Late.sh – a command-line Clubhouse for computer people

Post by [deleted] » Wed, Jul 22, 2026, 10:36 AM UTC

Izmaki wrote: post #54

1dom wrote: post #49

This is a really cool idea, and very appealing. Also very nice that it looks usable with just an SSH client. It would be useful if it was explained what the companion client is for? Another small personal gripe: I think you should either remove the 1 line copy/paste sh install on the homepage, or add a link to a git repo on the homepage. I know it's possible to view the sh by visiting it, but a raw text file doesn't…

Not to mention that a webserver can be configured to show one sh file when a regular browser visits and another when curl etc. gets it. Show one thing, install another.

Post by h43z » Wed, Jul 22, 2026, 10:43 AM UTC

prodigycorp wrote: post #69

Zambyte wrote: post #66

Earlier quoted context omitted.

Okay, but why is that something to be concerned about? How would one be able to probe to see if a server recognizes a public key? Why does that matter?

so, i used my public key. can someone please tell me what i should be worried about now?

Post by codegladiator » Wed, Jul 22, 2026, 10:45 AM UTC

nkrisc wrote: post #72

Izmaki wrote: post #54

Earlier quoted context omitted.

Not to mention that a webserver can be configured to show one sh file when a regular browser visits and another when curl etc. gets it. Show one thing, install another.

So download it with curl and read it first before executing it from your local disk.

Post by h43z » Wed, Jul 22, 2026, 11:11 AM UTC

benj111 wrote: post #68

h43z wrote: post #61

Reminder to be cautious about leaking public keys. Once you leak your public key it could be used to check if another server recognizes that leaked public key.

Surely you shouldn't be leaking your username. I could use it to see if another server recognised 'h43z'....

Post by warthog » Wed, Jul 22, 2026, 11:39 AM UTC