31–40 of 61 posts
Why on earth would you try to help DDOS'ers? I think you should really take a step back here and reevaluate what drives you here and what impact you have on other people.
If folks are really concerned about getting exposed they can firewall off everyone except cloudflare. https://www.cloudflare.com/ips/
> This is obviously a huge threat to CloudFlare’s entire business model I disagree. There are plenty of ways to hide your origin server, for example: 1. IPv6 only, since there are too many addresses to scan 2. Accepting connections only from cloudflare IPs (probably not enough on its own, since features like workers might allow an attacker to trigger requests from a cloudflare server) 3. Mutual TLS authentication 4.…
Protecting origin servers is hard. Nothing unique to CloudFlare about that. If you follow their set up documentation then this tool can't harm you: https://developers.cloudflare.com/fundamentals/get-started/t...
>, I intend to create a new internet-wide scanning system in order to revive the functionality of CrimeFlare just to prove a point that security through obscurity is no security and all, I'm not familiar with CrimeFlare and its technical details but a cursory google search shows that security-through-obscurity is possible with Cloudflare if one follows the correct sequence of steps to hide the ip. Otherwise, a carele…
>, I intend to create a new internet-wide scanning system in order to revive the functionality of CrimeFlare just to prove a point that security through obscurity is no security and all, I'm not familiar with CrimeFlare and its technical details but a cursory google search shows that security-through-obscurity is possible with Cloudflare if one follows the correct sequence of steps to hide the ip. Otherwise, a carele…
What % of Cloudflare customers actually have their server set to only accept traffic from cloudflare IPs? Probably not the majority. If this is coming as a surprise to people then maybe Cloudflare isn’t doing enough to help people secure themselves against it.
Why on earth would you try to help DDOS'ers? I think you should really take a step back here and reevaluate what drives you here and what impact you have on other people.
as far as i remember when the backend times out, CloudFlare shows a screen where you can see the actual IP of the server
> This is obviously a huge threat to CloudFlare’s entire business model I disagree. There are plenty of ways to hide your origin server, for example: 1. IPv6 only, since there are too many addresses to scan 2. Accepting connections only from cloudflare IPs (probably not enough on its own, since features like workers might allow an attacker to trigger requests from a cloudflare server) 3. Mutual TLS authentication 4.…