Issues

• Server: uninstall leaves the ufw rule for 80/tcp that install opened for certbot

  server
  mill-master/exitway#8 · Filter by author mill-master opened on Aug 21, 2026

• Server: a token holder can reach services bound to the VPS's own public IP on 80/443

  security-hardeningserver
  mill-master/exitway#7 · Filter by author mill-master opened on Aug 21, 2026

• Server: per-token abuse controls and a fail2ban jail for rejected logins

  security-hardeningserver
  mill-master/exitway#6 · Filter by author mill-master opened on Aug 21, 2026

• Extension: gate network prediction (chrome.privacy.network.networkPredictionEnabled) while connected

  extensionsecurity-hardening
  mill-master/exitway#5 · Filter by author mill-master opened on Aug 21, 2026

• Extension: concurrent server writes from two options tabs can lose an update

  extension
  mill-master/exitway#4 · Filter by author mill-master opened on Aug 21, 2026

• Extension: Copy token puts a cleartext password on the clipboard without confirmation

  extensionsecurity-hardening
  mill-master/exitway#3 · Filter by author mill-master opened on Aug 21, 2026

• Extension: persist the onAuthRequired loop guard across service-worker restarts

  extensionsecurity-hardening
  mill-master/exitway#2 · Filter by author mill-master opened on Aug 21, 2026

• Extension: gate 407 answers on owning the proxy setting (levelOfControl)

  extensionsecurity-hardening
  mill-master/exitway#1 · Filter by author mill-master opened on Aug 21, 2026