October 16, 2026

This applies to upcoming webserver changes. When you see a date in this paragraph, it has been deployed. The search gate was meant to keep bots away from the search page while letting people in without a login. A botnet got past it, and the database ran at 100% CPU until search was restricted to

These notes are for the next website release: 2.16.4 Earlier this week, the production database ran at 100% CPU. Turning off searches for visitors who are not logged in brought it down to 22%, and then to 10%. This post covers what was found, and the changes being deployed to fix it. What was found