3 ms·

A common use case, whether for 3D printers, switches, routers, or NAS devices is that you've got a centrally hosted management UI that then sends requests direc

A common use case, whether for 3D printers, switches, routers, or NAS devices is that you've got a centrally hosted management UI that then sends requests directly to your local devices. This allows you to use a single centrally hosted website as user interface, without the control traffic leaving your network. e.g. Plex uses this.

michaelt 1y ago
I don't think this proposal will stop you visiting the management UI for devices like switches and NASes on the local network. You'll be able to visit http://192.168.0.1 http://192.168.0.1 and it'll work just fine? This is just about blocking cross-origin requests from other websites. I probably don't want every ad network iframe being able to talk to my router's admin UI.
- kuschku 1y ago
  That's not what I'm talking about. A common example is this: 1. I visit ui.manufacturer.tld 2. I click "add device" and enter 192.168.0.230, repeating this for my other local devices. 3. The website ui.manufacturer.tld now shows me a dashboard with aggregate metrics from all my switches and routers, which it collects by fetch(...) ing data from all of them. The manufacturers site is just a static page. It stores the list of devices and credentials to connect to them in localStorage. None of the data ever leaves my network, but I can just bookmark ui.manufacturer.tld and control all of my devices at once. This is a relatively neat approach providing the same comfort as cloud control, without the privacy nightmare.
  - deleted 1y ago
    [deleted]
  - account42 1y ago
    That absolutely is a privacy nightmare.
    - kuschku 1y ago
      How so? It's certainly better than sending all that traffic through the cloud. While I certainly prefer stuff I can just self-host, compared to the modern cloud-only reality with WebUSB and stuff, this is a relatively clean solution.
  - blacklion 1y ago
    If it is truly static site/page, download it and open from local disk. And nudge vendor to release it as archive which can be downloaded and unpacked locally. It has a multitude of benefits comparing opening it from vendor site each time: 1) It works offline. 2) It works if vendor site is down. 3) It works if vendor restrict access to it due to acquisition, making it subscription-based, discontinuation of feature "because fuck you". 4) It works if vendor goes out of business or pivot to something else. 5) It still works with YOUR devices if vendor decides to drop support for old ones. 6) It still works with YOUR versions of firmwares if vendor decides to push new ones, with features which are user-hostile (I'm looking at you, BambuLab). 7) It cannot be compromised, as copy on vendor site can be If your system is compromised, you have bigger problems than forged UI for devices. Even best of vendors have data breaches this days. 8) It cannot upload your data if vendor goes rogue. Downsides? If you really need to update it, you need to re-download it manually. Not a big hassle, IMHO.
    - kuschku 1y ago
      > If it is truly static site/page, download it and open from local disk. And nudge vendor to release it as archive which can be downloaded and unpacked locally. Depending on the browser, file:/// is severely limited in what CORS requests are allowed. And then there's products like Plex, where it's not a static site, but you still want a central dashboard that connects to your local Plex server directly via CORS.
      - blacklion 1y ago
        Why local Plex which you need to install & run (it is already Server) cannot provide its own UI to browser, without 3rd party sites? It is absurd design, IMHO. I'll never allow this in my network. It looks security nightmare. Today it shows me dashboard (of what? Several my Plex servers?), tomorrow it is forced to report pirated movies to police. No, thanx.
        kuschku 1y ago
        > of what? Several my Plex servers? People commonly use this to browse the collections of their own servers, and the servers of their friends, in a unified interface. Media from friends is accessed externally, media from your own server is accessed locally for better performance.
  - mixmastamyk 1y ago
    Ok to exist. Put behind a permission.
hypercube33 1y ago
Windows Admin center but it's only local which I rather hate

michaelt 1y ago

I don't think this proposal will stop you visiting the management UI for devices like switches and NASes on the local network. You'll be able to visit http://192.168.0.1 http://192.168.0.1 and it'll work just fine? This is just about blocking cross-origin requests from other websites. I probably don't want every ad network iframe being able to talk to my router's admin UI.

kuschku 1y ago
That's not what I'm talking about. A common example is this: 1. I visit ui.manufacturer.tld 2. I click "add device" and enter 192.168.0.230, repeating this for my other local devices. 3. The website ui.manufacturer.tld now shows me a dashboard with aggregate metrics from all my switches and routers, which it collects by fetch(...) ing data from all of them. The manufacturers site is just a static page. It stores the list of devices and credentials to connect to them in localStorage. None of the data ever leaves my network, but I can just bookmark ui.manufacturer.tld and control all of my devices at once. This is a relatively neat approach providing the same comfort as cloud control, without the privacy nightmare.
- deleted 1y ago
  [deleted]
- account42 1y ago
  That absolutely is a privacy nightmare.
  - kuschku 1y ago
    How so? It's certainly better than sending all that traffic through the cloud. While I certainly prefer stuff I can just self-host, compared to the modern cloud-only reality with WebUSB and stuff, this is a relatively clean solution.
- blacklion 1y ago
  If it is truly static site/page, download it and open from local disk. And nudge vendor to release it as archive which can be downloaded and unpacked locally. It has a multitude of benefits comparing opening it from vendor site each time: 1) It works offline. 2) It works if vendor site is down. 3) It works if vendor restrict access to it due to acquisition, making it subscription-based, discontinuation of feature "because fuck you". 4) It works if vendor goes out of business or pivot to something else. 5) It still works with YOUR devices if vendor decides to drop support for old ones. 6) It still works with YOUR versions of firmwares if vendor decides to push new ones, with features which are user-hostile (I'm looking at you, BambuLab). 7) It cannot be compromised, as copy on vendor site can be If your system is compromised, you have bigger problems than forged UI for devices. Even best of vendors have data breaches this days. 8) It cannot upload your data if vendor goes rogue. Downsides? If you really need to update it, you need to re-download it manually. Not a big hassle, IMHO.
  - kuschku 1y ago
    > If it is truly static site/page, download it and open from local disk. And nudge vendor to release it as archive which can be downloaded and unpacked locally. Depending on the browser, file:/// is severely limited in what CORS requests are allowed. And then there's products like Plex, where it's not a static site, but you still want a central dashboard that connects to your local Plex server directly via CORS.
    - blacklion 1y ago
      Why local Plex which you need to install & run (it is already Server) cannot provide its own UI to browser, without 3rd party sites? It is absurd design, IMHO. I'll never allow this in my network. It looks security nightmare. Today it shows me dashboard (of what? Several my Plex servers?), tomorrow it is forced to report pirated movies to police. No, thanx.
      - kuschku 1y ago
        > of what? Several my Plex servers? People commonly use this to browse the collections of their own servers, and the servers of their friends, in a unified interface. Media from friends is accessed externally, media from your own server is accessed locally for better performance.
- mixmastamyk 1y ago
  Ok to exist. Put behind a permission.

hypercube33 1y ago

Windows Admin center but it's only local which I rather hate