coal320

Nope! The entire thing is behind nginx! And I'm not using dx serve either! I'm statically building each page server-side so I can ship zero WASM/JS (barring analytics) and then each page is served as plain HTML through Rocket. Rocket is bound to the loopback adapter which is proxied by nginx.

coal320

tahun laludiscuss

Trust me. I have no intention of accepting it!

coal320

tahun laludiscuss

I have temporarily taken the post down and am working with the developer to resolve the ongoing issues.

Update available here: https://coal.sh/blog/pandu_bad

coal320

tahun laludiscuss

I've reached out to the dev and have offered to resolve the security issues for free! I'll update the post when/if things change.

coal320

tahun laludiscuss

I guess not? I've never used it before.

coal320

tahun laludiscuss

It definitely crossed my mind :)

coal320

tahun laludiscuss

Responsible disclosure was given. Developer doesn't seem keen on changing things.

coal320

tahun laludiscuss

It's custom! It's built using Dioxus + Rust and is statically generated. You can find it here: https://github.com/coal-rock/site

coal320

tahun laludiscuss

He didn't even rank in the hackathon, I was just providing context. A friend of mine placed first and I think it was well deserved!

coal320

tahun laludiscuss

I'm bad at web stuff and they kinda looked gross! It was only supposed to be on mobile. I'll fix it!

coal320

tahun laludiscuss

This site is also accessible via ssh:

`ssh [email protected]`

coal320

tahun laludiscuss

VC firms will be the downfall of the internet as we know it.

coal320

tahun laludiscuss

Exactly my thought process! I work in cybersecurity so I'm very grateful for the job security :)

coal320

tahun laludiscuss

Could you not just deploy it on whatever device you're using as a firewall?