Are there planned advantages to this over what can be done with “ssh -g -R”?
ngrok for instance can be used record and replay (potentially modified) API calls.
> I don't believe there's much potential for abuse here, in terms of distributing illegal content.
I think you are quite wrong there. Any public resource can and will be abused.
> If you wanted to do that, you could just set up port forwarding on your router
That will be easily traced back to the the distributor of the content. By using you as a relay the authorities will hit you first. If you keep accurate logs then you can send them onto the next step (which may well be another open proxy) but you'll have some explaining to do.
Also, if it causes any trouble for your service provider they may kick your account first and ask questions later, especially if the content is something insidious like CP. In any case check your service provider's ToS - they may explicitly disallow running open proxy services.
Thanks for the words of warning! I’ll keep a lookout for malicious uses, especially now that it’s gotten a bit of attention on HN, which was not planned. Feel free to let me know if you see something suspicious, as well.
Comments
Are there planned advantages to this over what can be done with “ssh -g -R”?
ngrok for instance can be used record and replay (potentially modified) API calls.
> I don't believe there's much potential for abuse here, in terms of distributing illegal content.
I think you are quite wrong there. Any public resource can and will be abused.
> If you wanted to do that, you could just set up port forwarding on your router
That will be easily traced back to the the distributor of the content. By using you as a relay the authorities will hit you first. If you keep accurate logs then you can send them onto the next step (which may well be another open proxy) but you'll have some explaining to do.
Also, if it causes any trouble for your service provider they may kick your account first and ask questions later, especially if the content is something insidious like CP. In any case check your service provider's ToS - they may explicitly disallow running open proxy services.
Thanks for the words of warning! I’ll keep a lookout for malicious uses, especially now that it’s gotten a bit of attention on HN, which was not planned. Feel free to let me know if you see something suspicious, as well.