Quietish day, I installed elastic agent on a bunch of machines and then was bug hunting for the rest of the day.

After work (and a sleep, and today's episode of Only Connect) I added some noise into the URL of one of the sites I maintain to stop scrapers from finding it. I should probably just turn on auth, but the site has exactly three users, and it's far less effort to give them a slightly tweaked url, and since the site isn't linked from anywhere else, it shouldn't get found.

(The site does have a TLS certificate from let's encrypt, so the existence of the site is public information, but so long as the root returns a 404, nobody should stumble across the actual content. Unless Facebook strips urls from messenger, for example).