RE: 6.3.5-alpha Firmware for Prusa CORE One
Any chance we can get a switch to deny all non-local web connections? Local IP's only, a poor mans firewall, so to speak? I really do not want my utility appliances going out and talking to the world when I am not able to supervise what they are talking about. Even worse is this current trend to allow outside actors to connect to my internal devices from unknown remote sites.
For example, Prusa Slicer adding the capability for accepting ALL TCP and UDP connections through my firewall from ANY remote site and computer.
RE: 6.3.5-alpha Firmware for Prusa CORE One
[...] Even worse is this current trend to allow outside actors to connect to my internal devices from unknown remote sites.
For example, Prusa Slicer adding the capability for accepting ALL TCP and UDP connections through my firewall from ANY remote site and computer.
Are you sure that you did not misunderstand something? I don't see how PrusaSlicer could open your network for incoming connections -- your router/firewall typically won't allow them, and won't even present a fixed IP address for your printer or PC to the outside world. When the printer connects to PrusaConnect, the connection is always initiated from your end, going out to Prusa's server.
Which PrusaSlicer functionality are you referring to? Where do I find it in the menus?
RE: 6.3.5-alpha Firmware for Prusa CORE One
Simply open Defender Firewall and look for the two incoming PrusaSlicer entries.
Yes, Prusa Slicer must be running, must accept the incoming ping, but if you've ever checked your router logs for random incoming port scans, you know people are looking for this type of vulnerability. The was an alert when I installed one of the more recent updates, 2.9.0 or maybe 2.9.2 that Prusa Slicer 'needed' access to the local network. I made a rash assumption it was private coms between local hosts and the printer... but later, doing checks for another app, I saw Prusa was wide open.
I've attached one of the two entries, after disabling/blocking incoming connections.
Sure, no one will ever be hurt by this ... lol. If I had a penny for every time I've heard that line.