It’s really not the publicly disclosed vulnerabilities you need to worry about. Most of those vulnerabilities have existed for years - the recent php thing is supposedly 12 years old. Maybe someone’s been out there exploiting it for 12 years.

The people who have sought and exploited vulnerabilities since computers went online don’t disclose what they find. They are the people who should be most worried about AI-assisted vulnerability research, because it directly attacks their business model.

I don’t know how the others set theirs up, but I use “views” in bind 9 https://kb.isc.org/docs/aa-00851

Essentially, the DNS I run on a router-like box much like you describe uses a different database depending on whether you query from an internal IP address or a public address. For me, the advantages are that I can let devices on my local network declare their own names to DHCP and enter them in DNS without worrying about the outside world. Mu internal network doesn’t crash if my ISP changes my address, Certbot happily requests certs for any site with a public address, and that cert works seamlessly on the corresponding internal address, no wildcards or DNS challenge required.

I’ve always used heat-only, cool-only, and off modes on the thermostat, but I set them manually. Actually, I think it’s only a relatively recent firmware update that the thermostat even got dual-mode. In my climate, there’s probably not much risk of triggering both heating and cooling on the same day, anyway.

My comfort range is 68-78°F/20-26°C, though, and in I’m generally in heat mode Oct-Mar & cool mode Jun-Sep. The transition months I generally manage by manually opening windows at the appropriate time. It’d be nice to get some window servos, because sometimes it’s not cool enough to open the windows until well after I’m asleep. Or I just forget. Window program would definitely need an outdoor humidity condition - don’t want to open summer windows, even if the temp is down to 72, when the dewpoint is also 72.

Great project. I like the 1-star reviews complaining about the lack of advertising and tracking.

People will accept either intelligence or stupidity. They will pay for a flattering sycophant.