121–130 of 335 posts
Cloudflare is also making TOR quite useless.
Earlier quoted context omitted.
I don't know the specifics on this, could you elaborate?
Half the websites I visit give me the CloudFlare screen like One more step Please complete the security check to access . Followed by either endless stream of ReCaptchas or one completely impossible.
That's a pretty clever way to both deter bad actors and ensure legitimate users get uninterrupted access to websites.
I really wish you could just directly pay for services. A hundredth of a cent per visit would make most abuse un-profitable while still allowing very affordable procrastination.
Earlier quoted context omitted.
Any sufficiently bad actor will already modify their user agent. Who is this really stopping?
Same argument could be said for gun control.
Earlier quoted context omitted.
Yeah, you can't really talk about downsides of Recaptcha/Cloudflare without also acknowledging the extreme amount of malicious actors and abuse on the internet. We're in a "this is why we can't have nice things" predicament and you have malicious actors to thank for that, yet most people on HN only seem capable of attacking the few affordable solutions to that problem. I'm even down with the theory that Cloudflare is…
The problem is that the narrative has been poisoned by Cloudflare and Google (for Recaptcha) - they both overstate the size of the problem, as well as the effectiveness of their solution. In other words: when someone demands "real solutions", they're typically expecting a degree of solution that quite likely just does not exist at all, to solve a problem that isn't as severe as people believe, just because that's the…
Earlier quoted context omitted.
Yeah, you can't really talk about downsides of Recaptcha/Cloudflare without also acknowledging the extreme amount of malicious actors and abuse on the internet. We're in a "this is why we can't have nice things" predicament and you have malicious actors to thank for that, yet most people on HN only seem capable of attacking the few affordable solutions to that problem. I'm even down with the theory that Cloudflare is…
The problem is that the narrative has been poisoned by Cloudflare and Google (for Recaptcha) - they both overstate the size of the problem, as well as the effectiveness of their solution. In other words: when someone demands "real solutions", they're typically expecting a degree of solution that quite likely just does not exist at all, to solve a problem that isn't as severe as people believe, just because that's the…
CF has problems, but pretending it isn't solving a real issue that is nearly impossible to fix otherwise, especially for individual admins running a side project, doesn't help anybody.
Earlier quoted context omitted.
Yeah, because most custom browsers are malicious. They have the data to prove it. This isn't a side feature, it's a direct feature that is 100% intentional. They maintain a backend whitelist of known "good" user-agents. Curl is on that list and there are a few others outside of the big players. Most people building custom browsers are doing it to do something Chrome would disallow. One instance would only supporting…
Why doesn’t the bad actor fork Chromium or Firefox?
Cloudflare blocks an enormous number of bad actors for me, so I quite like it.
I thought the point was anti-DDoS by just proxying your traffic through someone with bigger pipes. That they do TLS offloading to filter n-days like Heartbleed helps as well of course, but those are super rare events and it sounds like what you mean is ongoing.
What kind of bad actors do you mean, and what kind of sites? Don't have to mention the domain or anything, just that it makes a difference whether it's a web shop (financial risk I guess), more like a forum (spammer / hater risk), or something else.
Cloudflare is also making TOR quite useless.
CF has nothing to do with that, website operators can choose to blacklist Tor exit nodes regardless of whether they use CF. Many of them do, because Tor is such a massive source of malicious traffic. It sucks, but it's not CF's fault.
It has been a long time since I used CF though, so maybe there is a question in the setup phase or only a few settings.