--- title: Show HN: ssh ssh.place | daily.dev description: ssh.place is a shared collaborative drawing canvas accessible entirely over SSH. No account or installation required — just run `ssh ssh.place`. The 200×60... canonical: https://daily.dev/posts/show-hn-ssh-ssh-place-uqvmhvcjb twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Show HN: ssh ssh.place | daily.dev og:description: ssh.place is a shared collaborative drawing canvas accessible entirely over SSH. No account or installation required — just run `ssh ssh.place`. The 200×60... og:url: https://daily.dev/posts/show-hn-ssh-ssh-place-uqvmhvcjb og:image: https://api.daily.dev/og/posts/uQVmhVcJB.png og:image:alt: Show HN: ssh ssh.place og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Show HN: ssh ssh.place **[Hacker News](https://daily.dev/sources/hn)** · 1 min read · 0 upvotes · 0 comments ## Summary ssh.place is a shared collaborative drawing canvas accessible entirely over SSH. No account or installation required — just run `ssh ssh.place`. The 200×60 cell canvas is color-only (no text), with a 15-second cooldown per SSH key. Navigation uses wasd or hjkl controls, and the cooldown is tied to your SSH key so reconnecting won't reset it. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Community take How the wider developer community reacted, aggregated from 1 discussion and 132 comments across hackernews (as of 2026-08-03). **TL;DR:** The community is largely enthusiastic about ssh.place, a collaborative pixel-art canvas accessible over SSH made by a teenager, while a side debate erupts over the security risks of connecting to random SSH servers (agent forwarding, terminal escape sequences, MITM) — with most concluding the risk is low but real. **Sentiment:** 55% positive · 30% mixed · 15% skeptical **The case for** - The project is creative and fun, part of a growing wave of SSH-based apps that people find inspiring. - The creator is a teenager building for fun via Hack Club, which earns genuine admiration from commenters. - Using SSH as a delivery mechanism is clever for promotion — it gets people to try the app directly rather than just read a README. - The Charm (wish/bubbletea/lipgloss) stack makes building such apps accessible. **The pushback** - The canvas quickly filled with bots, making it less fun for human participants. - Website copy appears to be AI-generated (Claude-style), which commenters find off-putting and 'slop'-like. - SSH lacks PKI by default (TOFU), making these apps potentially vulnerable to MITM attacks, especially those handling payments. - Terminal emulator vulnerabilities (e.g., iTerm2 escape-sequence CVEs) represent a real, if low, attack surface when connecting to untrusted SSH servers. - Color palette issues (e.g., yellow/olive indistinguishable, no orange) and cursor visibility bugs were reported. **By community** - hackernews (positive): Commenters are genuinely charmed by the project and the teenage creator, though a lively security sub-thread and bot complaints temper the enthusiasm. **Hottest debate:** Whether connecting to a random SSH server poses meaningful security risk (via client vulnerabilities, terminal escape sequences, or agent forwarding) compared to everyday browser use. **Open questions** - Will the cooldown/anti-bot measures scale if the project gets significantly more traffic? - Are SSH-based payment apps (like terminal.shop) actually PCI-compliant without SSHFP or equivalent PKI? - Is there a good coordination mechanism for faction-based collaborative drawing once the HN post dies down? **Highlights** > I'm going to be so honest, I don't have much advice for you. I'm a teenager who's part of Hack Club (https://hackclub.com) who made this entirely for fun. I was inspired by @zachlatta's SSHtron (https://github.com/zachlatta/sshtron) and wanted to make an SSH game. I loved how easy it was for him to promote it too, he made a HN post with title "ssh sshtron.zachlatta.com" because it gets people to try out the actual game rather than look at a README. If you have a business, find something useful that would help! Or in my case, find something fun you want to make/remake to be used in the terminal over SSH. Hack Club also used to have a hiring page over SSH, if I recall correctly. My code uses wish, bubbletea and lipgloss from Charm. You can look at the code over at https://github.com/jeninh/ssh.place Good luck! > — [jeninh on hackernews · 1 comments](https://news.ycombinator.com/item?id=49150727) > Are we all pretending we have no empirical data on this? How many RCEs has there been in popular web browsers over the past two decades (dozens? hundreds?), compared to how many RCEs there has been in the OpenSSH client (perhaps we can make it one if we include xterm in that)? > — [xorcist on hackernews](https://news.ycombinator.com/item?id=49153537) > If you have a slight interest in originality of presentation, whatever website copy first comes out of Claude is not there yet. Its preoccupation with "no x, no y" and annoying runs of sentence fragments might have been a punchy rhetoric for a short while before it became a tired cliché, but by now it stylistically makes it look more like you're bragging on LinkedIn than presenting something fun and creative. I mention it because it's immediately off-putting even though the project itself sounds fun enough. It tarnishes it with the impression that maybe you just don't care, but maybe you just aren't attuned to the style and its strong slop connotations. I'm genuinely fascinated by the problem and I've wondered what in the training process causes the model to develop this peculiar style of writing. Is it because it's trained on old Medium slop? Someone else replied with a link to their SSH-based VPS, where the copy is absolutely saturated with the same annoying style. > — [boomlinde on hackernews · 5 comments](https://news.ycombinator.com/item?id=49152136) > There has never been a real-world OpenSSH exploit that allows a server to RCE a client that connected to it without a bunch of dubious qualifiers. Connecting to a random SSH server is much, much less dangerous than running a random binary or executing a random curl install script, both of which people do all the time, and is probably about on par with the likelihood of a random website escaping your browser's sandbox and RCEing you. > — [applfanboysbgon on hackernews · 5 comments](https://news.ycombinator.com/item?id=49151800) > Agreed. Amid all this hype, once again we continue to see such disregard for basic security implications and using ssh outside it's intended use-case; especially sshing into random servers. Now we wait for the discovery of an RCE, key leakage vulnerability or a security bypass that leads to a trivial mitm attack to magnify why ssh apps make no sense security wise. > — [rvz on hackernews](https://news.ycombinator.com/item?id=49152398) **Source threads** - [hackernews](https://news.ycombinator.com/item?id=49149805) · 73 points · 132 comments ## Similar posts on daily.dev - [place over SSH](https://daily.dev/posts/place-over-ssh-56gxvjve5) · Hacker News · 5 upvotes · 2 comments - [snakes.run: rendering 100M pixels a second over ssh · eieio.games](https://daily.dev/posts/snakes-run-rendering-100m-pixels-a-second-over-ssh-eieio-games-wcmuy5nco) · Lobsters · 3 upvotes · 0 comments - [late.sh](https://daily.dev/posts/late-sh-d6in5qpwr) · Hacker News · 5 upvotes · 2 comments - [I finally found a productivity tool my non-technical friends will actually use](https://daily.dev/posts/i-finally-found-a-productivity-tool-my-non-technical-friends-will-actually-use-7ljltwz0n) · XDA Developers · 0 upvotes · 0 comments - [ssh tiny.christmas · eieio.games](https://daily.dev/posts/ssh-tiny-christmas-eieio-games-8v8ofjyof) · Lobsters · 2 upvotes · 0 comments --- Tags: [#ssh](https://daily.dev/tags/ssh) [View this post on daily.dev](https://daily.dev/posts/show-hn-ssh-ssh-place-uqvmhvcjb) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Show HN: ssh ssh.place","url":"https://daily.dev/posts/show-hn-ssh-ssh-place-uqvmhvcjb","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/show-hn-ssh-ssh-place-uqvmhvcjb"},"datePublished":"2026-08-03T05:04:27.686Z","dateModified":"2026-08-03T17:51:09.525Z","description":"ssh.place is a shared collaborative drawing canvas accessible entirely over SSH. No account or installation required — just run `ssh ssh.place`. The 200×60...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8dd2bfdcaf9604a1967b5844920f8133?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8dd2bfdcaf9604a1967b5844920f8133?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Hacker News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Hacker News","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/hn","url":"https://daily.dev/sources/hn"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/show-hn-ssh-ssh-place-uqvmhvcjb","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ssh","timeRequired":"PT1M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Hacker News","item":"https://daily.dev/sources/hn"},{"@type":"ListItem","position":3,"name":"Show HN: ssh ssh.place"}]} ```