As of 2025 October, we required password sign in for the hgweb service. The idea was to instruct users on what username and password to enter but have malicious automated scrapers fail to enter the correct sign in. This did work, but it wasn't a very nice change to communicate to users.

On 2026-01-06, I came across a blog post that described Anubis, a "Web AI Firewall Utility". Our hgweb was quickly fitted with it, replacing the password sign-in way.

This is annoying and may worsen access from some tools. But as before, the backups.hg directory contains at least 1 recent lzipped backup tarball that ships all of the hgweb repos with their entire histories.