Need I remind you that the dev behind this is the same person who previously made another security nightmare IM server where to use it you had to VPN DIRECTLY INTO HIS HOME NETWORK!?
From what I read of this thread aswell, the dude clearly doesn’t know what the hell he’s doing, and he’s clearly not learned from the last time, so he shouldn’t be fucking with this stuff!
I have a BBS fully set up and ready to launch, and while I feel i’ve set it all up right, one of the biggest reasons I haven’t launched it (apart from the fact I haven’t found a place to host it lol) is the fact that I’m still super worried that i’ve left a backdoor somewhere.
But this dude? Launching shit asap with major security fuck-ups?
Frankly, I have no sympathy for anyone who signs up to this when they get their credentials stolen. It’s on you.