341–350 of 430 posts
PSA to anyone making a public SSH service: List the fingerprint, not the host key, thanks. (Or better yet list both!)
Please avoid acronyms on HN or spell them out. We don't all live in your context. duckduckgo just says PSA is Prostate specific antigen. What did you mean?
The authenticity of host 'terminal.shop (172.65.113.113)' can't be established. ED25519 key fingerprint is SHA256:TMZnO7N8mmR/Pap3urU2P4uBNuhxuWtDUak0g9gyZ8s That's a bit different than the key listed
Have you added the required line to ~/.ssh/known_hosts as described on their website?
I might be horribly out of touch, but... is $25 for a 12oz bag of not-totally-horrible coffee beans really a normal price?
Really cool interface. Is there any list of such servers publicly available through ssh?
┌──────────┬────────┬─────────┬───────┬────────────────────┐ │ terminal │ s shop │ a about │ f faq │ c checkout $ 0 [0] │ └──────────┴────────┴─────────┴───────┴────────────────────┘ nil blend coffee whole bean | medium roast | 12oz $25 Dive into the rich taste of Nil, our delicious semi-sweet coffee with notes of chocolate, peanut butter, and a hint of fig. Born in the lush expanses of Fazenda Rainha, a 280-hectare…
this needs some "charm" to it. it's a bit basic
Earlier quoted context omitted.
Have you added the required line to ~/.ssh/known_hosts as described on their website?
That's not actually what they describe. They describe catting known_hosts and seeing terminal.shop with the given key in the output. That won't work if you don't continue to connect because known_hosts won't be updated with their key. Additionally, if hosts are hashed, you won't see terminal.shop anyway.
Earlier quoted context omitted.
That's not actually what they describe. They describe catting known_hosts and seeing terminal.shop with the given key in the output. That won't work if you don't continue to connect because known_hosts won't be updated with their key. Additionally, if hosts are hashed, you won't see terminal.shop anyway.
I think what "cat" here means is that you are supposed to add their key to the known hosts file manually before you connect. Showing the output of "cat file" is a way of saying "this should be in the file".
I can't test this due to the product being out of stock, but I wonder what their approach to PCI compliance is. Processing credit card data has a high compliance burden if you're unwilling to use a secure widget made by an already-authorized provider like Stripe. That's for a good reason, most web and mobile apps are designed such that their backend servers never see your full credit card number and CVV. You can't do…
Not just EU companies. Also EU customers. I cannot use my cards in a Card-Not-Present transaction that does not support 3D Secure. This obviously isn't a concern for them yet since they only ship to the US, but it might become one. In the past one of my banks required me to put in a One-Time Password on the frame I'm shown. While it's different right now, you do need to show that page in the general case. That would…
And if everything fails, they can just render the 3DS page in the terminal! (e. g. using Browsh [1]) Although I'm not sure if that would be compliant with the regulations.
It would be awesome if I can do something like this: > ssh terminal.shop "register foo $pubkey" > ssh foo@terminal.shop "set shipping address to $addr, credit card info $info, email address $email" > ssh foo@terminal.shop "order one 12oz light roast"
Reminds me of "Before Google, Sergey Brin tried (and failed) to let us order pizza by fax" https://news.ycombinator.com/item?id=5264626
solaris used to have a pizzatool EDIT: image here: https://blog.adafruit.com/2022/01/31/the-story-of-sun-micros...