davsti4

Exactly - its why laws are written. So, if its enough of a problem, then there should be a law stopping/regulating it.

Are published TOSs enough to stop the owners of the bots?

That's a slippery slope opinion.

One person's norm can oppose another's norm. Who defines them? If my "norm" is to stop at a stop sign, and yours is to roll through it, are you the abusive jerk?

One word answer - security.

Any website you visit could have been compromised and serving malicious content. Upon first visit to a website, I block all connections to domains not in the address bar, then go back in and add rules to allow connections as needed. It doesn't address malicious activity by the site directly, like a server compromise, but does limit non-addressed connections, including ones to local addresses.

For example, a compromise of .google.com which leveraged assets/code from .googleusercontent.com wouldn't initially be able to run, unless I added a rule to allow the connection. Likewise, a compromise of *.discord.com that made a connection to localhost:8983, then tried to send that data to someserver.ru would get blocked and logged. Where this can't protect me is if the server sends the mined data back to itself, then forwards that data on using its own connection.

Ad networks sell to anyone. Malicious content can be injected almost anywhere. Its happened before; it'll happen again. This web browsing hygiene has protected me enough times for me to make it my standard practice.

Its simple, and I'll quote myself - "robots.txt isn't the law".

They could be NK hackers using the service to target their next corporate ransom victim.

Agreed - which is disappointing.

My firewall shows blocked connections to cdn.tailwindcss.com and unpkg.com

So, I should expect to see a new product launch of DoughnutKVM, to "round out your infrastructure woes", complete with vibe coded app interface and AI generated product images, here in the next week? ;P

"We analyze your specific data flows" - exactly how do you do this?

THIS ↑ is what we need more of. Thanks Ryan.

More details would be great, like the headers.

Ctrl-- (browser zoom down to 80%)

Its simple usability polish. Tomato had it, OpenWRT doesn't. But where it shines is in the reliability. I've been using it for over 10 years, and prior to that DD-WRT on a 54L.

That's the biggest challenge with many of these open source tools. They're built to solve a single or handful of problems, but don't always fit for a larger audience. I'm not complaining either, and I'd be happy to provide the polish, but right now, my time is spent with my clients ($$).

If you invest the time in getting it configured the way you want, you'll be happy too, for 10 years. ;)

Food for thought of why I'm exploring other options currently: 1. Need a WAN failover that can check with a custom heartbeat 2. Need an easy-to-configure VPN that doesn't use an open port, but will register against my own cloud server 3. Need an easy way to monitor traffic of particular devices - DNS queries and active connections 4. Need a big button to turn off the internet for all, and individual buttons to turn it of for specific devices 5. Need an easy way to manage VLANs and traffic routing rules (for local-only designated devices)

Not yet... but the machines will make it so ;)

> Maybe Intel should invent desktop+mobile OS and design bespoke chips for those.

Or, contribute efficiency updates to popular open projects like firefox, chromium, etc...

robots.txt isn't the law

I've used that solution in the past. What happens when the bots start port knocking?

t-shirt worthy quote - "modern web design is a joke" ;)

I just tried opening it in a private window and the page loaded and rendered. What part doesn't work?

While this may work for others replying in support of, you can't use this software without logging in. That's a showstopper for me. It leads me to believe it'll begin syncing my data outside of my local environment. Can you put details about an upcoming employer meeting there without notifying your employer you've shared this data with a third party vendor? Can you put sensitive customer information in it without a governing contract without notifying the customer? ;)

Looks good - I was only able to use the demo partially. The page needed access to: client.crisp.chat , pbs.twimg.com ; assets.onedollarstats.com ; and googletagmanager.com .

I'm assuming I can remove these dependencies for my own use?

Trying to register and I get this in the browser console:

Access to fetch at 'https://api.lumoar.com/v1/auth/register' from origin 'https://www.lumoar.com' has been blocked by CORS policy: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'.