data from Hacker News

Show HN: ssh ssh.place

ssh.place

101–110 of 126 posts

Re: Show HN: ssh ssh.place

#102

Hey, is it not just a simple honeypot reverse hack ssh server? People understand that reverse hacking can happen when connecting to random ssh server, right?

Would like to clarify that all my code is open source at https://github.com/jeninh/ssh.place , even the deployment is triggered through GitHub actions. I'm also a teen and not too familiar with most of these terms, so I might be forgetting something.

Re: Show HN: ssh ssh.place

#103
post #75

Why is there no orange? The entire colour palette is a bit depressing. Also my terminal (Ubuntu in WSL2) had an ugly colour palette defined by default with several identical colours. I'm glad I found out! Use this to check yours: for i in {0..15}; do printf "\e[48;5;%dm %2d \e[0m " "$i" "$i"; (( (i + 1) % 8 == 0 )) && echo; done and then press ctrl + , to change it.

I'll look into adding orange, thanks :)

Re: Show HN: ssh ssh.place

#104

If you have a slight interest in originality of presentation, whatever website copy first comes out of Claude is not there yet. Its preoccupation with "no x, no y" and annoying runs of sentence fragments might have been a punchy rhetoric for a short while before it became a tired cliché, but by now it stylistically makes it look more like you're bragging on LinkedIn than presenting something fun and creative. I menti…

I understand where you are getting from, thanks for posting this. I'll keep this in mind for my next project (or if I push changes to this one.) I also wanted this to appeal to non-hackers, and a big part of that was me wanting to show how simple it was to log in.

Re: Show HN: ssh ssh.place

#105
post #96
post #19

Earlier quoted context omitted.

I'm going to be so honest, I don't have much advice for you. I'm a teenager who's part of Hack Club ( https://hackclub.com ) who made this entirely for fun. I was inspired by @zachlatta's SSHtron ( https://github.com/zachlatta/sshtron ) and wanted to make an SSH game. I loved how easy it was for him to promote it too, he made a HN post with title "ssh sshtron.zachlatta.com" because it gets people to try out the actua…

Keep it up! You’re surely the coolest teenager I’ll come across this month.

Thanks :) There's tons of us over at https://hackclub.com

Re: Show HN: ssh ssh.place

#106
post #83

it's already littered with bots, so it's not fun for a human to go there.

Such was r/place, and such is life. There is never a world where there will be no bots and it'll also be completely free for anyone to use online. I'll try to nerf it, though.

Re: Show HN: ssh ssh.place

#108
post #27

Time for your regular reminder that ssh has no PKI and is trivial to mitm during tofu.

SSH does in fact have a PKI, just not a global one. Large-fleet SSH installs all tend to use certificate authorities, for this reason (and to simplify SSO).

Re: Show HN: ssh ssh.place

#110
post #35

Earlier quoted context omitted.

> People understand that reverse hacking can happen when connecting to random ssh server, right? No, actually, I've never heard of such a vector. How would that work?

An ssh server would exploit a vulnerability in the ssh client when it connects. For example, openssh has both a client and server. There’s been vulnerabilities in openssh, in the client. Those vulnerabilities aren’t reachable unless you’re connecting to a server attempting to exploit you, so the risk is quite low because you know and trust most servers you’re connecting to with ssh. To sum it up: Connecting to this s…

Isn't this exploit vector identical to the ones we'd expect on browser-based vulnerabilities? I believe that yes, there are possible risks involved, but no significant than our casual web-surfing through the net.
Post reply on HN