34 comments

  • greengreengrass37 minutes ago
    I would prefer the connection instructions made clear that the default SSH username would be used to set up my username on the platform and display that to other users without initially seeking my consent. On $machine[work], I don&#x27;t get to pick that $USER is my full name.<p>If this affects you, make sure you connect with `ssh [pseudonymous name]@late.sh`.
  • jwr5 minutes ago
    That is a modern BBS! I love the idea. Though I guess most people these days don&#x27;t know what a BBS is, if you don&#x27;t, look it up.
  • 1dom5 hours ago
    This is a really cool idea, and very appealing. Also very nice that it looks usable with just an SSH client. It would be useful if it was explained what the companion client is for?<p>Another small personal gripe: I think you should either remove the 1 line copy&#x2F;paste sh install on the homepage, or add a link to a git repo on the homepage. I know it&#x27;s possible to view the sh by visiting it, but a raw text file doesn&#x27;t give any info about contributors or development process. Current form of no git repo and copy&#x2F;paste bash pipe on homepage feels like a dark pattern.
    • Izmaki4 hours ago
      Not to mention that a webserver can be configured to show one sh file when a regular browser visits and another when curl etc. gets it. Show one thing, install another.
      • nkrisc2 hours ago
        So download it with curl and read it first before executing it from your local disk.
        • codegladiator2 hours ago
          read it ? we dont do what kind of stuff here, i got my army of reader agents.
        • Izmaki2 hours ago
          Except you can&#x27;t really be sure, still: <a href="http:&#x2F;&#x2F;web.archive.org&#x2F;web&#x2F;20250622061208&#x2F;https:&#x2F;&#x2F;www.idontplaydarts.com&#x2F;2016&#x2F;04&#x2F;detecting-curl-pipe-bash-server-side&#x2F;" rel="nofollow">http:&#x2F;&#x2F;web.archive.org&#x2F;web&#x2F;20250622061208&#x2F;https:&#x2F;&#x2F;www.idontp...</a>
    • bl4ckbe4r4 hours ago
      noted, good feedback :) will change it later, thanks!
      • rob1 hour ago
        You don&#x27;t have to change it just because one person complained. I personally like the &quot;copy and paste curl command&quot; to install something and I&#x27;m sure many others do as well. It&#x27;s very convenient, and I can inspect the file myself if I&#x27;m that paranoid about it.
  • polycancel31 minutes ago
    Also for all these kind of ssh stuff. Please include server finger print so others verify.<p>Is this your server fingerprint?<p>ED25519 key fingerprint is SHA256:Tc7aeaaQulKJeF3C&#x2F;zd2BKvq&#x2F;KgaQTHyMPNa3s9K+aE.
  • flexagoon3 hours ago
    Really reminds me of <a href="https:&#x2F;&#x2F;tilde.town" rel="nofollow">https:&#x2F;&#x2F;tilde.town</a>
  • tristanMatthias6 hours ago
    For those who don&#x27;t know just discovered you can change your theme!<p>Ctrl + O -&gt; Move down to your theme. Helps with the default one being a bit chaotic<p>Thanks for whoever made this. This is rad and gives me hope for the old internet vibes.
  • kksweet6 hours ago
    This is like habbo hotel but for terminal nerds, amazing.
  • pwillia71 hour ago
    Fix for ChromeOS Linux: <a href="https:&#x2F;&#x2F;chatgpt.com&#x2F;share&#x2F;6a60b174-7b14-83ea-83d4-bdf4dc8cccf7" rel="nofollow">https:&#x2F;&#x2F;chatgpt.com&#x2F;share&#x2F;6a60b174-7b14-83ea-83d4-bdf4dc8ccc...</a>
  • amanverasia6 hours ago
    Pay no need to other comments over here, this is awesome. I showed this to my co-workers, they all love it.
  • modinfo9 hours ago
    This is amazing! Even real icecast with irc &lt;3 Even my fav game 2048, even with real LLM :D<p>Fantastic job mati!
  • Izmaki4 hours ago
    OK, which one of yous tried to `sudo apt install bobs and vageen`?? xD
  • docheinestages6 hours ago
    I loved the text contrast on the landing page. Grey text on a dark background.
    • asdf889905 hours ago
      Yeah, it is a very nice way of saying “f off” if you’re poor, whatever with your display (low res mobile) or eyesight.
  • 283042834092342 hours ago
    Similar to DevZat: <a href="https:&#x2F;&#x2F;github.com&#x2F;quackduck&#x2F;devzat" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;quackduck&#x2F;devzat</a>
  • Schlagbohrer6 hours ago
    Is this just IRC
    • T3OU-7362 hours ago
      More of a BBS, I&#x27;d argue. Replace dialing with a modem with SSH, and otherwise the analogy holds decentky well.
  • maxgashkov3 hours ago
    I&#x27;m wondering how many ssh&#x27;d into this with the agent forwarding on?
  • podviaznikov1 hour ago
    love this!<p>was panning to add similar things into my own macOS[1] ssh app with persistent SSH server.<p>[1] <a href="https:&#x2F;&#x2F;popssh.com" rel="nofollow">https:&#x2F;&#x2F;popssh.com</a>
  • h43z3 hours ago
    Reminder to be cautious about leaking public keys.<p>Once you leak your public key it could be used to check if another server recognizes that leaked public key.
    • alentred1 hour ago
      Did I miss something? Aren&#x27;t public key are supposed to be public?<p>To be clear, that&#x27;s an honest question, not sarcasm of anything. I only assume I don&#x27;t know about some corner case with SSH or something? Because we have those on our websites, they are supposed to be used to verify signatures, etc. How is publishing them bad?
      • h43z55 minutes ago
        It&#x27;s just something everyone should be aware of.<p>It&#x27;s up to you to decide if it&#x27;s okay that you send a server provider (in this case late.sh) a bunch of your public keys which he could for example use to probe other servers to see if you have access to them.<p>Everyone has different opsec.
    • benj1113 hours ago
      Surely you shouldn&#x27;t be leaking your username. I could use it to see if another server recognised &#x27;h43z&#x27;....
      • h43z2 hours ago
        OpenSSH server is designed not to reveal whether a username exists.
    • Zambyte3 hours ago
      What?
      • h43z3 hours ago
        By default SSH leaks all of the below public keys (if they exist) + all public keys in your ssh-agent to a server you connect to.<p><pre><code> ~&#x2F;.ssh&#x2F;id_ecdsa.pub ~&#x2F;.ssh&#x2F;id_ecdsa_sk.pub ~&#x2F;.ssh&#x2F;id_ed25519.pub ~&#x2F;.ssh&#x2F;id_ed25519_sk.pub ~&#x2F;.ssh&#x2F;id_xmss.pub ~&#x2F;.ssh&#x2F;id_dsa.pub </code></pre> running `ssh late.sh` would do exactly that.<p>At the very bottom of the website they give you a command that would not leak your public keys.<p>`ssh-keygen -t ed25519 -f ~&#x2F;.ssh&#x2F;late_throwaway &amp;&amp; ssh -o IdentitiesOnly=yes -i ~&#x2F;.ssh&#x2F;late_throwaway late.sh`<p>this would only send the late_throwaway public key
        • Zambyte3 hours ago
          Okay, but why is that something to be concerned about? How would one be able to probe to see if a server recognizes a public key? Why does that matter?
          • prodigycorp3 hours ago
            so, i used my public key. can someone please tell me what i should be worried about now?
            • plaidwombat36 minutes ago
              All your base are belong to us. We recommend rotating keys more often than never.
            • h43z2 hours ago
              If I have your public key I could probe a server to see if it recognizes that public key. Which would tell me information you might not want to be leaked.
            • ErroneousBosh2 hours ago
              l33t h4xx0r5
          • nntlol3 hours ago
            [dead]
  • hankbond9 hours ago
    Design is illegible. Needs more contrast between text and background. I&#x27;m not even vision impaired and I was squinting immediately.
    • aslakhellesoy6 hours ago
      Even 15 years ago this was such a big problem that someone tried to start a rebellion: <a href="https:&#x2F;&#x2F;contrastrebellion.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;contrastrebellion.com&#x2F;</a>
      • gombosg4 hours ago
        Haha, nice website, with the greyed-out comments on HN featured among the offending examples. :)
    • bjelkeman-again6 hours ago
      So much modern GUI design is really poor for those a bit older where contrast is important.
    • 1e1a6 hours ago
      The accessibility checker in Chrome&#x2F;Firefox devtools would immediately flag this.
    • arnitdo5 hours ago
      Vibe coded slop has the same patterns of black-on-black and grey-on-grey illegible text. Mix that with piss poor monospace, small-size fonts and you have to squint to read each letter
    • d0ddy7 hours ago
      there are many many themes. some high contrast ones
      • sevenzero7 hours ago
        Hmm maybe the tool has but the design of the website made me squint as well.
        • ssl-37 hours ago
          Me, too. For me, it was easier without the DarkReader plugin enabled than with it (which is kind of common), but it wasn&#x27;t great to see either way.
    • viccis7 hours ago
      I&#x27;m, by contrast, an able bodied person with functioning eyes and had no issues.
      • tapland7 hours ago
        You might not have the average display.<p>But, can you reason more about your intent with the tone of your comment?
  • bl4ckbe4r4 hours ago
    NEW web design with better contrast incoming! :D Thank you for the feedback :)
    • pixlmint4 hours ago
      yeah I was gonna say, it&#x27;s very difficult to read on an eink display. And while we&#x27;re at it, I believe my phone is set to reduced animations, which I believe is a preference that&#x27;s exposed to websites, the experience would be much better without so much blinking going on.
  • dev_dan_21 hour ago
    Looks neat, bookmarked and want to check it out!
  • jrflowers6 hours ago
    Nice! I was just thinking about how much I love installing binaries instead of going to a website
  • warthog1 hour ago
    this is amazing, great idea
  • hahahaa8 hours ago
    why not just use irc?
    • dark-star34 minutes ago
      nobody has mIRC&#x2F;ircii installed by default<p>everyone has ssh installed by default
    • bl4ckbe4r5 hours ago
      can you listen to music, play sudoku&#x2F;nanograms&#x2F;tetris, do live artboard, jump into NetHack&#x2F;DCSS&#x2F;dopewars&#x2F;LOGD insdie IRC?
    • muzani6 hours ago
      Which servers are still alive?
      • stackghost5 hours ago
        Rizon, hackint, and Libera, among others
  • wazzup_im9 hours ago
    Good work, thanks!
  • DANmode9 hours ago
    Ever see something new, and just know it’s going to survive?<p>Your site copy is great to the last drop.<p>Great submission.
    • sevg9 hours ago
      &gt; Your site copy is great to the last drop.<p>It is? It’s just the usual LLM.
      • DANmode8 hours ago
        The <i>design</i> = “flavor of the week LLM”,<p>but someone still has to proof and tweak generated copy.<p>Someone cared about this page.
        • notpushkin6 hours ago
          No X. No Y. A is your B.<p>We do G, not H. C, D, E — plus an optional F.<p>No I, no J, no K — just an L into a W.<p>I would say the design is the most human thing about this page. (It has its charm somehow, even if it’s obviously “flavour of the week LLM design”. Also, I don’t think an LLM would choose colours so poorly unless nudged in that direction – accidentally, I suppose.)
        • tkel6 hours ago
          There&#x27;s maybe 100 words on the page. It would have taken someone 5 minutes to type that out. But apparently the creator didn&#x27;t even care enough to do that.
          • calgoo5 hours ago
            See thats the difference, i don&#x27;t core personally. Its a page to tell you to connect to the ssh server (or install their script). Why does it have to be a philosophical masterpiece? Its just word on a page saying click here, better looking then the majority of the SEO garbage that has plagued the internet for the last 15 year thanks to google and friends.
        • tkel6 hours ago
          You might be projecting . All the docs in the app looks like the usual wall-of-text that was autogenerated .
        • sevg7 hours ago
          Yeah, no. Not enough to make the page not look and sound like straight from an LLM.
          • ga_to6 hours ago
            Also not enough to make the text even a slight bit more readable. I have perfect eyes and am still struggling to focus on the headlines.
        • orphereus6 hours ago
          Lol
  • catfisher9 hours ago
    Pretty cool ngl.
  • vjay155 hours ago
    this is amazing
  • tonyrice8 hours ago
    I really love this!
  • TurdF3rguson9 hours ago
    And... Cue 1M dummies here running that code without even looking at it, SMH.
    • 1dom5 hours ago
      It&#x27;s possible to login and interact and use late.sh with just your SSH client - there&#x27;s no need to download or run custom code. But you that did make me realise that they don&#x27;t have a github link on that page anywhere.<p>Your tone in this comment is a bit out of place on HN. Why are you here if you think it&#x27;s 1M dummies?
      • TurdF3rguson4 hours ago
        The people why ran that line without knowing what it does are dummies. And yes maybe not 1M but there were a lot of them.
    • jauntywundrkind7 hours ago
      i had a quite good experience generating a key&#x2F;username on my local machine and ssh&#x27;ing in.<p>lot of vitriol in the comments. looks like a spectacularly put together BBS, to me. the tools are open-source and have some really fun looking value add, but no, i haven&#x27;t ran them.
  • luciana1u6 hours ago
    [dead]
  • jugguontop4 hours ago
    [dead]
  • hatorininja4 hours ago
    [dead]
  • behnamoh7 hours ago
    A CLI tool that&#x27;s not grep-able is a GUI disguised as TUI.
    • pmarreck7 hours ago
      Did it ever claim it was a CLI?
      • jrflowers6 hours ago
        Under every link to download the CLI. The ones hosted on the cli subdomain
    • joshka7 hours ago
      yes, and... ?