Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

New startup sells coffee through SSH

terminal.shop

Post reply on HN
Print view View original

391–400 of 430 posts

Re: New startup sells coffee through SSH

#391

Post by latexr »

Reminded me of Hacker Scripts, specifically `fucking-coffee`:

> this one waits exactly 17 seconds (!), then opens a telnet session to our coffee-machine (we had no frikin idea the coffee machine is on the network, runs linux and has a TCP socket up and running) and sends something like `sys brew`. Turns out this thing starts brewing a mid-sized half-caf latte and waits another 24 (!) seconds before pouring it into a cup. The timing is exactly how long it takes to walk to the machine from the dudes desk.

https://github.com/NARKOZ/hacker-scripts

Re: New startup sells coffee through SSH

#392

Post by technodelic »

rrr_oh_man wrote: post #195

I might be horribly out of touch, but... is $25 for a 12oz bag of not-totally-horrible coffee beans really a normal price?

The best local roaster in my town charges about $20 for a 12oz bag of specialty single origin coffee. Their blends are a little cheaper even.

The lowest price specialty coffee I could find online is about $12 for a little over 10oz from a place called S&W.

So $25 is a very bad value in my opinion.

Re: New startup sells coffee through SSH

#393

Post by [deleted] »

lambdaxyzw wrote: post #382

>is ordering via ssh secure?# you bet it is. arguably more secure than your browser. ssh incorporates encryption and authentication via a process called public key cryptography. if that doesn’t sound secure we don’t know what does. Strong disagree. The encryption is the easy part, the hard part is the symmetric key exchange. And PKI used by browsers is much more robust for this usecase then TOFU model of ssh. Of cour…

[deleted]

Re: New startup sells coffee through SSH

#394

Post by 1231232131231 »

lambdaxyzw wrote: post #382

>is ordering via ssh secure?# you bet it is. arguably more secure than your browser. ssh incorporates encryption and authentication via a process called public key cryptography. if that doesn’t sound secure we don’t know what does. Strong disagree. The encryption is the easy part, the hard part is the symmetric key exchange. And PKI used by browsers is much more robust for this usecase then TOFU model of ssh. Of cour…

Won't it warn you if you put the public key in your authorized_keys as shown here: https://www.terminal.shop/?

Re: New startup sells coffee through SSH

#395

Post by hn_throwaway_99 »

rhysmdnz wrote: post #367
makingstuffs wrote: post #366

Earlier quoted context omitted.

If the widget is in an iframe with a different host the parent documents JS engine has no way of interacting with the child.

The parent documents JS engine can replace the iframe with their own that looks the same

To be clear, that is exactly what the PCI SAQ A-EP questionnaire covers. It basically says "You don't access any cardholder data, but you own the page that hosts/redirects to the third party processor (like Stripe)." So the questions in the SAQ A-EP are about ensuring that your page has enough basic security (at least as can be asked in a questionnaire) to prevent hijacking, whereby a nefarious script (through an XSS vulnerability for example) sends them to a site to phish their cc details. Note that a decent content security policy on your website can prevent most of these types of problems.

Re: New startup sells coffee through SSH

#396

Post by dartos »

rvnx wrote: post #40

One safety tip: disable SSH Agent Forwarding before you connect, otherwise the remote server can theoretically reuse your private key to establish new connections to GitHub.com or prod servers (though this host is unlikely malicious). https://www.clockwork.com/insights/ssh-agent-hijacking/ (SSH Agent Hijacking)

With this one comment, you’ve convinced me that ssh apps are a bad idea

Re: New startup sells coffee through SSH

#397

Post by ammar2 »

zzo38computer wrote: post #209
orblivion wrote: post #84

So unless you mean to exclusively sell coffee to users who don't have a white terminal background, you may want to consider your color scheme. I was missing the white text. (I know this is considered an atrocity by some, but I happen to not really care enough about my terminal color to change the default)

Is there an environment variable defined for specifying if you want light or dark colours? If so, then it would help with local programs, and also with remote programs (such as this one) if you add a SendEnv command into the SSH configuration file to specify that SSH should use this environment variable.

A little non-portable but there is an xterm escape sequence[1] that gets the user's background color: \e]11;?\a

You might also be able to use the reverse-video[2] escape sequence to get something that works depending on the user's color scheme.

[1] https://stackoverflow.com/a/7767891

[2] https://en.wikipedia.org/wiki/Reverse_video

Re: New startup sells coffee through SSH

#398

Post by pizzafeelsright »

thsksbd wrote: post #217
Justsignedup wrote: post #91

Earlier quoted context omitted.

Command line dominates in quick flexibility. But is awful when it comes to discoverability. Most people can't even find the turn off ads button in windows 11. And people hate that. So what hope do they have at a terminal.

I think Ms Dos 6ish TUI integration was very well done, better than Linux today. Word perfect had good mouse support, as did Editor.

I have a theory that TUI is masculine and GUI is feminine.

Re: New startup sells coffee through SSH

#399

Post by quesera »

viraptor wrote: post #355
quesera wrote: post #256

Earlier quoted context omitted.

You are not wrong . But beware the predatory lawyers who will come after you for ostensible violations of California’s Invasion of Privacy Act, California Penal Code section 630, et seq. (“CIPA”). One company I work with received multiple arbitration demands (claimed "privacy" damages in excess of $25000 each, helpfully offered to settle for $5000 each!). And this company didn't even set any cookies or run any 3P tra…

Does the law even matter in this case? If the idea was to make you convinced you'd spend $200k to win a bogus case, you can be sued for literally anything...

This is true, but CIPA is the law that is being exploited for its ambiguous applicability. There are lawyers out there actively targeting companies who legitimately believe they do not need a cookie banner.

They seek out customers of the company ("Are you now, or have you been, a customer of X? You may be the victim of Y/eligible for legal settlement Z/etc.") They may even identify the corporate targets, and recruit new customers for their purpose.

And the way to avoid the issue completely is to add a stupid, superfluous, cookie banner. (Which, in the height of absurdity, requires adding a cookie).

It was a painful and semi-expensive lesson for this small company. And their expensive/prominent lawyers say they are seeing the problem increasing. (I asked why they didn't take the time to warn their clients, but did not get a satisfactory answer).

So it's worth a thought and a note when the idea of not needing a cookie banner comes up.

Re: New startup sells coffee through SSH

#400

Post by kloch »

mleo wrote: post #159
PaulDavisThe1st wrote: post #146

A lot of people don't know that before Amazon started, there was a company out of Portland, OR called Bookstacks selling books via a telnet interface. In the early days, Bezos was quite worried about their potential to get "there" first (wherever "there" was going to be). It was a fairly cool interface, at least for 1994. [ EDIT: worried to the point that we actually implemented a telnet version of the store in paral…

There were a few using telnet before the web gained wider traction. For example, CDNow started out that way in 1994.

I bought a CD from CDNOW over Telnet in the early 90's!

I also remember telnet BBS's became popular for a few years when I was in college 91-93.

Post reply on HN