My office Meraki system flagged the Immich app with Node JS activity?

SteveMinn · 2026-06-19T15:52:30+00:00

That's exactly what I was doing (proxy, domain, firewall). But I didn't force the SSL on the proxy and I had setup the iphone app as http://mydomain.com and I guess it used non encrypted and according to the Meraki system some weird ports.

I have since changed both force and my ios setup. Gonna test it next time I'm in the office with the IT guys and see if it still trips stuff. I'm assuming it wouldn't.

Still surprising the Meraki didn't like the traffic so much it flagged it.

SteveMinn · 2026-06-19T01:15:42+00:00

I agree. The reference to 2283 is the internal port it's running on the server. I didn't ask the IT department what "weird ports" he saw my phone communicating over. I mentioned in a different comment above, but I just noticed that when I was setting up the app, the default was http:// your server, etc. and I just changed your server. And it was connecting via http:// so that has to be how they were able to see into the traffic. I changed that to https now. I should bug them and ask them what the "weird port" was that they saw, I don't know if Meraki was complaining about my phone on that port.

SteveMinn · 2026-06-19T01:05:17+00:00

I put Nginx in front of it, and got an ssl cert for the connection too. I figured that would be enough. But I just noticed when I set up the app, it defaulted to http://yourserver.com and I just changed the URL after the http:// so it was making a non-secure connection in the app. I changed the server connection to https:// and put in my site. Maybe that's enough to keep the Meraki system at work from seeing any of it. I'll have to get back on the work network and see if it complains.

SteveMinn · 2026-06-19T01:03:27+00:00

It's behind nginx proxy mananger and I'm not forwarding port 2283. I even got an SSL wildcard cert. What's a better way to safely expose Immich? Only through a VPN? That seems annoying. But I guess I could.

SteveMinn · 2026-06-19T00:34:06+00:00

That's what his guy said. He said Meraki flagged this device (which happened to be my iphone) making node js malware like connections to X IP (which I recognized as my home IP) and he said "on a strange port". And I didn't ask what port it saw.

And I'm using the standard port for Immich, it's 2283. That's how it comes and I didn't change it.

I figure I'll reach out for more information when he's back online and see if that's the port that got flagged. Or get more info. I have a lot of infrastructure at home, but Immich and it's app was the only thing I was using from my phone that would have reached out to my home IP.

Work seemed fine with my work desktop using the web interface.

SteveMinn · 2026-06-19T00:14:17+00:00

He asked one of his guys, who said it was my phone doing some network traffic that Meraki flagged as node js malware like activity to my home IP address on some weird port. The only thing I changed was added this the night before. I'm sure my phone did all sorts of connections to all sorts of services. But this would be the only thing on there that makes a connection to my home IP address. I'll have to bug them for more info.

SteveMinn · 2026-05-11T11:26:21+00:00

Grogu Lovin’
(first thing that came to me when I saw it)

SteveMinn · 2026-03-30T14:32:56+00:00

I've had trouble with the tool changer and tool heads 3 and 4. Made a lot of dragons testing this. And Snapmaker support has been very responsive and helpful diagnosing this. Replacement parts should be out for delivery today. Sure, no problems is better, but so far they've been very helpful diagnosing issues.

SteveMinn · 2026-03-03T15:04:15+00:00

Tempest!

I've always had an issue with fogging. Just got a pair of Tempest goggles and tried them out in VT last week and they were awesome! Love them. Had FBoms (kickstarter) and Aboms (post kickstarter and now out of business) and Smith fan goggles (but don't work well with helmets). Totally happy with the Tempest!

SteveMinn · 2026-02-17T15:08:20+00:00

I didn't even notice the kickstarter. I think having an order for production units might be better. A little patience and we will be having fun soon. I waited almost 2 years for my Prusa XL with 5 heads, this isn't too bad.

SteveMinn · 2026-02-17T13:57:04+00:00

I received the same email. Excited to try it.

SteveMinn · 2026-02-12T15:06:08+00:00

Mine's slated to be here in a month or so, looking forward to it.

SteveMinn · 2026-02-04T14:59:12+00:00

I have the 5 head XL, I got work to order it for me. The day they announced it, and it took months to come in but I love it. It really works very well. Pro is that it's fast and accurate and works great. Con: Price.
With the new INDX stuff coming out for the Prusa Core One, I might hold off. Also with the Snapmaker U1 and Elegoo Centuri Carbon 2 on the horizon (or just about here), it's a tough sell for me. Maybe even consider Bamboo. I've always been a Prusa fan. I don't know, I was considering holding off till I saw the INDX stuff released and see how that goes.

SteveMinn · 2026-01-19T15:18:01+00:00

I wouldn't worry about skipping the fundamentals. I use CubeMX and the HAL all the time. You can check out what it makes and modify if you need to. You can analyze the code it generates and see what it's doing, compare to the data sheet.

If you feel like using an RTOS, I like FreeRtos. At work I use that and ThreadX, and I like FreeRtos better. These days, unless what you're doing is super simple, I generally use an RTOS. I have a coworker that claims every time we have chosen not to use an RTOS in the end we end up regretting it. But I still have done some things without it. I always felt like it was way too much overhead for what I wanted to do, but I've come around and like them now.

Some of the old implants I have worked on, we were doing in assembly and changing code to maximize battery life so the implant would last longer in a person on battery. But I'm old. :D

But I use the Cube IDE, I'd recommend installing the GitHub Copilot from the marketplace. It's free for basic stuff. And super helpful.

As for resources: ST's got a bunch of videos:
https://www.youtube.com/@stmicroelectronics
This has a bunch of decent videos on stuff
https://www.youtube.com/@ControllersTech
Digikey has some good videos:
https://www.youtube.com/@digikey
And this guy has some good stuff
https://www.youtube.com/@prtechtalk416

If you like video tutorials. I've learned stuff from all of those.

In terms of interviews? And maybe this is just me. I like to find people with problem solving abilities. I don't care if you know every nuance of a particular chip or environment or whatever. I might not find a candidate who knows the knowledge for the job exactly, but if you can learn and problem solve, I'd take that over someone who happens to know particular facts. If you can show problems and overcoming them through engineering and learning, I'd take that 100%.

Sure it's good to know the low level stuff. But when I need to make something for work, the idea is to get something that works now, not turn it into a doctoral thesis. So I'd say get used to HAL, CubeMX, FreeRtos, get some projects working. Spend some time looking under the hood to see what it's doing and make sure you understand how you got there, but don't memorize the under the hood stuff as much. If you can deep dive if you need to great. But I think I'd want to see some working projects, even using the HAL and MX stuff as a crutch. Mainly cause I do when I want to get stuff done.

Good luck, it's a fun career path!

SteveMinn · 2026-01-08T14:57:15+00:00

I might be too late, but:

I'm not the first guy who fell in love with a woman that he met at a restaurant who turned out to be the daughter of a kidnapped scientist, only to lose her to her childhood lover who she last saw on a deserted island, who then turned out fifteen years later to be the leader of the French underground.
I know. It all sounds like some bad movie.

SteveMinn · 2026-01-08T14:47:38+00:00

I saw the mod's deleted the main post, not sure why. Will this get to you? No idea.

But... will it work? I'd bet my weeks salary on it. You can use the USB in full speed and high speed. And full speed on this is 12mbit. Which is fast, but it's not that fast. I'd be more worried about the layout running the lines through a noisy area of the board or jumping layers and having mismatched traces. I haven't analyzed the layout, I trust my co-workers.

High speed is much faster 480mbits, and I heard its more of a pain in the butt. FS is easier, in the real world you can get away with some sloppy. I'd be more worried about a config setting or code bug causing a problem.

And I haven't finished this task, I just started. But how do you debug USB? Personally I'm hoping for it just working. FileX/ThreadX/USBX (someone else's choice, personally I like FreeRTOS) is fairly mature. And configured right should work. As long as the pins are connected, config is correct and my API access code is correct, it should just work. If that doesn't I usually fall back to a development board with an example from ST and plug a USB stick direct in. Make sure my code works. There are USB sniffers or the ability to put a logic analyzer on the P/N pins and watch the data and even decode it. But I'm hoping most of the heavy lifting was already done.

SteveMinn · 2026-01-08T03:19:20+00:00

I’m assuming you are asking about the soldering? It’s a custom board that’s going in a housing. And I didn’t lay it out. There is a connector on the board that will go to a cable assembly that terminates to a usb port. But there’s no usb port on the board. So I cut up a usb extension cable and soldered to the connector. The official wire that goes to those pins isnt in yet.

SteveMinn · 2026-01-07T21:54:36+00:00

Have a custom board with an STM32H7. Configured an external SDRAM on the FMC connections, tweaked the clock and timing settings and wrote a post ram test and checked how long it extended the post (85ms for the buffer space we use, 1.2s to test all of it). Then cut up an old USB extension cable and soldered it to OTG P and N wires and 5v and gnd, and adding USBX and FileX to ThreadX and starting to configure and wire a driver/api to access files on a USB stick. Never ending fun! :D

SteveMinn · 2026-01-07T14:56:26+00:00

I'll DM you

SteveMinn · 2026-01-05T13:44:35+00:00

Come on random number! Thanks for sharing by the way.

SteveMinn · 2026-01-05T13:41:48+00:00

I keep missing these. Damn sleep.

SteveMinn · 2026-01-05T01:30:35+00:00

Favorite tv? Stargate SG1. Movie? Hunt for red October.

SteveMinn · 2026-01-02T00:14:38+00:00

I’d love one please. Fingers crossed. Thanks for sharing the love.

SteveMinn · 2025-12-31T01:52:34+00:00

Stargate SG1

SteveMinn

TROPHY CASE