Live data from Hacker News

New startup sells coffee through SSH

terminal.shop

411–420 of 430 posts

Re: New startup sells coffee through SSH

#411

So unless you mean to exclusively sell coffee to users who don't have a white terminal background, you may want to consider your color scheme. I was missing the white text. (I know this is considered an atrocity by some, but I happen to not really care enough about my terminal color to change the default)

we meant to have this fixed before launch, but ran into some snags with charm's `wish` and adaptive colors.

shipped an improved light mode today!

Re: New startup sells coffee through SSH

#412

Earlier quoted context omitted.

It’s a practice, but not necessarily a standard one. In any case if even one person sees that, the advice will have served its purpose.

TIL, the good news I guess is I only ssh into my hosting platforms and GitHub who have a reason to protect my data since I pay them. Still I'll be sure to break up my keys more going forward and disable SSH forwarding.

disabling agent forwarding is the important bit.

But if you do want to break up your keys more, make sure you specify IdentityFile and Identities Only in the per host definitions in your ssh config.

By default assuming you use an ssh agent (no forwarding) with multiple keys and a default ssh config, the behavior is to just try to auth with every key in order.

So if you're worried about the ssh server identifying you, you're still exposing yourself. I don't think this is much of a concern but worth noting.

Slightly more important: you're wasting time during the initial connection to fail authentication a few times. This can matter more with higher latency

Even more important: sshd has a configurable number of times a client is allowed to fail authentication in a session attempt. If you have too many other keys in your agent you will just fail to auth before it tries the key that is actually valid for that host.

Re: New startup sells coffee through SSH

#414
post #107

hey! i'm one of the people who worked on this, we actually launched a few days ago and sold out quite quickly - we'll remove the email capture so you can poke around we'll be back in a few weeks with proper inventory and fulfillment we'll also be opensourcing the project and i can answer any questions people have about this

oh shit, you're open sourcing this as well? I'd love to use a similar workflow for some of my projects. Love the idea! Also you guys should post over on Threads -- a bunch of people over there are really into the idea as well: https://www.threads.net/@mockapapella/post/C5_vLdDP0J1

We're doing similar things over at https://pico.sh/

We use: https://github.com/charmbracelet/wish

Re: New startup sells coffee through SSH

#416

Earlier quoted context omitted.

And for privacy, don’t let it know your identity or username: ssh -o PubkeyAuthentication=no -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -a nobody@terminal.shop Otherwise, the remote server can probably identify who you are on platforms like GitHub.

What I am reading from this there be dragons so don't use SSH to buy coffee!

I think so.

Re: New startup sells coffee through SSH

#417
post #40

One safety tip: disable SSH Agent Forwarding before you connect, otherwise the remote server can theoretically reuse your private key to establish new connections to GitHub.com or prod servers (though this host is unlikely malicious). https://www.clockwork.com/insights/ssh-agent-hijacking/ (SSH Agent Hijacking)

i usually just disable ssh agent forwarding globally by default, and only enable it selectively via my ~/.ssh/config

Re: New startup sells coffee through SSH

#418
post #389
post #386

Earlier quoted context omitted.

I don't think that's correct. I serve matrix on 8443 through a tunnel.

Matrix is based on HTTP...? Cloudflare supports 2052, 2053, 2082, 2083, 2086, 2087, 2095, 2096, 443, 80, 8080, 8443, 8880 for HTTP/S https://developers.cloudflare.com/fundamentals/reference/net...

True. You did not say "standard http port", thank you for clarifying.

Re: New startup sells coffee through SSH

#419

Is it /usr/locally grown and single .'ed? How quickly can they mv it to my ~?

as per chatgpt

This joke is a clever play on words that merges elements of computer programming and coffee culture. Let's break it down:

    New startup sells coffee through SSH: SSH stands for Secure Shell, which is a network protocol that allows for secure communication between two computers. In this context, the joke suggests that this new startup is selling coffee through a secure connection, presumably online.

    Is it /usr/locally grown and single .'ed?: This part of the joke is a play on the directory structure in Unix-like operating systems, where /usr typically contains user-related programs and data. "Locally grown" suggests that the coffee is sourced locally, and "single .'ed" is a wordplay on "single origin," a term used in coffee culture to denote coffee that comes from a single geographic origin. The /usr/locally grown part humorously combines Unix directory structure with the concept of coffee sourcing.

    How quickly can they mv it to my ~?: Here, "mv" is a command in Unix systems used to move files or directories, and "~" represents the user's home directory. So, "mv it to my ~" is a playful way of asking how quickly they can deliver the coffee to the customer's home. It's also a pun on the idea of moving the coffee to the user's home directory.

Re: New startup sells coffee through SSH

#420
post #206

Earlier quoted context omitted.

Sorry, English is not my native language. I know I sometimes sound strange because most of my use of the language is around the internet and at work, not that much casual "normal" conversation.

Your English is fine. That person was violating HN rules about snark (“Be kind. Don't be snarky. Converse curiously; don't cross-examine. Edit out swipes.”) Learned that rule the hard way. It’s crucial to the success of HN and I am grateful dang corrected me.

I don't see a rule where joking is prohibited. People sure love their buzzwords though. Must bring them a feeling of synergy in these unprecedented times :)

Glad that at least a few people above got the joke

Post reply on HN