Live data from Hacker News

New startup sells coffee through SSH

terminal.shop

181–190 of 430 posts

Re: New startup sells coffee through SSH

#182

Earlier quoted context omitted.

"ForwardAgent no" in ~/.ssh/config will do this automatically.

Is it "yes" by default? If so, that seems insane given what the op said about it. But other comments say it's "no" by default. If it's "no" by default, why are people alarming us by bringing this up? And why for terminal.shop in particular?

Maybe there was some blanket advice in the past to enable it? Idk, this got me alarmed for nothing.

Re: New startup sells coffee through SSH

#183
post #25

I long for an alternate dimension where terminal-based internet like Minitel dominated . Something like hypercard implemented with 80x24 ncurses UI

The real power of the internet all along in my opinion was networked databases. Everything else is fluff and not a particularly great use of resources.

networked spreadsheets would have been ideal

Re: New startup sells coffee through SSH

#185

I can't test this due to the product being out of stock, but I wonder what their approach to PCI compliance is. Processing credit card data has a high compliance burden if you're unwilling to use a secure widget made by an already-authorized provider like Stripe. That's for a good reason, most web and mobile apps are designed such that their backend servers never see your full credit card number and CVV. You can't do…

They mention in the faq that they use Stripe - https://www.terminal.shop/faq . Stripe does offer integrations that are not natively using their widgets. Ultimately, the PII data is stored at Stripe. PS: I work at Stripe but I don't really work on the PCI compliant part of the company.

Interestingly Stripe started life as /dev/payments and I seem to remember the first iteration was an agent on your server that literally processed card payments when you wrote the details to /dev/payments

Re: New startup sells coffee through SSH

#186

This is really cool. I wonder how they pipe the data to stripe? As an aside kind of funny to see this pop up. I was just talking about if anyone was doing ordering through a cli a while ago: https://news.ycombinator.com/context?id=39817617

With the stripe api Why would their backend be different then any other website using stripe

Re: New startup sells coffee through SSH

#188
post #21

Earlier quoted context omitted.

they get your ssh public key which is a unique identifier so that should be disclosed.

It's a public key. You should operate under the assumption that anyone could have it at any time.

what does that have to do with disclosing the potential for tracking?

Re: New startup sells coffee through SSH

#189
post #107

hey! i'm one of the people who worked on this, we actually launched a few days ago and sold out quite quickly - we'll remove the email capture so you can poke around we'll be back in a few weeks with proper inventory and fulfillment we'll also be opensourcing the project and i can answer any questions people have about this

Hey, nice work, how to get updates about the open source release ?

probably follow the twitter account @terminaldotshop

Re: New startup sells coffee through SSH

#190
post #28

Earlier quoted context omitted.

what did you expect when they said "startup" and not "shop"

Free coffee in exchange for all future rights to my productivity metrics.

knowing "startups" i'm sure their vision is streaming SSH subscription as a service . They track your keystroke rate and automatically ship new batches of $2/oz coffee when you get below 90 keystrokes/min
Post reply on HN