Live data from Hacker News

PuTTY has a new website

putty.software

71–80 of 304 posts

Re: PuTTY has a new website

#71

Earlier quoted context omitted.

How would the average person know that?

Average person aware of trust on social network / internet - because https://hachyderm.io/@simontatham has a validated link to the author's homepage. Others - they don't understand the trust anyway, so there prerequisite steps missing before the main question anyway.

hachyderm.io says it has a validated link to his homepage, but if you don't already trust hachyderm.io that means nothing.

Re: PuTTY has a new website

#73
post #28

Somehow, these new long TLDs just feel spammy and "fake" and I usually ignore them when they show up in search results. Unfortunately the .com, .net and .org are already taken.

Certificate by Let's Encrypt, issued to "putty.software" no other info. Sometimes I feel like we are training users to disregard safety mechanisms for phishing. Using putty was never the pinnacle of professionalism and open source auditing anyway, it's just a binary you download on windows before you hear the gospel of linux and ssh.

Why would that be disregarding safety? There's no extra text you can put on the website that would prove anything else (apart from messages signed by a known key, but honestly nobody would check those). Certificates don't provide any identity validation in practice.

Re: PuTTY has a new website

#74

Ever since Windows gained Terminal and OpenSSH, my usage of Putty has almost entirely ceased except for serial for embedded systems work. Then I realised Putty ships with a CLI version which I now use in Terminal for accessing serial.

I don't trust Windows with my SSH keys. Since about 2 years, I am actively preparing my final migration to Linux. There's some Windows software left that I need to replace before this move is possible, but I am close.

Can you tell us which software? (Even if it’s very niche) I’m really curious where the gaps are.

Re: PuTTY has a new website

#75

Earlier quoted context omitted.

Average person aware of trust on social network / internet - because https://hachyderm.io/@simontatham has a validated link to the author's homepage. Others - they don't understand the trust anyway, so there prerequisite steps missing before the main question anyway.

hachyderm.io says it has a validated link to his homepage, but if you don't already trust hachyderm.io that means nothing.

It means a lot - you need to check the other side's meta to confirm yourself. https://fedi.tips/how-do-i-verify-my-account/

Re: PuTTY has a new website

#76

Earlier quoted context omitted.

I don't trust Windows with my SSH keys. Since about 2 years, I am actively preparing my final migration to Linux. There's some Windows software left that I need to replace before this move is possible, but I am close.

Is such paranoia warranted? Millions of corporate laptops run Windows 11 just fine. I know M$ is evil and spying on you, but not to such degree.

Having a Windows 11 corporate laptop with a domain/Entra login, I actually trust it more than a home Windows 11 with a Microsoft account. Because if I lock myself out, I have a contact (corporate support) that is actually interested in helping me recover everything. With a Microsoft account it's a mess. I had so many problems with Microsoft accounts that I lost count of how many I have, and most are broken in some way, because of different issues and different service integrations over time. The Skype account is now useless. I never recovered my paid Minecraft account after one event. With a machine with a local account, now I have to be very careful on what I click related to MS accounts, because trying to solve various issues with Teams, I managed to get the local account linked with that MS account. I spent hours trying to recover a different account after I randomly filled one nagging question about birth date - who wants to give the real birth date to Microsoft - and then I got locked out because I said was underage :). So yes, one of the big issues is the push to have a linked OS account where you have to rely on MS support to solve your issues, otherwise you basically get locked out of your machine and other things you paid for.

Also, domain policies offer more control over the corporate PCs (this is how some of the MS spying is shut off on corporate PCs; it's debatable if the corporate spying added by other domain policies is an improvement).

Re: PuTTY has a new website

#77

Earlier quoted context omitted.

I don't trust Windows with my SSH keys. Since about 2 years, I am actively preparing my final migration to Linux. There's some Windows software left that I need to replace before this move is possible, but I am close.

Is such paranoia warranted? Millions of corporate laptops run Windows 11 just fine. I know M$ is evil and spying on you, but not to such degree.

I don't trust microsoft to not push an update that exposes all my stuff. Their updates the last few years have been an absolutely shitshow in so many regards.

Re: PuTTY has a new website

#78

Earlier quoted context omitted.

hachyderm.io says it has a validated link to his homepage, but if you don't already trust hachyderm.io that means nothing.

It means a lot - you need to check the other side's meta to confirm yourself. https://fedi.tips/how-do-i-verify-my-account/

For example, at https://www.chiark.greenend.org.uk/~sgtatham/ : (the rel=me is the important part)

    [...]  [...]

Re: PuTTY has a new website

#79
post #76

Earlier quoted context omitted.

Is such paranoia warranted? Millions of corporate laptops run Windows 11 just fine. I know M$ is evil and spying on you, but not to such degree.

Having a Windows 11 corporate laptop with a domain/Entra login, I actually trust it more than a home Windows 11 with a Microsoft account. Because if I lock myself out, I have a contact (corporate support) that is actually interested in helping me recover everything. With a Microsoft account it's a mess. I had so many problems with Microsoft accounts that I lost count of how many I have, and most are broken in some wa…

I have to agree, I've also suffered account problems. I was locked out from an email address I used for 20 years. It refuses to take my password which is still valid. I've changed phone number since 20 years ago so can't use that and the security questions were nonsense as I was a teenager. Originally my account never had phone number, they insisted I add it when they integrated my Skype account perhaps. So I didn't expect access to that phone number to be a strong ongoing requirement.

Re: PuTTY has a new website

#80
From the PuTTY FAQ: https://www.chiark.greenend.org.uk/~sgtatham/putty/faq.html#...

Would you like me to register you a nicer domain name?

No, thank you. Even if you can find one (most of them seem to have been registered already, by people who didn't ask whether we actually wanted it before they applied), we're happy with the PuTTY web site being exactly where it is. It's not hard to find (just type ‘putty’ into google.com and we're the first link returned), and we don't believe the administrative hassle of moving the site would be worth the benefit.

I wonder if they changed their mind because Google ceased to be a reliable way to find them.

Post reply on HN