Live data from Hacker News

New startup sells coffee through SSH

terminal.shop

291–300 of 430 posts

Re: New startup sells coffee through SSH

#291
post #25

I long for an alternate dimension where terminal-based internet like Minitel dominated . Something like hypercard implemented with 80x24 ncurses UI

Command line dominates in quick flexibility. But is awful when it comes to discoverability. Most people can't even find the turn off ads button in windows 11. And people hate that. So what hope do they have at a terminal.

To be fair, would the button isn't hidden away too badly, most people have no reason to go into settings for anything. They go through the wizard at the beginning (if that) to do first-time setup, then when they decide they don't like something they just deal with it or complain incessantly until someone fixes it for them.

Someone complained to me a while back about the size of icons on the windows desktop being too small - I told them they can hold Ctrl and scroll the mouse wheel to change the zoom level. They've complained about the same thing a couple times since, and so far as I can tell have made no effort to fix it.

Re: New startup sells coffee through SSH

#292
FAQ:

> is ordering via ssh secure? you bet it is. arguably more secure than your browser. ssh incorporates encryption and authentication via a process called public key cryptography. if that doesn’t sound secure we don’t know what does.

Doesn’t TLS use public key cryptography too?

Re: New startup sells coffee through SSH

#293
post #288

┌──────────┬────────┬─────────┬───────┬────────────────────┐ │ terminal │ s shop │ a about │ f faq │ c checkout $ 0 [0] │ └──────────┴────────┴─────────┴───────┴────────────────────┘ nil blend coffee whole bean | medium roast | 12oz $25 Dive into the rich taste of Nil, our delicious semi-sweet coffee with notes of chocolate, peanut butter, and a hint of fig. Born in the lush expanses of Fazenda Rainha, a 280-hectare…

this needs some "charm" to it. it's a bit basic

Re: New startup sells coffee through SSH

#294

PSA to anyone making a public SSH service: List the fingerprint, not the host key, thanks. (Or better yet list both!)

Please avoid acronyms on HN or spell them out. We don't all live in your context. duckduckgo just says PSA is Prostate specific antigen. What did you mean?

I would blame this one on DDG, actually. PSA is an incredibly common acronym for public service announcement. Wherever DDG sources acronyms for might also be assuming people just know it. Try wiktionary or Wikipedia disambiguation pages for acronyms when they don't show up in search, I can often find them there.

Re: New startup sells coffee through SSH

#295
post #70

It would be awesome if I can do something like this: > ssh terminal.shop "register foo $pubkey" > ssh foo@terminal.shop "set shipping address to $addr, credit card info $info, email address $email" > ssh foo@terminal.shop "order one 12oz light roast"

hope you clear your bash history after a purchase :)

Re: New startup sells coffee through SSH

#296
post #219

Earlier quoted context omitted.

You might like https://tildeverse.org/ !

Doesn't seem to work: fragmede@samairmac:~$ ssh tildeverse.org fragmede@tildeverse.org: Permission denied (publickey).

That's because you're using the wrong protocol. Try https in the browser to see their website.

Re: New startup sells coffee through SSH

#297
post #60

Earlier quoted context omitted.

That makes me miss the days when "but in 3D!" was a novel business model... https://duckduckgo.com/?q=everquest+gameplay&t=fpas&iar=imag... Hard to be formulaic when there's not a formula. "Why not real pizza ingame?"

The Everquests certainly seem dated today, but for their time, they were pretty neat! The gameplay was simple (especially by today's standards), but it was a pretty unforgiving game that required a lot of teamwork. It was the social aspect that kept most people playing, I think, especially in guilds. I remember a lot of the playerbase kept asking for significant changes to make the game less grindy and hardcore, but…

Or play old school eq: https://www.project1999.com/

Re: New startup sells coffee through SSH

#298
post #40

One safety tip: disable SSH Agent Forwarding before you connect, otherwise the remote server can theoretically reuse your private key to establish new connections to GitHub.com or prod servers (though this host is unlikely malicious). https://www.clockwork.com/insights/ssh-agent-hijacking/ (SSH Agent Hijacking)

The full command you want is: ssh -a -i /dev/null terminal.shop to disable agent forwarding, as well as to not share your ssh public key with them, but that's just a little less slick than saying just: ssh terminal.shop to connect.

1. Why is this something that would be enabled by default.

2. Can't you disable agent forwarding in a config file, so as not to have to clutter the command line?

Re: New startup sells coffee through SSH

#299
post #40

One safety tip: disable SSH Agent Forwarding before you connect, otherwise the remote server can theoretically reuse your private key to establish new connections to GitHub.com or prod servers (though this host is unlikely malicious). https://www.clockwork.com/insights/ssh-agent-hijacking/ (SSH Agent Hijacking)

This feature is not enabled by default; "ForwardAgent = yes" has to be in the config file.

The article you cited makes it clear that you can turn this on for specific hosts in your private SSH config (and probably should do it that way).

So why wouldn't you?

Turning on forwarding globally and then having to remember to disable it for some untrusted hosts with -a looks silly and error-prone to me.

Re: New startup sells coffee through SSH

#300
post #296

Earlier quoted context omitted.

Doesn't seem to work: fragmede@samairmac:~$ ssh tildeverse.org fragmede@tildeverse.org: Permission denied (publickey).

That's because you're using the wrong protocol. Try https in the browser to see their website.

Oh, it seems to rickroll people with a referrer from this site :)

Copy-paste or manually type the URL to get around that!

Edit: They seem to be redirecting with a 301 permanent HTTP response, which seems slightly obnoxious since your browser might cache it. I can't visit the site anymore from the browser I'm using here, so maybe try a different one or incognito mode.

Post reply on HN