Technology
This is the official technology community of Lemmy.ml for all news related to creation and use of technology, and to facilitate civil, meaningful discussion around it.
Ask in DM before posting product reviews or ads. All such posts otherwise are subject to removal.
Rules:
1: All Lemmy rules apply
2: Do not post low effort posts
3: NEVER post naziped*gore stuff
4: Always post article URLs or their archived version URLs as sources, NOT screenshots. Help the blind users.
5: personal rants of Big Tech CEOs like Elon Musk are unwelcome (does not include posts about their companies affecting wide range of people)
6: no advertisement posts unless verified as legitimate and non-exploitative/non-consumerist
7: crypto related posts, unless essential, are disallowed
view the rest of the comments
Ideally, almost no devices should be connected to the internet. Things like 3D printers, TVs with microphones/cameras, etc should be in a DMZ and have outgoing-only access to a restricted set of services.
If you're running anything close to a professional operation, set up your site professionally. For home users, I recommend sticking with SD cards, it's only mildly more annoying for the frequency of printing you're likely to do.
Octoprint is great, connecting the printer to somebody else's computer is crazy
Yup. I'd still put it behind a VPN though, just because of the inherent dangers in starting a 3D print job remotely.
I agree, using a VPN is generally a good idea (if the alternative is exposing it to the web directly).
I have an nginx reverse proxy with http auth, myself. It's such battle tested software that I trust it fully
For anyone doing similar: battle tested software is still fallible, and exploits could emerge at any point (same goes for VPNs). Be sure to set
server_tokenstooff, this prevents NGINX from revealing it's version to the world, which will help protect you in case an exploit is discovered down the line.That's a good tip. Also: have your servers auto-update weekly. You will forget.
There's benefits to having your 3D printer connected to the internet though. It allows you to monitor the progress and lets you cancel the print if there's an error, potentially saving uou a lot on filament and repairs.
That being said, having them connect to centralized servers is dumb. Just add a Raspberry Pi with octoprint flashed onto it and set up your own connection if you want that feature.
You can also just VPN in. It's not hard, and many routers have that ability today.
Is there a guide for setting up a DMZ? I have a Nest cam for our dog (bought wayyy before Google bought them out) and use HomeKit for everything that allows it, but those devices have their own apps too so they have almost unfettered access to the net. I like having my AC on internet so I can turn it on/off when I’m not home in case I forgot to turn it on that morning (living in the PNW, so we don’t need it every day in the summer, as open windows are good enough and free), so I get home to a moderately cooled place rather than a hot box.
Even if it allows that set of services, if the device allows any sort of control via that service you could still end up in a bad situation.
Yep.
TVs, Fridges, Toilets, Dishwashers, Clothes Washers/Dryers, Thermostats, and a whole range of other things do not, and will never need, access to the internet.
By giving them access to the internet, you are just lighting a fuse and waiting for the bomb to go off. Maybe that bomb is personal banking details, maybe that bomb is financial in that someone cranks your AC up to 150 when you are gone for a week and come home to house full of heat damage and melt, or maybe that bomb is a 3d printer that turned on, malfunctioned, and burned your house down.
IoT is stupid.
And the worst part is, you probably can't sue that IoT company for damages.
i want to have my PC connect directly to the internet so there can be incoming traffic directly to it rather than thru a router