If you expose it to the web, do use access control. I just went round and stopped all the printers that google has crawled. I also set the webcam URL to a photo of Alabama man, set your feedrates really slow and uploaded a file called “what_if_I_had_set_the_temp_really_high.gcode”.
Personally I don’t think that’s enough, I’d like to be able to use something like .htacess too. Anyone know how to do this with octoprint?
@Aaron_Kartash It isn’t OctoPrint’s fault when people make it accessible from all around the world without thinking. That’s as if blaming a car/car manufacturer for cars being stolen when people leave the doors unlocked and the keys in the ignition. Just don’t forward some port on your router to your Pi (or enable access control when you do) and you’ll be fine. I’ve been repeating this over and over the past couple of months since starting on OctoPrint (plus “do not run it as root”), but it looks like I’ll have to invest some time just to save users and their printers from their own stupidity now.
remember, as long as you do not make them available via the internet, you don’t have to have access control enabled – still, regular updates are always a good idea ,)