RustDesk rolled out a "same city" restriction on their public relay server today in response to a Go Client botnet. No advance warning.
Users worldwide are now locked out of their own machines. The GitHub thread has people stuck in Japan unable to reach home servers, someone who just set up RustDesk for their 70-year-old father, and users blocked despite being in the same city.
The original attack was just automated connection requests requiring clicking "Accept". Users with password auth were never vulnerable.
https://github.com/rustdesk/rustdesk/discussions/14167
