7 ms·
Show HN: ssh ssh.place
- quietsegfault 2mo agoMake sure to not be forwarding ssh agents! :)
- Retr0id 2mo ago> Your cooldown is tied to your SSH key This sounds like a recipe for bots that bypass the cooldown...
- jeninh 2mo agoI also have limits for IP and device + some other factors :) The full details are in the README on GitHub. But also I don't expect too many people to find this, it's one of my first public projects. If we do get a surge of people then I'll implement something better.
- messh 2mo agoI love ssh apps! See also late.sh, and my own https://shellbox.dev https://shellbox.dev
- jeninh 2mo agoShellbox is so sick!!! I'm going to look into implementing it into a project I'm working on.
- fragmede 2mo agoand funky.nondeterministic.computer
- nickzelei 2mo agoShellbox looks really cool! I love the proliferation of ssh apps lately… Ever since I saw the terminal coffee I’ve been inspired. I’ve been working on https://billard.sh https://billard.sh myself for a bit.
- somat 2mo agoMine is hard to get to(ip6 only) but was started around the idea of a shared postgres database. ssh applicant@register.public.outband.net The web page https://www.public.outband.net https://www.public.outband.net hosted on the same box, if you can see it you have the needed ip6. No users yet but feel free to try it out.
- qudat 2mo agoanother one: https://pico.sh https://pico.sh
- BetterThanSober 2mo agoParked means the storage is kept, right?
- messh 2mo agoYes, storage and memory/processes. It is basically suspended, not running
- Hugsbox 2mo agoAyy late.sh called out, my favourite hangout on the internet :) I'm in there every evening antagonizing the bartender
- cbarrick 2mo agoI can't see my cursor if it is placed on top of a cell that has already been colored.
- jeninh 2mo agoOops. I'll fix that right now
- erikschoster 2mo agoThis is fun, I tried to draw a flower but it sucks.
- jeninh 2mo agoIt's a pretty flower :-) I hope it wasn't you who put that red line through it
- erikschoster 2mo agolol no someone else did that while i was drawing it. thanks :)
- jeninh 2mo agoAww...
- buffer_overlord 2mo agossh join@bbs.profullstack.com
- cbarrick 2mo agoAre we coordinating factions here, like the original r/place? The social aspect was such a big part of the original. I'll start: # PURPLE FRAME # Our mission is to draw a purple frame around the canvas. 2 rows of blank space between the frame and the top/bottom of the canvas. 4 cols of blank space between the frame and the left/right of the canvas.
- jeninh 2mo agoI'm wondering if there is a better way to do this. On one hand, we could just do it here but then I can't link people to this page or it'll harm the post. I could also just use a subreddit or make a forum on https://ssh.place https://ssh.place
- cbarrick 2mo agoThe organicness of the original was really fun. Dunno if coordinating here really fits the HN vibe, but also go where the people are.
- jeninh 2mo agoI'm just wondering what to do when this post dies down. Then I guess I could link to it... It's not like it's going to go back to the front page anyways
- jetbalsa 2mo agoPlace 2 wasn't too bad, it did get botted to all hell. I handled some the early recordings of the canvas to make live time lapses of it. I've done the same here just to have something to mess about with.
- teiferer 2mo agoBuilding in support for that into the site itself kinda goes against the spirit. It's understandable that you as the maker want to flame the hype as much as possible, but by making it too obvious you are kinda working against that goal.
- 2mo ago
- bestony 2mo agoSo cool! If I wanted to make a similar product, how should I do it? Do you have any advice or research directions? I saw a company using SSH for hiring a couple of days ago, and I thought it was really cool. I also want to build something similar.
- jeninh 2mo agoI'm going to be so honest, I don't have much advice for you. I'm a teenager who's part of Hack Club (https://hackclub.com https://hackclub.com) who made this entirely for fun. I was inspired by @zachlatta's SSHtron (https://github.com/zachlatta/sshtron https://github.com/zachlatta/sshtron) and wanted to make an SSH game. I loved how easy it was for him to promote it too, he made a HN post with title "ssh sshtron.zachlatta.com" because it gets people to try out the actual game rather than look at a README. If you have a business, find something useful that would help! Or in my case, find something fun you want to make/remake to be used in the terminal over SSH. Hack Club also used to have a hiring page over SSH, if I recall correctly. My code uses wish, bubbletea and lipgloss from Charm. You can look at the code over at https://github.com/jeninh/ssh.place https://github.com/jeninh/ssh.place Good luck!
- dolmen 2mo agossh superlogical.jobs
- cdelsolar 2mo agoaw it didn't work with kitty. i get logged out.
- 3dedb728-3f77 2mo agoHey, is it not just a simple honeypot reverse hack ssh server? People understand that reverse hacking can happen when connecting to random ssh server, right?
- applfanboysbgon 2mo agoWhat exactly is the mechanism by which you think that an SSH RCE is "simple"?
- bulbar 2mo agoIs that more likely than getting hacked when visiting a website?
- raggi 2mo agoTime for your regular reminder that ssh has no PKI and is trivial to mitm during tofu.
- pzacik 2mo agoYes, but what exactly would an attacker achieve by doing mitm here?
- raggi 2mo agohere, less than most, but look for ssh agents on terminal.shop, steal credit cards on jobs endpoints, perform identity theft on exe.dev, whatever you put on there
- kro 2mo agoI understand that most people don't use it and indeed rely on tofu, but the statement is not absolutely correct. ssh server keys can be authenticated using (the DNSSEC "CA" system and) SSHFP, and it's possible to setup a signing CA for the host key (similar to ssh certificates, however not applicable for foreign servers). And of course, the fingerprint could be advertised out of band e.g. on the homepage with tls
- raggi 2mo agosshfp is not PKI. It's an option and it is off by default in ssh(1). In practice no one actually deploys it, exe.dev, terminal.shop, jobs.{whoever.com}, etc. I've yet to see an in the wild deployment. The aforementioned sites let you perform electronic payment transactions over ssh without it, which is probably a PCI violation tbh, but auditors aren't good enough. webpki is on by default.
- rvz 2mo agoAgreed. Amid all this hype, once again we continue to see such disregard for basic security implications and using ssh outside it's intended use-case; especially sshing into random servers. Now we wait for the discovery of an RCE, key leakage vulnerability or a security bypass that leads to a trivial mitm attack to magnify why ssh apps make no sense security wise.
- mplewis 2mo agoTakes all the fun out of it when people are multiboxing for the sake of posting an advertisement. Oh well.
- jeninh 2mo agoWelp. Same thing happened in r/place
- Heliodex 2mo agoNice, I first saw this on Hack Club ;) Check your terminal to see if it supports certain colours, on mine the darker and lighter colours (eg. maroon/red, purple/magenta) look identical.
- koolala 2mo agoWish we had a WebSSH like WebSockets / IRC v3.
- boomlinde 2mo agoIf you have a slight interest in originality of presentation, whatever website copy first comes out of Claude is not there yet. Its preoccupation with "no x, no y" and annoying runs of sentence fragments might have been a punchy rhetoric for a short while before it became a tired cliché, but by now it stylistically makes it look more like you're bragging on LinkedIn than presenting something fun and creative. I mention it because it's immediately off-putting even though the project itself sounds fun enough. It tarnishes it with the impression that maybe you just don't care, but maybe you just aren't attuned to the style and its strong slop connotations. I'm genuinely fascinated by the problem and I've wondered what in the training process causes the model to develop this peculiar style of writing. Is it because it's trained on old Medium slop? Someone else replied with a link to their SSH-based VPS, where the copy is absolutely saturated with the same annoying style.
- myzek 2mo agoYeah it kinda feels like a great, original meal but served on plasticware
- lxgr 2mo ago> I've wondered what in the training process causes the model to develop this peculiar style of writing I think this might just be inherent to the currently deployed LLM architecture. If the training process works at all, any model will come out of it with some (default) voice that it'll apply everywhere. Human voices are not like that, both because one copywriter does not write a significant fraction of all texts in the world and because unlike LLMs they remember all of their own prior writing, which gives them an opportunity to get tired of their old tropes.
- lordgrenville 2mo agoI don't think Claude's writing style is peculiar, it is just that we are being flooded with it. Everything becomes stale with overuse.
- boomlinde 2mo agoI think its peculiar in that it's so limited, repetitive and undiscerning in its stylistic expression. The stylistic elements on their own wouldn't raise an eyebrow if they appeared rarely among many other stylistic devices in order to enhance drama, suspense or emphasis, but within a single completion, Claude will sometimes implement just these two several times to express the most banal things. It ends up looking like a caricature of the worst pre-LLM Medium and LinkedIn garbage.
- dhotson 2mo agoHah nice! I made something a bit like this too: ssh paint.dn.ht It's using kitty/iTerm2/Ghostty image placement + pixel mouse reporting support for drawing. ..and for more fun: ssh ski.dn.ht :-)
- Tepix 2mo agoWhy is there no orange? The entire colour palette is a bit depressing. Also my terminal (Ubuntu in WSL2) had an ugly colour palette defined by default with several identical colours. I'm glad I found out! Use this to check yours: for i in {0..15}; do printf "\e[48;5;%dm %2d \e[0m " "$i" "$i"; (( (i + 1) % 8 == 0 )) && echo; done and then press ctrl + , to change it.
- jeninh 2mo agoI'll look into adding orange, thanks :)
- basdp 2mo agoit's already littered with bots, so it's not fun for a human to go there.
- jeninh 2mo agoSuch was r/place, and such is life. There is never a world where there will be no bots and it'll also be completely free for anyone to use online. I'll try to nerf it, though.
- cachius 2mo agoWhat's with Fil-C is unsafe? https://archive.ph/ysqbm https://archive.ph/ysqbm TIL about 4chan clanker clone moltshit.com
- t1234s 2mo agoreminds me of the DOS program TheDraw
- jxmorris12 2mo agoI love the idea. I couldn't get it to work; I navigated to (0,0) but didn't see a cursor; kept changing colors and trying to place blocks but saw nothing. Eventually my Ghostty crashed.
- cdelsolar 2mo agoaw someone deleted my weezer =w=
- ohgree 2mo agobrilliant :)
- jeninh 2mo ago[dead]
- bob65536 1mo agoWhy so few colors? Even with palette characters you can have 240 or so options, and with truecolor you can just have anything. Also, you can double your vertical resolution by using half block characters, setting the foreground color as the top half, and setting the background color as the bottom half. Something like this: `\x1b[38;2;{r};{g};{b};48;2;{r};{g};{b}m{half block character}`.