You’re getting it wrong this is probably a problem about reading the post from mobile. My previous posts were not that packed with code so it wasn’t a big issue but I updated the CSS so it is way more comfortable to read now.

Fixed

This seems to be exactly the content of the post: rate limit + Anubis.

The main point is more about “How to setup Anubis” rather than “Should we use Anubis” as I documented how I did my setup so I will not forget and at the same time sharing the resource. I am also using fail2ban but I didn’t feel a post about how to set ip up would be as useful as documentation and guides seems already there.

The principle is pretty simple : use a little bit of compute. If you’re a bot and want to visit many sites the cost will add up, if you are a human going to a website the 1 second cost for the initial page is not a big deal.

Also notice the difference with the extremely annoying cloudflare checkbox asking if you are a human that became ubiquitous lately. I’d rather wait a second.

There is an irony in password managers that stores your password but need a password (passphrase would be better). A password for your passwords. Fundamentally this is because the only secured space, only you can get in and no one else, is your own brain.

Most password leaks are usually caused by bad implementations on the server side. I have an authentication protocol to avoid many password leakages I’d like to share one day (double salt, one from client, one on server so password is never shared to the server).