Live data from Hacker News

New startup sells coffee through SSH

terminal.shop

171–180 of 430 posts

Re: New startup sells coffee through SSH

#171

I can't test this due to the product being out of stock, but I wonder what their approach to PCI compliance is. Processing credit card data has a high compliance burden if you're unwilling to use a secure widget made by an already-authorized provider like Stripe. That's for a good reason, most web and mobile apps are designed such that their backend servers never see your full credit card number and CVV. You can't do…

They mention in the faq that they use Stripe - https://www.terminal.shop/faq. Stripe does offer integrations that are not natively using their widgets. Ultimately, the PII data is stored at Stripe.

PS: I work at Stripe but I don't really work on the PCI compliant part of the company.

Re: New startup sells coffee through SSH

#172

Earlier quoted context omitted.

Sorry, English is not my native language. I know I sometimes sound strange because most of my use of the language is around the internet and at work, not that much casual "normal" conversation.

English is my native language and I have no idea what that person was talking about. Your post is fine.

Mine too, and I think the post is fine also, but I have some idea of what that person was talking about. For a while, in some corporate environments, it was a recurring phenomenon to hear someone dismiss an urge to be cautious by saying "You're throwing out the baby with the bathwater."

So I can see where someone might count it toward buzzword bingo. But this post also offered an alternate solution when saying "baby+bathwater", so the bingo caller should refuse to score this one.

Re: New startup sells coffee through SSH

#173

So unless you mean to exclusively sell coffee to users who don't have a white terminal background, you may want to consider your color scheme. I was missing the white text. (I know this is considered an atrocity by some, but I happen to not really care enough about my terminal color to change the default)

The whole system wide light/dark stuff came about too late to help our terminal sessions.

Re: New startup sells coffee through SSH

#174
post #107

hey! i'm one of the people who worked on this, we actually launched a few days ago and sold out quite quickly - we'll remove the email capture so you can poke around we'll be back in a few weeks with proper inventory and fulfillment we'll also be opensourcing the project and i can answer any questions people have about this

Hey, nice work, how to get updates about the open source release ?

Re: New startup sells coffee through SSH

#175
post #108

Earlier quoted context omitted.

To cost them a lot of money for all those pizzas. And to cost the pizza shop money if they can’t collect payment for the pizzas. And to cause general grief and misery, as trolls are wont to do :(

But, you could also not pay the money AND have the pizzas.

And you left a paper trail

Re: New startup sells coffee through SSH

#176
post #107

hey! i'm one of the people who worked on this, we actually launched a few days ago and sold out quite quickly - we'll remove the email capture so you can poke around we'll be back in a few weeks with proper inventory and fulfillment we'll also be opensourcing the project and i can answer any questions people have about this

oh shit, you're open sourcing this as well? I'd love to use a similar workflow for some of my projects. Love the idea!

Also you guys should post over on Threads -- a bunch of people over there are really into the idea as well: https://www.threads.net/@mockapapella/post/C5_vLdDP0J1

Re: New startup sells coffee through SSH

#177

Earlier quoted context omitted.

With all these recent exploits, I wouldn't even be 100% sure of that.

But if I can't trust even that host, I also can't trust the host I'm working on and which doesn't need agent forwarding to access my SSH agent.

Trusting one host is safer than trusting two hosts.

Re: New startup sells coffee through SSH

#178
post #125
post #40

One safety tip: disable SSH Agent Forwarding before you connect, otherwise the remote server can theoretically reuse your private key to establish new connections to GitHub.com or prod servers (though this host is unlikely malicious). https://www.clockwork.com/insights/ssh-agent-hijacking/ (SSH Agent Hijacking)

Is it not standard practice to make different keys for different important services? I have a private key for my prod server, a private key for GitHub, and a private junk key for authenticating to misc stuff. I can discard any without affecting anything else that's important. If I authenticated with my junk key, would my other keys still be at risk?

If anything it's more standard practice to have agent forwarding disabled, since that's the default.

Re: New startup sells coffee through SSH

#180
post #43
post #25

I long for an alternate dimension where terminal-based internet like Minitel dominated . Something like hypercard implemented with 80x24 ncurses UI

I love TUI (as in text-based user interfaces) so much more than GUI. It always felt like a far more peaceful and productive environment.

Responsive, high-contrast, low bitrate, low complexity
Post reply on HN