• 33 Posts
  • 300 Comments
Joined 1 year ago
cake
Cake day: June 2nd, 2023

help-circle

  • They’re releasing a new version every two month or so and dropping them rapidly from support, pinning it with a tag means that in 12 months the install would be exploitable.

    Now, I did directly to production because this is low priority stuff, but it would have happened even with a testing stage. I would have never noticed that the forms apps was disabled, the system disabled it without any notification.

    You would expect that an official app supports the latest release, no?

    This wasn’t an app released by a nobody in their free time, this is a main feature heavily advertised in their blog. Look by yourself:

    https://nextcloud.com/blog/nextcloud-forms-to-keep-your-surveys-private/

    It’s not unreasonable to get pissed when 6 months after that blog post it doesn’t support the latest release anymore.



  • Yes no staging because it’s something used at most by 2 concurrent users, we were ok with 95% reliability (we discovered it was disabled after at least two weeks lol)

    Otherwise we would just have signed up to one of the many cloud forms sites at $100/year

    Backups daily but it’s unthinkable to revert something like nextcloud to a months old one

    Subscribed to both newsletter and RSS feed to know about issues (the command to update the docker images isn’t automated but manually issued). The maintainer of the forms app is nextcloud itself so any incompatibility should have been written in red bold characters in the blog posts and newsletter.









  • If you make a backup with a tool like Borg that creates encrypted archives, then using AWS S3 glacier is the cheapest.

    What’s bad about it: if you ever need those files again, it’s going to be VERY expensive to download them again, so it has to be treated as the “what if a nuke hits my city and all the local and off-site backups are vaporized” solution

    Also: it’s not recommended to directly host plain files, they need to be in an archive format with big chunks, as the API calls that are used to list them during sync are counted in a very expensive way




  • Yes my cylinder isn’t compatible, it won’t allow inserting a key from the other side. But I saw they sell a replacement one for 100 euro

    Not being internet connected isn’t the end of the world, but that hidden expensive in-app purchase is really scammy because you would only notice that after you bought the device, after installation and probably even after the return window. All YouTube reviewers got the pro model, which doesn’t have this artificial limitation. If I didn’t watch that video, I would noticed that after years (I don’t have enough matter/thread devices to justify the purchase of a hub yet)

    And also the door opening sensor isn’t included in the box but of course YouTube reviewers are showing it as part of the kit because they got all included. And the product page doesn’t specify that explicitly.

    Searched the user manual in PDF to learn more about the product, it’s 4 sentences that explain absolutely nothing

    So in the end I wanted the base model over the pro because for me having 4 AAs instead of a “proprietary” battery pack (4 AAs in a custom plastic shell) is much better and giving direct full internet access to the door lock via WiFi is too scary… but between the missing opening sensor, the IAP, the build quality, I think I will choose another one



  • Thanks for the link, in that thread I found two promising products, Nuki and tedee.

    One is small and stylish but uses a tiny expensive single use battery, the other is plasticly and bulky but uses 4 standard AAs

    I’ll check specs carefully to see if they have enough torque

    Edit: the 190 euro Nuki lock is advertised as “matter/thread compatible” but you need to pay a 50 euro in-app purchase in order to enable it. This is not stated anywhere, including the user manual, website and support faq. I discovered that from a YouTube review