VIII. Conclusion We applied MVPNalyzer to 281 operational free VPN apps from the Google Play Store and uncovered alarming issues in security and privacy practices […] Many of these apps found with issues have tens of millions of installs and appear among top Play Store search results.

Free VPN apps… Not exactly surprising, but worth investigating to combat misinformation regarding app-security, I guess.

Just finished an assignment for uni: Memory safety in Rust: Mechanisms and limits - a comparison to C/C++.

Fuck.

Great overview of Rust’s weaknesses and strengths:

Li et al. 2024 Rust for Linux: Understanding the Security Impact of Rust in the Linux Kernel

Perfect! My shitty code qualifies as a cognitohazard, so nobody should be seeing it anyways.

WAF custom rules are more flexible, of course, and from a business perspective, I can understand why they would recommend that option instead.

I currently filter on an nginx access log file among other filters (sshd, bot-search, bad-requests) and let fail2ban execute the ban/unban action itself.

From a quick search, it should be possible to handle bans/unbans externally, if that’s what you’re after.

FYI, IP access rules don’t count towards the 5 custom rules limit, but the more generous 50k limit.

With fail2ban, you can setup IP access rules via the cftoken-action quite easily.

Security --> WAF --> Tools to access the IP rules in the dashboard. https://developers.cloudflare.com/waf/tools/ip-access-rules/