I would prefer the connection instructions made clear that the default SSH username would be used to set up my username on the platform and display that to other users without initially seeking my consent. On $machine[work], I don't get to pick that $USER is my full name.
If this affects you, make sure you connect with `ssh [pseudonymous name]@late.sh`.
This is a really cool idea, and very appealing. Also very nice that it looks usable with just an SSH client. It would be useful if it was explained what the companion client is for?
Another small personal gripe: I think you should either remove the 1 line copy/paste sh install on the homepage, or add a link to a git repo on the homepage. I know it's possible to view the sh by visiting it, but a raw text file doesn't give any info about contributors or development process. Current form of no git repo and copy/paste bash pipe on homepage feels like a dark pattern.
Not to mention that a webserver can be configured to show one sh file when a regular browser visits and another when curl etc. gets it. Show one thing, install another.
You don't have to change it just because one person complained. I personally like the "copy and paste curl command" to install something and I'm sure many others do as well. It's very convenient, and I can inspect the file myself if I'm that paranoid about it.
Did I miss something? Aren't public key are supposed to be public?
To be clear, that's an honest question, not sarcasm of anything. I only assume I don't know about some corner case with SSH or something? Because we have those on our websites, they are supposed to be used to verify signatures, etc. How is publishing them bad?
It's up to you to decide if it's okay that you send a server provider (in this case late.sh) a bunch of your public keys which he could for example use to probe other servers to see if you have access to them.
Okay, but why is that something to be concerned about? How would one be able to probe to see if a server recognizes a public key? Why does that matter?
If I have your public key I could probe a server to see if it recognizes that public key. Which would tell me information you might not want to be leaked.
yeah I was gonna say, it's very difficult to read on an eink display. And while we're at it, I believe my phone is set to reduced animations, which I believe is a preference that's exposed to websites, the experience would be much better without so much blinking going on.
Vibe coded slop has the same patterns of black-on-black and grey-on-grey illegible text. Mix that with piss poor monospace, small-size fonts and you have to squint to read each letter
I would say the design is the most human thing about this page. (It has its charm somehow, even if it’s obviously “flavour of the week LLM design”. Also, I don’t think an LLM would choose colours so poorly unless nudged in that direction – accidentally, I suppose.)
There's maybe 100 words on the page. It would have taken someone 5 minutes to type that out. But apparently the creator didn't even care enough to do that.
See thats the difference, i don't core personally. Its a page to tell you to connect to the ssh server (or install their script). Why does it have to be a philosophical masterpiece? Its just word on a page saying click here, better looking then the majority of the SEO garbage that has plagued the internet for the last 15 year thanks to google and friends.
It's possible to login and interact and use late.sh with just your SSH client - there's no need to download or run custom code. But you that did make me realise that they don't have a github link on that page anywhere.
Your tone in this comment is a bit out of place on HN. Why are you here if you think it's 1M dummies?
i had a quite good experience generating a key/username on my local machine and ssh'ing in.
lot of vitriol in the comments. looks like a spectacularly put together BBS, to me. the tools are open-source and have some really fun looking value add, but no, i haven't ran them.
If this affects you, make sure you connect with `ssh [pseudonymous name]@late.sh`.
Is this your server fingerprint?
ED25519 key fingerprint is SHA256:Tc7aeaaQulKJeF3C/zd2BKvq/KgaQTHyMPNa3s9K+aE.
Another small personal gripe: I think you should either remove the 1 line copy/paste sh install on the homepage, or add a link to a git repo on the homepage. I know it's possible to view the sh by visiting it, but a raw text file doesn't give any info about contributors or development process. Current form of no git repo and copy/paste bash pipe on homepage feels like a dark pattern.
Ctrl + O -> Move down to your theme. Helps with the default one being a bit chaotic
Thanks for whoever made this. This is rad and gives me hope for the old internet vibes.
Fantastic job mati!
was panning to add similar things into my own macOS[1] ssh app with persistent SSH server.
[1] https://popssh.com
Once you leak your public key it could be used to check if another server recognizes that leaked public key.
To be clear, that's an honest question, not sarcasm of anything. I only assume I don't know about some corner case with SSH or something? Because we have those on our websites, they are supposed to be used to verify signatures, etc. How is publishing them bad?
It's up to you to decide if it's okay that you send a server provider (in this case late.sh) a bunch of your public keys which he could for example use to probe other servers to see if you have access to them.
Everyone has different opsec.
At the very bottom of the website they give you a command that would not leak your public keys.
`ssh-keygen -t ed25519 -f ~/.ssh/late_throwaway && ssh -o IdentitiesOnly=yes -i ~/.ssh/late_throwaway late.sh`
this would only send the late_throwaway public key
But, can you reason more about your intent with the tone of your comment?
everyone has ssh installed by default
Your site copy is great to the last drop.
Great submission.
It is? It’s just the usual LLM.
but someone still has to proof and tweak generated copy.
Someone cared about this page.
We do G, not H. C, D, E — plus an optional F.
No I, no J, no K — just an L into a W.
I would say the design is the most human thing about this page. (It has its charm somehow, even if it’s obviously “flavour of the week LLM design”. Also, I don’t think an LLM would choose colours so poorly unless nudged in that direction – accidentally, I suppose.)
Your tone in this comment is a bit out of place on HN. Why are you here if you think it's 1M dummies?
lot of vitriol in the comments. looks like a spectacularly put together BBS, to me. the tools are open-source and have some really fun looking value add, but no, i haven't ran them.