Earlier quoted context omitted.
Interesting. That's the first time I have run across this. Makes sense.
How does that make sense?
I think they meant "corresponds with behavior observed" not "sounds rational."
Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
11–20 of 164 posts
Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#12Cloudflare has access to everyone's cleartext? I was unaware of this. NSA must love that
Yes, although it requires configuration https://developers.cloudflare.com/ssl/get-started/
I'm pretty sure the default is they can see all the cleartext, since their product is based on TLS interception, for example to evaluate page rules.
This is also how they insert extra headers in both the request and response.
Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#13Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#14Cloudflare has access to everyone's cleartext? I was unaware of this. NSA must love that
Yes, although it requires configuration https://developers.cloudflare.com/ssl/get-started/
When you add a DNS rule, it's configured as proxied by default. Here is what it looks like in the UI:
Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#15Any code including netcat (for it's tendency to be used in reverse shells) or SQL (for it's tendency to be used in SQL injections) tends to be blocked across the entire cloudflare-net these days.
In a site like HN, that’s ridiculous.
Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#16Earlier quoted context omitted.
That does not make sense at all; it is batshit-crazy broken.
Welcome to the world of WAFs. Pattern matching scary strings is big business.
For the uninitiated:
https://www.cloudflare.com/application-services/products/waf...
Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#17Any code including netcat (for it's tendency to be used in reverse shells) or SQL (for it's tendency to be used in SQL injections) tends to be blocked across the entire cloudflare-net these days.
AFAIK most of these filters are disabled by default when setting up your website on Cloudflare, so most websites using the Cloudflare network likely have this turned off.
Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#18Cloudflare has access to everyone's cleartext? I was unaware of this. NSA must love that
It's a TLS termination proxy that decrypt and re-encrypt your TLS packet. Technically Cloudflare can read anything unless you add your own crypt layer on top of TLS.
Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#19Earlier quoted context omitted.
Welcome to the world of WAFs. Pattern matching scary strings is big business.
For the uninitiated: https://www.cloudflare.com/application-services/products/waf...
Believe me you can find them present in popular sites you use everyday ;-) I caught one of them and reported it.
Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#20Probably not related, but I've been getting lots of throttling-like huge page load delays on HN the last couple days, only when logged in.
Any idea whether that's just an overloaded application server, or something Cloudflare is doing?