πŸ”’ Netfox 0.13.0 β€” the endpoint that refuses to be careless

πŸ”’ Netfox 0.13.0 β€” the endpoint that refuses to be careless

Netfox can expose a read-only metrics endpoint, so your own monitoring can scrape your network. Handy β€” and, it turns out, far too easy to leave wide open.

Switch on "allow access from other devices" without setting a token and that endpoint was reachable from anywhere on your network with no authentication at all. What it serves is your entire device inventory: every IP, every MAC address, every hostname, every open port. 😬

That's fixed, and it's the kind of fix I'd rather tell you about than quietly bury in a changelog.

🚫 It fails closed. No token, no network endpoint. Netfox refuses to start it and tells you exactly why, right where you turned it on β€” instead of serving your LAN to the room and hoping you noticed the help text.

Settings β†’ Integrations, where the endpoint now explains itself

Settings β†’ Integrations, where the endpoint now explains itself

πŸ”‘ Your token is treated like a secret. It lives in your keychain now, not in a preferences file, and the field hides it as you type β€” so it stops appearing on screen during a demo or a screen share. An existing token moves across automatically; you don't re-enter anything.

⏱️ Constant-time token checks, because how long a rejection takes shouldn't hint at how close a guess was.

If you scrape the endpoint over your network: set a token after updating and it starts right back up. -only setups β€” what almost everyone runs β€” are untouched and still need no token.

⌨️ And the part you asked for: the built-in web viewer's address bar is editable. Jump straight to /admin, try another port, flip http↔https β€” no more closing the window and starting over just to reach a different page.

A device's own web interface, rendered inside Netfox

A device's own web interface, rendered inside Netfox

🎯 The host stays locked to the device you're inspecting. That's the whole point of the viewer, so it isn't editable: type a different address and Netfox tells you it's locked here rather than following you off-device.

Changing the port re-points the lock instead of loosening it, and keeps your current path.

Free, native, notarized. macOS 15+. No account, no telemetry, nothing leaves your Mac on its own.

πŸ‘‰ Try it / see what's new:

If you run Netfox alongside Prometheus or Grafana, I'd love to hear how you've wired it up β€” and what you'd want the viewer to reach next πŸ‘€

26 views

Add a comment

Replies

Be the first to reply

Have a question or a thought to share? Add a comment above to start the conversation.