While I was writing "Extended domains" extension, I thought that I should disable access to third-party IDNA library that I use. It is generally good not to allow anyone to access directly anything what they should not access. So I added a simple .htaccess file to the directory above IDNA library:

deny from all

I uploaded extension and looked into TER. And I realized that my .htaccess is not there. So I went looking into Extension Manager (EM) and discovered that EM by default disallows uploading of files whose names start from a dot....

Usually I analyze security logs for my web server daily. And each day I see various haching attempts. While I do not understand what causes people doing it (this is not a political site!), I am very interested to see how they do it.