wutanc

I don't really mind this way of doing it since I know that my data is "safe". I can at any time just grab my vault and open it in any editor. I can write my own editor. I can import the data into most other tools. It's when the data isn't open that I tend to avoid the product.

It looks like you're also settings some mailchimp cookies?

I just created my own little dashboard app (don't want to steal focus so wont link it). But what would you consider instant? This was a focus of mine when creating it and I actually found Heimdall some what slow. On my network heimdall takes ~300ms to load while my own loads in ~60ms. Not a huge difference I know but it's some what noticeable.

In theory I agree, it's not hard and if you can run a homelab you definitely should be able to set it up. But from what I've seen a lot of people done.

A lot of people don't have nice urls for their homelab services, having to memorize IP-numbers and ports is a lot harder.

Personally I get a nice feeling of accomplishment from looking at a dashboard with all the services I've set up. It's maybe not super useful but it's nice.

Yeah, all this screams sketchy sadly.

I know first hand how hard it is to get GDPR right, I've been extensivly involved in updating systems to comply. It's a lot of hard work and talking back and forth with lawyers to make sure we don't do anything stupid.

I can understand them wanting logs of crashes, it's a reasonable way to try and improve their service. Since you can use their APs with other controllers that would limit their collected data. Having the data being manually sent would also limit their collected data.

I'm ok with them actually collecting data, as long as they're:

* Open about what actuall data is being collected. * Open about them actually collecting data and not sneaking it in. * Providing a way to opt-out. * Adding the proper GDPR documentation around this so as clearly not to break the law. As it is it's a grey zone, why not be clear about it.

Also worth nothing that they originally had a bug where the APs would crash if you did actually block this data from being sent.

Given that they've commented on the fact that all traffic is end-to-end encrypted you'd not notice them sending things you don't want to be send.

Maybe they're sending a list of all sites you visits? How about them sending any login information that you add on sites that for whatever reason isn't doing tls?

One important point here is that they "claim" to be GDPR compliant but are already somewhat breaking GDPR. All data is encrypted on the APs so we can't really know what is sent. This is a complete buy in in trust from us, the customers. We're supposed to trust them that they're not sending anything they shouldn't, even tho they selected not to tell us at all about them implementing this.

It's horribly sketchy at best, if ont illegal.