Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: ssh ssh.place

ssh.place

Post reply on HN
Print view View original

121–126 of 126 posts

Re: Show HN: ssh ssh.place

#121

Post by edmccard »

raggi wrote: post #119
tptacek wrote: post #117

Earlier quoted context omitted.

I don't understand the impulse behind these things --- this is a bootstrap mechanism for a global PKI for SSH. But cold introductions to SSH hosts (that is, first connections to hosts you have no business or technical relationship with) virtually never happen. What problem does it solve?

When you see people advertising a coffee shop at a conference and people TOFU'ing on conference wifi then plugging in credit card numbers, the picture gets a little more clear.

Do people at conferences buy coffee by SSH'ing into coffee shop servers?

Re: Show HN: ssh ssh.place

#122

Post by 3dedb728-3f77 »

jeninh wrote: post #102
3dedb728-3f77 wrote: post #23

Hey, is it not just a simple honeypot reverse hack ssh server? People understand that reverse hacking can happen when connecting to random ssh server, right?

Would like to clarify that all my code is open source at https://github.com/jeninh/ssh.place , even the deployment is triggered through GitHub actions. I'm also a teen and not too familiar with most of these terms, so I might be forgetting something.

What is public can be changed in private, as for being unfamiliar, well LLM made unfamiliar people able to do plenty of things.

Weird that you can't just say that you are not doing it.

Re: Show HN: ssh ssh.place

#123

Post by tptacek »

raggi wrote: post #119
tptacek wrote: post #117

Earlier quoted context omitted.

I don't understand the impulse behind these things --- this is a bootstrap mechanism for a global PKI for SSH. But cold introductions to SSH hosts (that is, first connections to hosts you have no business or technical relationship with) virtually never happen. What problem does it solve?

When you see people advertising a coffee shop at a conference and people TOFU'ing on conference wifi then plugging in credit card numbers, the picture gets a little more clear.

Right, I mean, I see the problem for browsers! Just not for SSH servers. (Capturing sessions like this used to be a contest at Usenix Security).

Re: Show HN: ssh ssh.place

#124

Post by raggi »

edmccard wrote: post #121
raggi wrote: post #119

Earlier quoted context omitted.

When you see people advertising a coffee shop at a conference and people TOFU'ing on conference wifi then plugging in credit card numbers, the picture gets a little more clear.

Do people at conferences buy coffee by SSH'ing into coffee shop servers?

i've seen it, so the answer is non-zero

Re: Show HN: ssh ssh.place

#125

Post by raggi »

tptacek wrote: post #123
raggi wrote: post #119

Earlier quoted context omitted.

When you see people advertising a coffee shop at a conference and people TOFU'ing on conference wifi then plugging in credit card numbers, the picture gets a little more clear.

Right, I mean, I see the problem for browsers! Just not for SSH servers. (Capturing sessions like this used to be a contest at Usenix Security).

So really the trend I'm talking about here is people turning SSH into a browser, hosting apps behind SSH that expect a much higher volume of TOFU happening, which is a departure from the "first time i setup my vps" kind of case.

Honestly at this point I'd be kind of happy if we could just use an x.509 cert from a webpki acme provider in the sshd and be done with it, for the host identity part.

Re: Show HN: ssh ssh.place

#126

Post by bob65536 »

Why so few colors? Even with palette characters you can have 240 or so options, and with truecolor you can just have anything. Also, you can double your vertical resolution by using half block characters, setting the foreground color as the top half, and setting the background color as the bottom half. Something like this: `\x1b[38;2;{r};{g};{b};48;2;{r};{g};{b}m{half block character}`.
Post reply on HN