Yep, documentation and a good base level default installation configuration/guide with minimal friction.

I’m perfectly willing to play around once I know at the basic level that the core flow is going to work for me. If it takes me digging through a stack of documentation (especially if it’s bad) to even get something to experiment with on my own system? I won’t bother.

Yes, it is?

Your rant doesn’t make sense. Asking for suggestions because you’re not OK with being spied on (especially when you’re perfectly willing to absorb the hosting costs yourself or pay for a service that isn’t hostile) is perfectly valid behavior.

Apparently I phrased it badly because every vote on it is down lol.

So it’s probably my bad.

That’s literally my point.

Most people know that email isn’t tied to a provider app.

Email providers absolutely block other email providers who abuse their system.

It’s also not even close to how email works and plenty of people use email apps that aren’t tied to a provider.

I could get the “default” to facilitate setup, but as far as I’m concerned it’s seriously fucked not to have the first step of your script be replacing it with the user’s own choices. It’s really hard for me to trust the security as a whole of a project that does that by default, especially because it’s intended to be for inexperienced users and there was no indication during the setup process or other included information that that was the case.

Serious question: last I looked at casaOS (because I liked the hardware), they had SSH open and accessible to default passwords by default. This scared me off hard.

Is this still a thing/are there other glaring security holes?

He wants all of his books in one index.

Can you lock it so only you can upload?

It sounds like a useful way to share stuff with friends, but not if any random person can upload stuff.

This is stupid as hell.

To be fair, people having ideas for features is a valuable contribution in its own right.

Entitlement to them, not so much. But feature suggestions have value even if many of them aren’t practical and many more never get added.

You should be able to set it up, which seems to be the crux of your question.

The reason for the conflict is likely that the traffic is encrypted through the tunnel, but cloudflare holds the certificates needed to verify the identity of your site and can see all the traffic.

But tunnels are done by having your server initiate the connection with cloudflare, so it behaves like a client in terms of networking, and it should work in most cases.

(Worth noting that video was against their policies for using at least the free tunnels last I was aware, so if that’s part of your use case you might not be able to use it.)

Value is absolutely not arbitrary.

“Reasonable” means comparable with x86/ARM at the same performance level. Anything more is, by definition, not capable of being reasonably priced.

You’re again advocating for an imaginary investment in a bad product.

My interpretation was by far the most generous to your position, because it’s the only way it’s coherent.

If people bought [this hardware that doesn’t actually provide anything anyone can realistically use at a reasonable price] it might eventually not suck. That’s treating a current purchase as an imaginary investment in maybe eventually being able to buy something useful.

What are you talking about perfection?

Buying something that doesn’t function is never rational.

You’re responding to a post about exploiting kernel level anticheat and saying it would only be a targeted attack, despite that inherently not making sense. When you find a vulnerability in that software, there is absolutely no reason not to spread it en masse. The cost to infect one person is the same as the cost to affect tens of thousands or more. The game is both the vulnerability and the distribution method.

Gamers aren’t more valuable. They’re more accessible. Because there isn’t a kernel rootkit “anticheat” developer on the planet who gives two shits about security in any context, and there are a massive number of systems that their insane hacky bullshit touches. Every single one of them has their security automatically compromised. The goal isn’t just information. You’re getting a massive, distributed, residential IP botnet that you can’t lose unless they throw their systems in the trash.

For what reason?

Kernel level game anticheats are a great attack vector, and it’s one that inherently identifies and enables distribution to other vulnerable targets. It’s begging to self replicate.

Industrial espionage does not make sense, because most enterprises have, even if imperfect, restrictions on what can be installed on company computers that contain valuable information. You’re not going to get a game with kernel malware on a managed enterprise computer.

I don’t see it being a mass target attack like a worm could be.

Why not? Malware that survives a full new install is extremely valuable, and there are loads of games adding vulnerabilities with required kernel level rootkits. It’s only a matter of time until one of these vendors is exploited, and why wouldn’t you permanently own the significant chunk of the market with unpatched serious vulnerabilities while you’re at it?

The cost isn’t that high. They’re already doing it for a bunch of parallel systems.

In a just world they’d be legally required to provide the fixes, or fully refund the entire platform cost. It’s not remotely ethical to allow this to exist unpatched anywhere, regardless of support life.