all of the issues listed are closed so any recent version is fine.
also, you probably don’t need to deploy this unless you have a problem with bots.
Comment on Anubis is awesome and I want to talk aout it
perishthethought@piefed.social 20 hours ago
I don’t really understand what I am seeing here, so I have to ask – are these Security issues a concern?
https://github.com/TecharoHQ/anubis/security
I have a server running a few tiny web sites, so I am considering this, but I’m always concerned about the possibility that adding more things to it could make it less secure, versus more. Thanks for any thoughts.
lime@feddit.nu 20 hours ago
SmokeyDope@piefed.social 20 hours ago
Security issues are always a concern the question is how much. Looking at it they seem to at most be ways to circumvent the Anubis redirect system to get to your page using very specific exploits. These are marked as m low to moderate priority and I do not see anything that implies like system level access which is the big concern. Obviously do what you feel is best but IMO its not worth sweating about. Nice thing about open source projects is that anyone can look through and fix, if this gets more popular you can expect bug bounties and professional pen testing submissions.
artyom@piefed.social 4 hours ago
This isn’t really a security issue as much as it is a DDOS issue.
Imagine you own a brick and mortar store. And periodically one thousand fucking people sprint into your store and start recording the UPCs on all the products, knocking over every product in the store along the way. They don’t buy anything, they’re exclusively there to collect information from your store which they can use to grift investors and burn precious resources, and if they fuck your shit up in the process, that’s your problem.
This bot just sits at the door and ensures the people coming in there are actually shoppers interested in the content of some items of your store.