DeckWerk dev confirms headless collab server ships unauthenticated by design
vincesitzmann · x · 2026-10-28
Responding to a security warning, DeckWerk author vincesitzmann confirmed the headless collab server is designed for trusted networks/tailnets and will clarify this in the README. sunsetsyntax had flagged that the server binds 0.0.0.0:5800 with unauthenticated edits by default — anyone on the same WiFi can open, rename, import or download every deck; use --host 127.0.0.1 or a Tailscale IP.
More from coding & agent
- Qiaomu UI plugin gives coding agents 13,561 design references to clone quality landing pages — vista8 · 2026-10-28
- Recurse: open-source minimal research agent harness built on Pi Durable — chaitjo · 2026-10-28
- Going multi-LLM: Sonnet 3.7 for hard tasks, DeepSeek for the rest, which gateway stack? — Extension_Lake4065 · 2026-10-28
- Anthropic prompt tip: give Claude image tools to inspect dense charts and diagrams — minchoi · 2026-10-28
- Give multi-agent teams a time budget: parallel work cut 30 minutes to ~15 — minchoi · 2026-10-28
- Anthropic: enable progress updates so long-running Claude agents don't look frozen — minchoi · 2026-10-28