Not to dunk on the coffee which I haven't tried but this seems like a viral ad? I get it's cool that this actually works, but in practice how is it different to selling coffee through an API through a generic web interface served by shopify? In the end in both ways they are selling you coffe beans for money. It's still cool to see it in your terminal though.
New startup sells coffee through SSH
271–280 of 430 posts
Re: New startup sells coffee through SSH
#272They are missing out.. There are some Tor customers out there...
Re: New startup sells coffee through SSH
#273Before a bunch of you run off and make more of these “because it’s cool”, they’ll likely lose access to stripe once stripes security team pay attention and realize that this can be trivially man in the middled and doesn’t actually offer the equivalent protection to https. I wrote up a little demo and explainer at https://mitm.terminal.shop.rag.pub ssh mitm.terminal.shop.rag.pub
Hmm, I'm having trouble finding that site. Sick sunset at rag.pub though!
Re: New startup sells coffee through SSH
#274Earlier quoted context omitted.
I'm curious why you added `-i /dev/null`. IIUC, this doesn't remove ssh-agent keys. If you want to make sure no keys are offered, you'd want: ssh -a -o IdentitiesOnly=yes terminal. Shop I'm not sure if the `-i` actually prevents anything, I believe things other than /dev/null will still be tried in sequence.
Check for yourself with ssh -v -i /dev/null terminal.shop vs ssh -v terminal.shop What you're looking for is that there is no line that says something like debug1: Offering public key: /Users/fragmede/.ssh/id_rsa RSA SHA256:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx Upon further testing, the full command you want is: ssh -a -i /dev/null -o IdentityAgent=/dev/null terminal.shop to forcibly disable a local identity ag…
Aha, yes, `-o IdentityAgent=/dev/null` is better for my intent. I was confused that `-i` wasn't removing .ssh/id_rsa from the candidates, but that was ssh-agent.
ssh -a -i /dev/null -o IdentityAgent=/dev/null terminal.shop
Re: New startup sells coffee through SSH
#275[deleted]
Re: New startup sells coffee through SSH
#276Earlier quoted context omitted.
*disable ssh agent FORWARDING. Which honestly should always be disabled. There are no trusted hosts.
I've found myself to be much more comfortable to just define all my private keys in ~/.ssh/config on a host-by-host basis.
AFAIK, this doesn't solve the SSH agent problem - the problem is the agent has access to all of those keys regardless of the host you connect to.
So forwarding your SSH agent means an administrator of the system you're connected to could use any of those host keys loaded in the agent to connect to their associated machine.
Re: New startup sells coffee through SSH
#277Before a bunch of you run off and make more of these “because it’s cool”, they’ll likely lose access to stripe once stripes security team pay attention and realize that this can be trivially man in the middled and doesn’t actually offer the equivalent protection to https. I wrote up a little demo and explainer at https://mitm.terminal.shop.rag.pub ssh mitm.terminal.shop.rag.pub
Hmm, I'm having trouble finding that site. Sick sunset at rag.pub though!
It’s available via ssh and https
That shots from my parents balcony in Bermuda
Re: New startup sells coffee through SSH
#278Slack preview link shows up weird. It shows as follows
> wip: terminal (initial commit)
Re: New startup sells coffee through SSH
#279Are the beans any good, what kind of roast?
"Dive into the rich taste of Nil, our delicious semi-sweet coffee with notes of chocolate, peanut butter, and a hint of fig" and "medium roast"
Re: New startup sells coffee through SSH
#280PSA to anyone making a public SSH service: List the fingerprint, not the host key, thanks. (Or better yet list both!)
or better yet, don't use ssh for this purpose, it's not good for it.
letsencrypt is free, you might hate the browser for many fair reasons, but PKI and the CA/B forum are actually effective.