13 ms·

Localtunnel used to be a nice tunnel. It has gone through some enshittification lately. > tunnel consent page now requires the tunnel creator's public IP in or

by mkl95 3y ago

Localtunnel used to be a nice tunnel. It has gone through some enshittification lately. > tunnel consent page now requires the tunnel creator's public IP in order to access tunnel content https://github.com/localtunnel/localtunnel/issues/598 https://github.com/localtunnel/localtunnel/issues/598 There are free non kafkaesque competitors out there.

LoganDark 3y ago
> enshittification That is not enshittification by any means. Enshittification is screwing your users over for profit or something. That was an honest attempt to curb the amount of abuse reports and threats that the maintainer was receiving.
mmcclure 3y ago
I think it's pretty hard to read this as anything other than a maintainer trying to stop malicious actors from abusing their project. You might not agree with how they're doing it, but calling this enshittification and kafkaesque feels pretty hyperbolic. Posting the comment here just in case folks don't click through: Hey everyone, It saddens me to be forced to add yet another annoying thing to the public localtunnel server but... As of 2 minutes ago, all tunnels now require a real user to enter the endpoint IP address (which acts like your tunnel link's password) on the consent page. Showing and having the users click a continue button in order to access the tunnel content didn't really do too much to fight of people hosting phishing portals via localtunnel. I've also been getting an enormous amount of phishing/abuse notices from various organizations worldwide, forwarded notices from my hosting provider, and even have been put on notice that I will be responsible for costs related to removing IPs from various IP blacklists... I'm currently building an abuse reporting tool for these orgs to use that'll automate banning users hosting phishing portals but until that's built & tested this new password-protection way of abuse fighting will have to do. Sorry for any inconvenience... PS. If localtunnel doesn't work for your use case for whatever reason, feel free to checkout other alternatives like https://ngrok.io If anyone has any other suggestions on easy ways to fight phishing/malware portals from using this service, i'm all ears!
yodon 3y ago
> enshittification And yet the link you shared explains precisely why it is we can't have nice things
dewey 3y ago
What a weird complaint, all I can see there is that we can't have nice things because as soon as you put something online (image hoster, tunnel hosting,...) bad actors are going to abuse it and ruin it for everyone.

by mkl95 3y ago

LoganDark 3y ago

> enshittification That is not enshittification by any means. Enshittification is screwing your users over for profit or something. That was an honest attempt to curb the amount of abuse reports and threats that the maintainer was receiving.

mmcclure 3y ago

I think it's pretty hard to read this as anything other than a maintainer trying to stop malicious actors from abusing their project. You might not agree with how they're doing it, but calling this enshittification and kafkaesque feels pretty hyperbolic. Posting the comment here just in case folks don't click through: Hey everyone, It saddens me to be forced to add yet another annoying thing to the public localtunnel server but... As of 2 minutes ago, all tunnels now require a real user to enter the endpoint IP address (which acts like your tunnel link's password) on the consent page. Showing and having the users click a continue button in order to access the tunnel content didn't really do too much to fight of people hosting phishing portals via localtunnel. I've also been getting an enormous amount of phishing/abuse notices from various organizations worldwide, forwarded notices from my hosting provider, and even have been put on notice that I will be responsible for costs related to removing IPs from various IP blacklists... I'm currently building an abuse reporting tool for these orgs to use that'll automate banning users hosting phishing portals but until that's built & tested this new password-protection way of abuse fighting will have to do. Sorry for any inconvenience... PS. If localtunnel doesn't work for your use case for whatever reason, feel free to checkout other alternatives like https://ngrok.io If anyone has any other suggestions on easy ways to fight phishing/malware portals from using this service, i'm all ears!

yodon 3y ago

> enshittification And yet the link you shared explains precisely why it is we can't have nice things

dewey 3y ago

What a weird complaint, all I can see there is that we can't have nice things because as soon as you put something online (image hoster, tunnel hosting,...) bad actors are going to abuse it and ruin it for everyone.