MagicMirror Forum

    • Register
    • Login
    • Search
    • Recent
    • Tags
    • Unsolved
    • Solved
    • MagicMirror² Repository
    • Documentation
    • Donate
    • Discord
    MagicMirror² v2.20.0 is available! For more information about this release, check out this topic.

    Electron Security Issues

    General Discussion
    5
    18
    653
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • bigschucks
      bigschucks last edited by

      Recently I have only started coding and therefore do not pay attention to security bugs at all. I hope that it is not interesting for anyone to hack into our computer.

      1 Reply Last reply Reply Quote 0
      • S
        sdetweil @karsten13 last edited by

        @karsten13 see
        https://therecord.media/chrome-will-limit-access-to-private-networks-citing-security-reasons/amp/

        oh joy

        Sam

        Create a working config
        How to add modules

        mumblebaj karsten13 2 Replies Last reply Reply Quote 0
        • mumblebaj
          mumblebaj Project Sponsor @sdetweil last edited by

          @sdetweil And so it begins. Modules like the MMM-Hue and others that talk to internal devices on the local network is going to become a problem.

          1 Reply Last reply Reply Quote 0
          • karsten13
            karsten13 @sdetweil last edited by

            @sdetweil

            didn’t know this but I’m not surprised …

            When this limitation is live the modules must send the new header, we will see which of them are still maintained …

            1 Reply Last reply Reply Quote 0
            • F
              fribse last edited by

              So a LetsEncrypt wildcard certificate could help here (if you have a domain that is). But does MM even support running with a cert out of the box, or do you need to recode stuff?

              S karsten13 2 Replies Last reply Reply Quote 0
              • S
                sdetweil @fribse last edited by sdetweil

                @fribse there is support for certs. but most people don’t have a registered domain

                I use dyndns.org to get a name back to my server on my dynamic address. it has changed a few times over the years, and I switched service providers too

                Sam

                Create a working config
                How to add modules

                1 Reply Last reply Reply Quote 0
                • karsten13
                  karsten13 @fribse last edited by

                  @fribse

                  with own domain I would recommend to run a reverse proxy in front of mm (and any other app) which handles the cert stuff automatically (as e.g. traefik). So you have not to deal with cert stuff in the apps behind the proxy.

                  F 1 Reply Last reply Reply Quote 0
                  • F
                    fribse @karsten13 last edited by

                    @karsten13 I would normally agreee, but this is only to satisfy weird demands on SSL, not for any form of security and the mirror is not externally available.

                    1 Reply Last reply Reply Quote 0
                    • 1
                    • 2
                    • 2 / 2
                    • First post
                      Last post
                    Enjoying MagicMirror? Please consider a donation!
                    MagicMirror created by Michael Teeuw.
                    Forum managed by Paul-Vincent Roll and Rodrigo Ramírez Norambuena.
                    This forum is using NodeBB as its core | Contributors
                    Contact | Privacy Policy