Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

New startup sells coffee through SSH

terminal.shop

Post reply on HN
Print view View original

131–140 of 430 posts

Re: New startup sells coffee through SSH

#131

Post by tichiian »

exabrial wrote: post #111

The authenticity of host 'terminal.shop (172.65.113.113)' can't be established. ED25519 key fingerprint is SHA256:TMZnO7N8mmR/Pap3urU2P4uBNuhxuWtDUak0g9gyZ8s That's a bit different than the key listed

No. The key listed is the whole plain ed25519 pubkey (those are relatively short). The message displays the SHA256 digest.

You can check that in your local known_hosts file (after having connected at least once) with "ssh-keygen -F terminal.shop -l" and "ssh-keygen -F terminal.shop -lv". (Yes, it is confusing that the command is named "ssh-keygen" but does lots of things that are not about generating any keys)

If you want to do it without connecting, try "ssh-keyscan terminal.shop".

Re: New startup sells coffee through SSH

#134

Post by krasin »

nkcmr wrote: post #82
krasin wrote: post #66

Earlier quoted context omitted.

I believe it's just a stub for collecting emails. Nothing more. Edit: somebody was able to order coffee through them (see below).

Nope! It is real, I was able to order some coffee a few days ago. Will report back on if it shows up or if it is any good :)

Oh, cool! That gives me hope.

Re: New startup sells coffee through SSH

#136

Post by orblivion »

LeoPanthera wrote: post #64
rvnx wrote: post #40

One safety tip: disable SSH Agent Forwarding before you connect, otherwise the remote server can theoretically reuse your private key to establish new connections to GitHub.com or prod servers (though this host is unlikely malicious). https://www.clockwork.com/insights/ssh-agent-hijacking/ (SSH Agent Hijacking)

"ForwardAgent no" in ~/.ssh/config will do this automatically.

Is it "yes" by default? If so, that seems insane given what the op said about it. But other comments say it's "no" by default. If it's "no" by default, why are people alarming us by bringing this up? And why for terminal.shop in particular?

Re: New startup sells coffee through SSH

#137

Post by bee_rider »

tichiian wrote: post #119
deeblering4 wrote: post #109

Earlier quoted context omitted.

[flagged]

Sorry, English is not my native language. I know I sometimes sound strange because most of my use of the language is around the internet and at work, not that much casual "normal" conversation.

English is my native language and I have no idea what that person was talking about. Your post is fine.

Re: New startup sells coffee through SSH

#138

Post by jethro_tell »

Scarblac wrote: post #74
bigstrat2003 wrote: post #38

Earlier quoted context omitted.

It's a public key. You should operate under the assumption that anyone could have it at any time.

Still, it identifies you so it can be used to track you over visits to many different stores-over-ssh, just like third party cookies.

Lol, the subset of people buying coffee via ssh and shopping elsewhere via ssh is going to be insanely small, they can probably already more or less track you.

Additionally, you're probably giving a shipping address and using a card number of some sort.

Its extremely difficult to shop anonymously online for physical goods.

Re: New startup sells coffee through SSH

#139

Post by mr_mitm »

Scarblac wrote: post #74
bigstrat2003 wrote: post #38

Earlier quoted context omitted.

It's a public key. You should operate under the assumption that anyone could have it at any time.

Still, it identifies you so it can be used to track you over visits to many different stores-over-ssh, just like third party cookies.

You could use one key per service. Almost like a passkey.

Re: New startup sells coffee through SSH

#140

Post by zaik »

exabrial wrote: post #111

The authenticity of host 'terminal.shop (172.65.113.113)' can't be established. ED25519 key fingerprint is SHA256:TMZnO7N8mmR/Pap3urU2P4uBNuhxuWtDUak0g9gyZ8s That's a bit different than the key listed

Have you added the required line to ~/.ssh/known_hosts as described on their website?
Post reply on HN