coal320

Nope! The entire thing is behind nginx! And I'm not using dx serve either! I'm statically building each page server-side so I can ship zero WASM/JS (barring analytics) and then each page is served as plain HTML through Rocket. Rocket is bound to the loopback adapter which is proxied by nginx.

coal320

anno scorsodiscuss

Trust me. I have no intention of accepting it!

coal320

anno scorsodiscuss

I have temporarily taken the post down and am working with the developer to resolve the ongoing issues.

Update available here: https://coal.sh/blog/pandu_bad

coal320

anno scorsodiscuss

I've reached out to the dev and have offered to resolve the security issues for free! I'll update the post when/if things change.

coal320

anno scorsodiscuss

I guess not? I've never used it before.

coal320

anno scorsodiscuss

It definitely crossed my mind :)

coal320

anno scorsodiscuss

Responsible disclosure was given. Developer doesn't seem keen on changing things.

coal320

anno scorsodiscuss

It's custom! It's built using Dioxus + Rust and is statically generated. You can find it here: https://github.com/coal-rock/site

coal320

anno scorsodiscuss

He didn't even rank in the hackathon, I was just providing context. A friend of mine placed first and I think it was well deserved!

coal320

anno scorsodiscuss

I'm bad at web stuff and they kinda looked gross! It was only supposed to be on mobile. I'll fix it!

coal320

anno scorsodiscuss

This site is also accessible via ssh:

`ssh [email protected]`

coal320

anno scorsodiscuss

VC firms will be the downfall of the internet as we know it.

coal320

anno scorsodiscuss

Exactly my thought process! I work in cybersecurity so I'm very grateful for the job security :)

coal320

anno scorsodiscuss

Could you not just deploy it on whatever device you're using as a firewall?