Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

New startup sells coffee through SSH

terminal.shop

Post reply on HN
Print view View original

71–80 of 430 posts

Re: New startup sells coffee through SSH

#71

Post by robertlagrant »

solardev wrote: post #15
tithe wrote: post #2

Hmm, a CLI interface for consumer purchasing. Can I pipe that order through to a payment processor and delivery method? Script my meals for the week?

Everquest has you beat by a couple decades: https://www.nbcnews.com/id/wbna7020132 In that game you can type /pizza and it'll get ordered and delivered

> Demonstrating a deep understanding of what its computer-gaming audience, Sony has built the ability to order pizza into its latest online multiplayer game.

NBC's command of language might not be good, but it turns out it is consistent.

Re: New startup sells coffee through SSH

#73

Post by londons_explore »

Scaevolus wrote: post #68
Shakahs wrote: post #50

I'm curious how they built this. It's SSH but the IP address is Cloudflare's edge network. It could be using CF Tunnel to transparently route all the SSH sessions to some serving infrastructure, but I didn't know you could publicly serve arbitrary TCP ports like that. Building it in serverless fashion on CF Workers would be ideal for scalability, but those don't accept incoming TCP connections.

Yup! Cloudflare naturally advertises HTTP most heavily and it has fancier routing controls, but it supports arbitrary TCP protocols. > Cloudflare Tunnel can connect HTTP web servers, SSH servers, remote desktops, and other protocols safely to Cloudflare. https://developers.cloudflare.com/cloudflare-one/connections... > In addition to HTTP, cloudflared supports protocols like SSH, RDP, arbitrary TCP services, and Unix…

That requires the client to install custom tunnelling software.

If you want the client to not require special software, they provide a web based terminal emulator for ssh, and a web based VNC client.

Re: New startup sells coffee through SSH

#74

Post by Scarblac »

bigstrat2003 wrote: post #38
tonymet wrote: post #21

Earlier quoted context omitted.

they get your ssh public key which is a unique identifier so that should be disclosed.

It's a public key. You should operate under the assumption that anyone could have it at any time.

Still, it identifies you so it can be used to track you over visits to many different stores-over-ssh, just like third party cookies.

Re: New startup sells coffee through SSH

#75

Post by derefr »

bananskalhalk wrote: post #52
rvnx wrote: post #40

One safety tip: disable SSH Agent Forwarding before you connect, otherwise the remote server can theoretically reuse your private key to establish new connections to GitHub.com or prod servers (though this host is unlikely malicious). https://www.clockwork.com/insights/ssh-agent-hijacking/ (SSH Agent Hijacking)

*disable ssh agent FORWARDING. Which honestly should always be disabled. There are no trusted hosts.

> There are no trusted hosts.

...your own (headless) server that's in the same room as you, when you're using your laptop as a thin-client for it?

Re: New startup sells coffee through SSH

#76

Post by aftbit »

krasin wrote: post #66
aftbit wrote: post #58

Ah lame, they won't even let you browse since they're sold out.

I believe it's just a stub for collecting emails. Nothing more. Edit: somebody was able to order coffee through them (see below).

Well I hope they enjoy getting a lot of fake emails, because that's what's gonna happen.

Re: New startup sells coffee through SSH

#78

Post by nkcmr »

Shakahs wrote: post #50

I'm curious how they built this. It's SSH but the IP address is Cloudflare's edge network. It could be using CF Tunnel to transparently route all the SSH sessions to some serving infrastructure, but I didn't know you could publicly serve arbitrary TCP ports like that. Building it in serverless fashion on CF Workers would be ideal for scalability, but those don't accept incoming TCP connections.

Most likely using "Spectrum" which allows Layer 4 TCP+UDP proxying/DDoS protection: https://www.cloudflare.com/application-services/products/clo...
Post reply on HN