Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

New startup sells coffee through SSH

terminal.shop

Post reply on HN
Print view View original

191–200 of 430 posts

Re: New startup sells coffee through SSH

#191

Post by ppbjj »

samwillis wrote: post #185
srinathkrishna wrote: post #171

Earlier quoted context omitted.

They mention in the faq that they use Stripe - https://www.terminal.shop/faq . Stripe does offer integrations that are not natively using their widgets. Ultimately, the PII data is stored at Stripe. PS: I work at Stripe but I don't really work on the PCI compliant part of the company.

Interestingly Stripe started life as /dev/payments and I seem to remember the first iteration was an agent on your server that literally processed card payments when you wrote the details to /dev/payments

That's awesome

Re: New startup sells coffee through SSH

#192

Post by simantel »

PaulDavisThe1st wrote: post #146

A lot of people don't know that before Amazon started, there was a company out of Portland, OR called Bookstacks selling books via a telnet interface. In the early days, Bezos was quite worried about their potential to get "there" first (wherever "there" was going to be). It was a fairly cool interface, at least for 1994. [ EDIT: worried to the point that we actually implemented a telnet version of the store in paral…

Do you have more info? I found this article[0] about "Book Stacks" which became Books.com, but it looks like they were based in Cleveland?

[0] https://sbnonline.com/article/visionary-in-obscurity-charles...

Re: New startup sells coffee through SSH

#194

Post by bee_rider »

hunter2_ wrote: post #170
bee_rider wrote: post #137

Earlier quoted context omitted.

English is my native language and I have no idea what that person was talking about. Your post is fine.

I think that person was talking about having had 4 out of 5 squares in a line on their bingo card already, and stumbling across "baby+bathwater" earned them bingo . The card is metaphorical though... more of a mental buffer that just overflowed.

That makes more sense than my solution.

As far as I’m concerned the baby and the bath water is just a normal expression.

I thought it was something about the use of “confirm,” haha.

Re: New startup sells coffee through SSH

#196

Post by zzo38computer »

orblivion wrote: post #136
LeoPanthera wrote: post #64

Earlier quoted context omitted.

"ForwardAgent no" in ~/.ssh/config will do this automatically.

Is it "yes" by default? If so, that seems insane given what the op said about it. But other comments say it's "no" by default. If it's "no" by default, why are people alarming us by bringing this up? And why for terminal.shop in particular?

The man page for ssh_config(5) says that it is set to "no" by default, at least on my computer.

Re: New startup sells coffee through SSH

#197

Post by jstanley »

dotancohen wrote: post #117
derefr wrote: post #75

Earlier quoted context omitted.

> There are no trusted hosts. ...your own (headless) server that's in the same room as you, when you're using your laptop as a thin-client for it?

Depending on what it's serving, and how up to date it is, and who else is on that network and can access the server, and who else can come into that same room when you're not there, and from where you get the software that you install on that server... it might be less trustworthy than you think.

But if that's your standard then the laptop you're connecting from is not trusted either, and then you're not even allowed to use your own keys.

You're allowed to draw sensible boundaries.

Re: New startup sells coffee through SSH

#198

Post by thih9 »

rvnx wrote: post #40

One safety tip: disable SSH Agent Forwarding before you connect, otherwise the remote server can theoretically reuse your private key to establish new connections to GitHub.com or prod servers (though this host is unlikely malicious). https://www.clockwork.com/insights/ssh-agent-hijacking/ (SSH Agent Hijacking)

This is only a threat if you enable agent forwarding for all hosts.

If you enable agent forwarding for all hosts then yes, data will be forwarded.

Your link says:

> Don’t enable agent forwarding when connecting to untrustworthy hosts. Fortunately, the ~/.ssh/config syntax makes this fairly simple

Post reply on HN