Live data from Hacker News

Charm – Tools to make the command line glamorous

charm.sh

171–180 of 223 posts

Re: Charm – Tools to make the command line glamorous

#172
post #126

Earlier quoted context omitted.

What do you suspect they are doing?

Supply chain attacks?

If they put this much effort into planting some backdoor that's going to get burned the second it's used or spotted in the openly published source code they can have it

Re: Charm – Tools to make the command line glamorous

#173
post #99

Earlier quoted context omitted.

I'm young and had the same experience as GP - for me it's just too little said about too many different things, it's hard to tell what 'it' is (and I only realised on the second read through that that's partly because they are many things). Imagine if Amazon had a landing page with headings like 'eShopping', 'Internet', and 'Cashierless Shopping' to describe what the company did. (And worse, then obscured them behind…

> Imagine if Amazon had a landing page with headings like 'eShopping', 'Internet', and 'Cashierless Shopping' to describe what the company did. (And worse, then obscured them behind fun but not descriptive names.) Well, they do have Route 53, EC2, Elastic something on AWS.

Yes, AWS is infamous for it, but at least in the closest I can think of to a single landing page (the 'service' drop down selector) they're grouped by 'compute' etc. And that's not really intended for describing each one, they each have a separate landing page.

Re: Charm – Tools to make the command line glamorous

#174
TUIs over ssh/telnet can be a lot of fun. Especially in cases where multiple people can interact with each other on the server. It simplifies the programming model as you only have one state on the backend that you render to multiple connections. Syncing up everyone becomes trivial. You can also use some React concepts, like rendering a virtual TUI and sending just the right set of minimal escape sequences back to the user to bring their display up to date.

A few months ago I implemented a telnet chat server[0] for fun and it was surprisingly easy to do so. Even by using a wasm vm that I was still working on at the same time.

[0]: https://github.com/lunatic-solutions/chat

Re: Charm – Tools to make the command line glamorous

#175
post #2

I love Charm; doing `ssh git.charm.sh` is a lot of fun and really sparks the imagination about SSH apps. They also have usable solutions for auth and storage, which like, if you're thinking of writing something like this are the first things you'd start reaching for. They also work hard to enable you to run all your own services, so you don't rely on the Charm cloud for everything. Definitely a good model for future…

Looks cool! Are there any security risks posed by ssh'ing into an unknown server?

You are probably using terminal software that has memory corruption bugs trivially exploitable by the remote end.

Also these https://marc.info/?l=bugtraq&m=104612710031920&w=2

Re: Charm – Tools to make the command line glamorous

#176

Earlier quoted context omitted.

A Gemini client might benefit: https://gemini.circumlunar.space/

Not using Charm, but I've designed a TUI Gemini client in Go! It's pretty popular, for terminal clients at least. https://github.com/makeworld-the-better-one/amfora

I miss a search function, but thanks for your client. I may write one a la av98, but with jimtcl instead of Python3. It makes really easy to write networked stuff, either with TLS or not. I wrote a finger client in minutes.

Re: Charm – Tools to make the command line glamorous

#177
post #9

Earlier quoted context omitted.

The dynamic intuitive interface provided by `ssh git.charm.sh` is a wonderful example of how text-based user interfaces do not need to be limited to REPL. I wonder if there is space for a new text-based web browser that adopts some of the design features showcased by Charm.

It surely is impressively well made. I am wondering though whether Charm actually qualifies as a text-based interface. Isn't it more like a replication of a graphical user interface, with windows and tabs etc.? If one's issues with working on the command line has always been that there are no "drawn" windows GUI elements, then this of course is a revelation, but we already have high-res versions of Charm, i.e. modern…

There is no doubt, is a text based interface. The common term is text user interface (TUI vs GUI), and every app rendered as characters in a shell have been always considered TUI, whether they had windows, tabs, dropdowns and whatnot

Re: Charm – Tools to make the command line glamorous

#178
post #147

Earlier quoted context omitted.

Those are cool but they are still using just ANSI color codes and what not. I think it is great but not ideal or optimized than if terminals would implement a native markdown or markup renderer.

Wait, how would that even work? Do you want something like SIXL support but for markdown? Encode your markdown doc in an unholy escape sequence and throw it at the terminal?

It would work by the terminal API detecting file type and automatically rendering the markdown. Sort of like this:

https://github.com/alacritty/alacritty/blob/master/extra/ala...

Allowing for different sized headers and what not.

Re: Charm – Tools to make the command line glamorous

#179

Totally not relevant but those rollerskates look amazing in the Skate logo. In fact, all logos look eerily real in a way. I wonder what makes that so, it's literally as if i could grab them from the screen and put them on my desk. Well done, gfx artist !!

Mostly the GI. https://en.wikipedia.org/wiki/Global_illumination

Re: Charm – Tools to make the command line glamorous

#180

Earlier quoted context omitted.

You potentially send all your key IDs (ie public keys) your agent has. there are command line options to force your ssh not to use your agent in which case, barred any bugs in the ssh client, it’s like browsing to a domain in your browser.

This is the first time I’ve heard someone say sharing public keys is a security risk. Can you explain the threat model here?

Would be easy to contact other web services and determine the identity marching a public key.
Post reply on HN