<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Akamai on Elliot Belt</title><link>https://felixbillieres.github.io/tags/akamai/</link><description>Recent content in Akamai on Elliot Belt</description><generator>Hugo -- gohugo.io</generator><language>en</language><managingEditor>felix.billieres@ecole2600.com (Elliot Belt)</managingEditor><webMaster>felix.billieres@ecole2600.com (Elliot Belt)</webMaster><copyright>© 2026 Elliot Belt</copyright><lastBuildDate>Mon, 07 Sep 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://felixbillieres.github.io/tags/akamai/index.xml" rel="self" type="application/rss+xml"/><item><title>The Akamai rule that stops running when you add .css</title><link>https://felixbillieres.github.io/posts/waf-static-extension-rule-exception/</link><pubDate>Mon, 07 Sep 2026 00:00:00 +0000</pubDate><author>felix.billieres@ecole2600.com (Elliot Belt)</author><guid>https://felixbillieres.github.io/posts/waf-static-extension-rule-exception/</guid><description>&lt;p&gt;I was hunting on a private YesWeHack program and I kept hitting the same wall. Not a hardened application, a &lt;code&gt;403&lt;/code&gt;: 461 bytes of HTML, &lt;code&gt;server: AkamaiGHost&lt;/code&gt;, back in forty milliseconds. Whenever I got close to something the edge ate the request before the origin saw it. Three separate leads died that way across two sessions, and after the third one I stopped treating it as bad luck.&lt;/p&gt;</description><media:content xmlns:media="http://search.yahoo.com/mrss/" url="https://felixbillieres.github.io/posts/waf-static-extension-rule-exception/featured.png"/></item></channel></rss>