stragies

You could wrap a TLS-connection around your SSH-connection, and then use the ALPN to indicate SSH, so that your reverse proxy knows, what to do with it.

Typo: Line 3 of the readme should probably read "I could not suppress ..."

On-Topic: Very creative (ab)use of `make`. +1

Great Project! I just wish, their HDB would enable filtering on which cameras have Ethernet, and/or the data-lines connected on the USB-Power-Plug, so that I could equip them with USB NIC (for the ones that don't have ethernet), and then run them with a POE-Splitter.

Having the data pins connected would also enable lots of other nifty use-cases.

Also, have they managed to forward port the drivers to a recent mainline kernel in the meantime, or are they still on ancient vendor SDK kernel versions?

cr.yp.to/ is also a pretty cool URL, and has been around for a looong time

Hmm, I wonder, if roundcube was the exception (w.r.t feImage), or if soon other webmail clients will need to be patched

Is there a table of supported hardware, that contains info about the USB-connection (or ethernet) on these devices. Like, which have data-lines connected, can the device electrically do host and device mode? Can I use a POE2USBC adapter, that presents itself as a USB-network device to the camera? Ability to filter on those columns would be great. Is thingino using the Ingenic linux kernel 3.ancient SDK version, or do they have/use something newer?

The manual, as OP said, does not offer any explanation, why the device might show up with an additional MAC/IP at the upstream switch port, and which services it might offer. OP sounds knowledgeable enough to be able to exclude the possibility, that the additional MAC/IP could be from one of the PCs, like e.g. when playing with VMs using an internal bridge in the Hypervisor.

Maybe the device has a bigger "cousin" device, that includes "control via APP", and this feature was not properly/fully disabled on this one.

Was the network port bridged to both PCs all the time (as the description makes it sound, or did only the "active" PC get a functioning network connection? Could you tell from the FDB of the upstream device, if there were more than two MAC addresses active on the port? Did you (hopefully) open it up and make PCB pictures before chucking it?

on many cards they are, check out the tool `hdajackretask` from package `alsa-gui-tools`.

Why did you not just login to the device, and switched off "Broadcast to multicast", or changed the destination address?

Edit: Some brands of Network-KVM use this, so that you can control the target device from another device, like e.g. an App on a tablet. That way you don't have to stand next to the target device in the noisy and cold machine room