coal320

Nope! The entire thing is behind nginx! And I'm not using dx serve either! I'm statically building each page server-side so I can ship zero WASM/JS (barring analytics) and then each page is served as plain HTML through Rocket. Rocket is bound to the loopback adapter which is proxied by nginx.

coal320

昨年議論

Trust me. I have no intention of accepting it!

coal320

昨年議論

I have temporarily taken the post down and am working with the developer to resolve the ongoing issues.

Update available here: https://coal.sh/blog/pandu_bad

coal320

昨年議論

I've reached out to the dev and have offered to resolve the security issues for free! I'll update the post when/if things change.

coal320

昨年議論

I guess not? I've never used it before.

coal320

昨年議論

It definitely crossed my mind :)

coal320

昨年議論

Responsible disclosure was given. Developer doesn't seem keen on changing things.

coal320

昨年議論

It's custom! It's built using Dioxus + Rust and is statically generated. You can find it here: https://github.com/coal-rock/site

coal320

昨年議論

He didn't even rank in the hackathon, I was just providing context. A friend of mine placed first and I think it was well deserved!

coal320

昨年議論

I'm bad at web stuff and they kinda looked gross! It was only supposed to be on mobile. I'll fix it!

coal320

昨年議論

This site is also accessible via ssh:

`ssh [email protected]`

coal320

昨年議論

VC firms will be the downfall of the internet as we know it.

coal320

昨年議論

Exactly my thought process! I work in cybersecurity so I'm very grateful for the job security :)

coal320

昨年議論

Could you not just deploy it on whatever device you're using as a firewall?