6 ms·

I would prefer the connection instructions made clear that the default SSH username would be used to set up my username on the platform and display that to othe

I would prefer the connection instructions made clear that the default SSH username would be used to set up my username on the platform and display that to other users without initially seeking my consent. On $machine[work], I don't get to pick that $USER is my full name. If this affects you, make sure you connect with `ssh [pseudonymous name]@late.sh`.

soraminazuki 2mo ago
> without initially seeking my consent That's just how SSH works. If you want to be pseudonymous, you should also generate a new key pair.
- greengreengrass 2mo ago
  > That's just how SSH works I know that. Just because SSH automatically sends my local $USER doesn't mean they have to report the value received in the SSH username automatically on the game platform to other users, without first having prompted me "your username has been reported as <greengreengrass>. Is it okay to show this?". A simple flag in my user profile in the platform to say whether I've said that's okay or not. Or instructions to advise people to choose their username /before/ first connect. These are reasonable, privacy-preserving things to call out in a good and user-friendly design.
latchkey 2mo ago
They do make it clear... # privacy we store your key fingerprint, not the full public key. no IP logging. no tracking. no analytics. chat messages and game scores are stored in postgres, tied only to your fingerprint. don't trust us? use a throwaway key: $ ssh-keygen -t ed25519 -f ~/.ssh/late_throwaway && ssh -o IdentitiesOnly=yes -i ~/.ssh/late_throwaway late.sh generates a disposable key — zero risk, full experience Wow, this got flagged immediately. Must have triggered some automated thing. Sorry!
- deleted 2mo ago
  [deleted]
mike8192 2mo ago
Fixed in https://github.com/mpiorowski/late-sh/pull/453 https://github.com/mpiorowski/late-sh/pull/453 New account usernames are now PRNG generated from a pool of random {adjective}{noun}.

soraminazuki 2mo ago

> without initially seeking my consent That's just how SSH works. If you want to be pseudonymous, you should also generate a new key pair.

greengreengrass 2mo ago
> That's just how SSH works I know that. Just because SSH automatically sends my local $USER doesn't mean they have to report the value received in the SSH username automatically on the game platform to other users, without first having prompted me "your username has been reported as <greengreengrass>. Is it okay to show this?". A simple flag in my user profile in the platform to say whether I've said that's okay or not. Or instructions to advise people to choose their username /before/ first connect. These are reasonable, privacy-preserving things to call out in a good and user-friendly design.

latchkey 2mo ago

They do make it clear... # privacy we store your key fingerprint, not the full public key. no IP logging. no tracking. no analytics. chat messages and game scores are stored in postgres, tied only to your fingerprint. don't trust us? use a throwaway key: $ ssh-keygen -t ed25519 -f ~/.ssh/late_throwaway && ssh -o IdentitiesOnly=yes -i ~/.ssh/late_throwaway late.sh generates a disposable key — zero risk, full experience Wow, this got flagged immediately. Must have triggered some automated thing. Sorry!

deleted 2mo ago
[deleted]

mike8192 2mo ago

Fixed in https://github.com/mpiorowski/late-sh/pull/453 https://github.com/mpiorowski/late-sh/pull/453 New account usernames are now PRNG generated from a pool of random {adjective}{noun}.