Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

New startup sells coffee through SSH

terminal.shop

Post reply on HN
Print view View original

311–320 of 430 posts

Re: New startup sells coffee through SSH

#311

Post by efreak »

sva_ wrote: post #22

Really cool interface. Is there any list of such servers publicly available through ssh?

Some of the older still-available services are listed below

SSH: ascii.theater was mentioned here, so was mapscii.me There's a bunch of games at https://overthewire.org/wargames/ (and there's likely still dozens of other small muds running over telnet as well) chat.shazow.net is a chat server

Non-ssh (the games mostly require registration): `curl wttr.in` for weather `finger help@graph.no` for weather `cat | nc termbin.com 9999` for a pastebin `telnet telehack.com` `telnet freechess.org` `telnet gt.gamingmuseum.com` `telnet fibs.com 4321` to pay backgammon

There's used to be Nyan cat through telnet, which I'd hacked into running on ssh but AFAICT there's no longer any servers around (my own server is no longer around either) https://nyancat.dakko.us

Unknown how many of these are running still: https://info.cern.ch/hypertext/DataSources/Yanoff.html There's a much more recent list that includes ssh and telnet services here: https://github.com/chubin/awesome-console-services

---

On a related note, http://shells.red-pill.eu/ lists a bunch of free shell services.

See also: https://github.com/Swordfish90/cool-retro-term

Re: New startup sells coffee through SSH

#312

Post by zzo38computer »

Shakahs wrote: post #50

I'm curious how they built this. It's SSH but the IP address is Cloudflare's edge network. It could be using CF Tunnel to transparently route all the SSH sessions to some serving infrastructure, but I didn't know you could publicly serve arbitrary TCP ports like that. Building it in serverless fashion on CF Workers would be ideal for scalability, but those don't accept incoming TCP connections.

Some protocols do not support virtual hosting; apparently this includes SSH.

It would be possible to support other protocols with a single IP address (either because they are running on the same computer, or for any other reason) if they support virtual hosting.

Of the "small web" protocols: Gopher and Nex do not support virtual hosting; Gemini, Spartan, and Scorpion do support virtual hosting. (Note that Scorpion protocol also has a type I request for interactive use.)

NNTP does not support virtual hosting although depending on what you are doing, it might not be necessary, although all of the newsgroups will always be available regardless of what host name you use (which requires that distinct newsgroups do not have the same names). This is also true of IRC and SMTP.

However, if you are connecting with TLS then it is possible to use SNI to specify the host name, even if the underlying protocol does not implement it.

(This will be possible without the client requiring special software, if the protocol is one that supports virtual hosting. There may be others that I have not mentioned above, too.)

Re: New startup sells coffee through SSH

#313

Post by brk »

mleo wrote: post #159
PaulDavisThe1st wrote: post #146

A lot of people don't know that before Amazon started, there was a company out of Portland, OR called Bookstacks selling books via a telnet interface. In the early days, Bezos was quite worried about their potential to get "there" first (wherever "there" was going to be). It was a fairly cool interface, at least for 1994. [ EDIT: worried to the point that we actually implemented a telnet version of the store in paral…

There were a few using telnet before the web gained wider traction. For example, CDNow started out that way in 1994.

I remember ordering a CD via CDNow and a very rudimentary SMS interface on my phone around 1996. It took about 10 minutes to go through the entire process, but I did it while at the movies with my wife, waiting for the previews to start and we both thought it was just SO advanced.

Re: New startup sells coffee through SSH

#314

Post by efreak »

krasin wrote: post #126
seszett wrote: post #103

Earlier quoted context omitted.

What do you mean? Public keys don't usually include an email address. They have an id that's usually in the form "user@host" but that's unlikely to be a valid email address. Maybe some systems use an email address there, but none of those I know.

> They have an id that's usually in the form "user@host" but that's unlikely to be a valid email address. They are valid email addresses most of the time, in my experience. :)

A valid email address isn't the same as an email address that actually has an inbox behind it. Some of my ssh keys have an fqdn but there's no mx record configured for it. I used to use my bare domain, which does have an mx record, but I've never used real mailbox names for the ssh keys.

Re: New startup sells coffee through SSH

#315

Post by lol768 »

raggi wrote: post #270

Before a bunch of you run off and make more of these “because it’s cool”, they’ll likely lose access to stripe once stripes security team pay attention and realize that this can be trivially man in the middled and doesn’t actually offer the equivalent protection to https. I wrote up a little demo and explainer at https://mitm.terminal.shop.rag.pub ssh mitm.terminal.shop.rag.pub

> I wrote up a little demo and explainer at

They give you the ed25519 host key to insert into your known_hosts file on their homepage, which itself is served over TLS with all of the protections you describe in your article. They could go into more detail on being careful with not falling into the tofu trap perhaps, but I don't see that there's an inherent PCI-critical problem here. ssh tells you who, cryptographically, you're connecting to.

If I mess with my DNS and point it at your "little demo", this happens:

    $ ssh foo@terminal.shop
    @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
    @    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
    @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
    IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Anyone ignoring a big scary warning like that probably isn't going to brew the coffee properly anyway.

And guess what? My browser lets me bypass HTTPS warnings too! Yes, even when HSTS is enabled I can take steps to bypass the warning.

Re: New startup sells coffee through SSH

#316

Post by Repulsion9513 »

robocat wrote: post #238
Repulsion9513 wrote: post #106

PSA to anyone making a public SSH service: List the fingerprint, not the host key, thanks. (Or better yet list both!)

Please avoid acronyms on HN or spell them out. We don't all live in your context. duckduckgo just says PSA is Prostate specific antigen. What did you mean?

Sorry, I meant Secure SHell. Oh wait, that wasn't the widely-known acronym you asked about.

Re: New startup sells coffee through SSH

#317

Post by __s »

StableAlkyne wrote: post #302
PaulDavisThe1st wrote: post #146

A lot of people don't know that before Amazon started, there was a company out of Portland, OR called Bookstacks selling books via a telnet interface. In the early days, Bezos was quite worried about their potential to get "there" first (wherever "there" was going to be). It was a fairly cool interface, at least for 1994. [ EDIT: worried to the point that we actually implemented a telnet version of the store in paral…

> selling books via a telnet interface. Were people just that trusting back then, or had they figured out some kind of pre-SSL way of securing things?

In terms of MITM attacks, yes, they were trusting

Even back in 2010 lots of sites were http, like Facebook, & there was FireSheep which would snoop on public wifi for people logging into sites over HTTP

Re: New startup sells coffee through SSH

#318

Post by das_keyboard »

miki123211 wrote: post #169

I can't test this due to the product being out of stock, but I wonder what their approach to PCI compliance is. Processing credit card data has a high compliance burden if you're unwilling to use a secure widget made by an already-authorized provider like Stripe. That's for a good reason, most web and mobile apps are designed such that their backend servers never see your full credit card number and CVV. You can't do…

The websites faq says they are still using stripe for payment and ordering - however this may work.

Re: New startup sells coffee through SSH

#319

Post by keepamovin »

brk wrote: post #313
mleo wrote: post #159

Earlier quoted context omitted.

There were a few using telnet before the web gained wider traction. For example, CDNow started out that way in 1994.

I remember ordering a CD via CDNow and a very rudimentary SMS interface on my phone around 1996. It took about 10 minutes to go through the entire process, but I did it while at the movies with my wife, waiting for the previews to start and we both thought it was just SO advanced.

That is an epically cool story from the early days of the Internet / web. Thanks for sharing!

Re: New startup sells coffee through SSH

#320

Post by halfcat »

thdxr wrote: post #107

hey! i'm one of the people who worked on this, we actually launched a few days ago and sold out quite quickly - we'll remove the email capture so you can poke around we'll be back in a few weeks with proper inventory and fulfillment we'll also be opensourcing the project and i can answer any questions people have about this

Oh wow. You’re the guy who knows Adam right? His Laravel video was so inspiring.
Post reply on HN