Is this a reverse-Dropbox play? Make something need ssh, rsync, etc. that didn't need it before.
New startup sells coffee through SSH
331–340 of 430 posts
Re: New startup sells coffee through SSH
#332Re: New startup sells coffee through SSH
#333Earlier quoted context omitted.
I love TUI (as in text-based user interfaces) so much more than GUI. It always felt like a far more peaceful and productive environment.
As long as I have ctrl+c/v copy and pasting I'm right there with you.
For DOS TUI, the standard was https://en.wikipedia.org/wiki/IBM_Common_User_Access: Shift+Delete to cut, Ctrl+Insert to copy, Shift+Insert to paste. These worked in DOS utilities like EDIT.COM, QBASIC.EXE and HELP.EXE, in all Turbo Vision apps including Borland Pascal and Borland C++ IDEs, in Visual Basic and Visual FoxPro for DOS, and they still work today in any Windows app that doesn't try to play silly tricks with its UI by doing its own text input.
Re: New startup sells coffee through SSH
#334Earlier quoted context omitted.
The FAQ says they use Stripe for orders and don't even have their own DB in which to store purchase data, so PCI compliance should be a non-issue
PCI compliance is never a non-issue. Even if you're using a third party provider that handles both credit card entry and processing, you need to comply with some subset of the PCI/DSS requirements. In the case of terminal.shop it's not even true, since they can see the credit card number on their side, even if all they do is to forward that number to Stripe and forget about it. For small and medium-sized merchants, P…
I think the important element is that terminal.shop's use case (likely SAQ D, likely level 4 or level 3 volumes) allows them to comply with relatively minimal expense and complexity.
Sure, there would be a non-zero time investment required to implement and ensure actual compliance with what is being attested, but it's quite doable for a person or small group of folks with a mix of SDE skills, SRE-like skills, and PCI-DSS experience.
Re: New startup sells coffee through SSH
#335Earlier quoted context omitted.
The atrocity was committed by whoever set that default, we can work out a plea deal as long as you rat them out.
Mac OS X’s Terminal.app used to be black-on-white by default, wouldn’t be surprised if that’s still the case.
Xterm is black on white by default.
Re: New startup sells coffee through SSH
#336PSA to anyone making a public SSH service: List the fingerprint, not the host key, thanks. (Or better yet list both!)
Please avoid acronyms on HN or spell them out. We don't all live in your context. duckduckgo just says PSA is Prostate specific antigen. What did you mean?
What's HN?
Re: New startup sells coffee through SSH
#337One safety tip: disable SSH Agent Forwarding before you connect, otherwise the remote server can theoretically reuse your private key to establish new connections to GitHub.com or prod servers (though this host is unlikely malicious). https://www.clockwork.com/insights/ssh-agent-hijacking/ (SSH Agent Hijacking)
SSH Agent Forwarding does not happen by default. You need to include the -A option in your ssh command, unless maybe you've enabled it globally in your ~/.ssh/config file.
They can't get your private keys, but they could "perform operations on the keys that enable them to authenticate using the identities loaded into the agent" (quoting the man page). This would also only be possible while you are connected.
Re: New startup sells coffee through SSH
#338Earlier quoted context omitted.
As long as I have ctrl+c/v copy and pasting I'm right there with you.
For DOS TUI, the standard was https://en.wikipedia.org/wiki/IBM_Common_User_Access : Shift+Delete to cut, Ctrl+Insert to copy, Shift+Insert to paste. These worked in DOS utilities like EDIT.COM, QBASIC.EXE and HELP.EXE, in all Turbo Vision apps including Borland Pascal and Borland C++ IDEs, in Visual Basic and Visual FoxPro for DOS, and they still work today in any Windows app that doesn't try to play silly tricks wi…
Thanks for posting the link.
Shift+Insert has worked for decades in the XTerms I've used. It's bound in my muscle memory and is a source of frustration, for me, when attempting to use non-X Widows GUIs or odd-ball "terminals"/programs/foo.
Re: New startup sells coffee through SSH
#339A lot of people don't know that before Amazon started, there was a company out of Portland, OR called Bookstacks selling books via a telnet interface. In the early days, Bezos was quite worried about their potential to get "there" first (wherever "there" was going to be). It was a fairly cool interface, at least for 1994. [ EDIT: worried to the point that we actually implemented a telnet version of the store in paral…
> selling books via a telnet interface. Were people just that trusting back then, or had they figured out some kind of pre-SSL way of securing things?
In 1994? Most of the internet was unencrypted, and it wasn't very commercial yet. https had just been invented, and ssh was a year away. There was no wifi, everything was dial-up unless you were at a university or something, and snooping just wasn't all that big a risk.
Re: New startup sells coffee through SSH
#340I can't test this due to the product being out of stock, but I wonder what their approach to PCI compliance is. Processing credit card data has a high compliance burden if you're unwilling to use a secure widget made by an already-authorized provider like Stripe. That's for a good reason, most web and mobile apps are designed such that their backend servers never see your full credit card number and CVV. You can't do…
[deleted]