{"version":1,"type":"rich","provider_name":"Libsyn","provider_url":"https:\/\/www.libsyn.com","height":90,"width":600,"title":"7MS #735: Baby's First Cloudflare Tunnel","description":"Hey friends! Today\u2019s episode has a new-to-me toy up front and some podcast housekeeping on the back half \u2013 all recorded with a raging case of the anxious parent giggidies, because my son Atticus had a big audition and I was minutes away from finding out whether we were doing tears of joy or tears of sadness. Baby\u2019s first Cloudflare Tunnel Not a sponsor, not an ad \u2013 just a thing I\u2019d heard about for years and finally had a reason to use. Here\u2019s what we get into: The problem that sent me down this road: I wanted push-button status pages for clients that pull from one source of truth \u2013 not just \u201cis the box up,\u201d but actual narrative on where a project is at Why the off-the-shelf status page tools weren\u2019t the right shape, and why \u201cjust stick it on a web server\u201d was a non-starter for a scraper-and-AI-slop-crawler internet The auth paths I tried and abandoned before Cloudflare Tunnels entered the chat How Cloudflare Access one-time PINs put a guard out front \u2013 and what happens when fartface@meowmix.com tries to log in My Chick-fil-A-order-tracker dreams for multi-phase assessments, and why I think it could kill a bunch of clogged-up email threads Why the code isn\u2019t public yet (it\u2019s public-facing infrastructure I haven\u2019t hardened, and I\u2019ve got hunches about where the holes are) \u2013 but reach out if you want to build something similar and I\u2019m happy to share privately Where tunnels fit generally: when something genuinely needs to be reachable, but you\u2019d rather not hand it a public IP or expose RDP to the whole internet. It doesn\u2019t replace Twingate for me, but it fills a different slot nicely Bonus tangent: why Claude has become my long-drive road companion, and five enlightening minutes I spent learning how water towers work Housekeeping: a refreshed jingle and a brand new bumper A quick history of the 7MS jingle \u2013 from just me and an acoustic guitar, to a Fiverr band, to now Why \u201csecurity is hard, so let\u2019s assume we\u2019re probably going to get pwned by noon\u201d has aged frighteningly well (see also: AI agents teaching each other to find previously unknown vulns) Meet Jacob Davis, the guitar teacher the algorithm dropped in my lap, who recorded a gorgeous all-strings arrangement of the jingle and about 45 seconds of fingerpicking diddly goodness for our new outro bumper. Stick around to the end and give it a listen \u2013 and if you\u2019re in the market for internet guitar lessons, he rules And over on 7MinSec.club this week I show off VoiceInk, a private, local voice dictation utility for Mac that Paul the Unstoppable turned me on to. Lifetime license, no subscription, and it does a great job on live dictation or audio files you feed it. Catch the TuesdayTOOLSday over at 7MinSec.club Thanks for listening \u2013 to the security stuff, the tangents, or both. Come find us at 7MinSec.com, subscribe (free or paid) over at 7MinSec.club, and dig through our notes at 7MinSec.wiki. God bless you, and have a great week! ","author_name":"7 Minute Security","author_url":"https:\/\/7MinSec.com","html":"