Live data from Hacker News

New startup sells coffee through SSH

terminal.shop

51–60 of 430 posts

Re: New startup sells coffee through SSH

#51
post #40

One safety tip: disable SSH Agent Forwarding before you connect, otherwise the remote server can theoretically reuse your private key to establish new connections to GitHub.com or prod servers (though this host is unlikely malicious). https://www.clockwork.com/insights/ssh-agent-hijacking/ (SSH Agent Hijacking)

I take it you mean disable ssh agent forwarding — the agent itself is fine. You should never forward your ssh agent to a box you don’t trust as much as your own.

Re: New startup sells coffee through SSH

#52
post #40

One safety tip: disable SSH Agent Forwarding before you connect, otherwise the remote server can theoretically reuse your private key to establish new connections to GitHub.com or prod servers (though this host is unlikely malicious). https://www.clockwork.com/insights/ssh-agent-hijacking/ (SSH Agent Hijacking)

*disable ssh agent FORWARDING.

Which honestly should always be disabled. There are no trusted hosts.

Re: New startup sells coffee through SSH

#53
post #17
post #6

It's sold out and the only option if you actually connect via ssh is to give them your email address so they can send you updates.

Makes me wonder if this is just a ploy to email harvest and there never was any coffee being sold.

The Primeagen is behind this, and they had physical samples at react whatever in miami recently for whatever that's worth

Re: New startup sells coffee through SSH

#54
post #36

Earlier quoted context omitted.

Everquest has you beat by a couple decades: https://www.nbcnews.com/id/wbna7020132 In that game you can type /pizza and it'll get ordered and delivered

Nice. I was wondering if this had been done somewhere before. "Sony plans to integrate the pizza function more tightly into the game", which every game should do, of course :)

Game programmers: it’s a video game, we don’t need the same kind of application security that other programs do

Hacker: Hold my beer while I exploit this dude’s game client and makes it order 10,000 pizzas to his door

Re: New startup sells coffee through SSH

#55
post #21

Earlier quoted context omitted.

they get your ssh public key which is a unique identifier so that should be disclosed.

It's a public key. You should operate under the assumption that anyone could have it at any time.

it's a dessert topping and a floor wax

Re: New startup sells coffee through SSH

#56
post #40

One safety tip: disable SSH Agent Forwarding before you connect, otherwise the remote server can theoretically reuse your private key to establish new connections to GitHub.com or prod servers (though this host is unlikely malicious). https://www.clockwork.com/insights/ssh-agent-hijacking/ (SSH Agent Hijacking)

I take it you mean disable ssh agent forwarding — the agent itself is fine. You should never forward your ssh agent to a box you don’t trust as much as your own.

Message edited, thank you, you are absolutely right.

Re: New startup sells coffee through SSH

#60
post #2

Hmm, a CLI interface for consumer purchasing. Can I pipe that order through to a payment processor and delivery method? Script my meals for the week?

Everquest has you beat by a couple decades: https://www.nbcnews.com/id/wbna7020132 In that game you can type /pizza and it'll get ordered and delivered

That makes me miss the days when "but in 3D!" was a novel business model...

https://duckduckgo.com/?q=everquest+gameplay&t=fpas&iar=imag...

Hard to be formulaic when there's not a formula.

"Why not real pizza ingame?"

Post reply on HN