coal320

Nope! The entire thing is behind nginx! And I'm not using dx serve either! I'm statically building each page server-side so I can ship zero WASM/JS (barring analytics) and then each page is served as plain HTML through Rocket. Rocket is bound to the loopback adapter which is proxied by nginx.

coal320

letztes Jahrdiscuss

Trust me. I have no intention of accepting it!

coal320

letztes Jahrdiscuss

I have temporarily taken the post down and am working with the developer to resolve the ongoing issues.

Update available here: https://coal.sh/blog/pandu_bad

coal320

letztes Jahrdiscuss

I've reached out to the dev and have offered to resolve the security issues for free! I'll update the post when/if things change.

coal320

letztes Jahrdiscuss

I guess not? I've never used it before.

coal320

letztes Jahrdiscuss

It definitely crossed my mind :)

coal320

letztes Jahrdiscuss

Responsible disclosure was given. Developer doesn't seem keen on changing things.

coal320

letztes Jahrdiscuss

It's custom! It's built using Dioxus + Rust and is statically generated. You can find it here: https://github.com/coal-rock/site

coal320

letztes Jahrdiscuss

He didn't even rank in the hackathon, I was just providing context. A friend of mine placed first and I think it was well deserved!

coal320

letztes Jahrdiscuss

I'm bad at web stuff and they kinda looked gross! It was only supposed to be on mobile. I'll fix it!

coal320

letztes Jahrdiscuss

This site is also accessible via ssh:

`ssh [email protected]`

coal320

letztes Jahrdiscuss

VC firms will be the downfall of the internet as we know it.

coal320

letztes Jahrdiscuss

Exactly my thought process! I work in cybersecurity so I'm very grateful for the job security :)

coal320

letztes Jahrdiscuss

Could you not just deploy it on whatever device you're using as a firewall?