So HN uses Cloudflare? That surprises me because typically I notice sites using Cloudflare because my mobile running GNU Linux cannot pass their dreaded Turnstyle. Luckily that does not happen for HN.
Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
31–40 of 164 posts
Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#32So HN uses Cloudflare? That surprises me because typically I notice sites using Cloudflare because my mobile running GNU Linux cannot pass their dreaded Turnstyle. Luckily that does not happen for HN.
They used to run it but stopped (I want to say) around 2016 or 2017. Another poster here linked[0] to how dang confirmed it is to protect against a DDOS attack.
Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#33Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#34Any code including netcat (for it's tendency to be used in reverse shells) or SQL (for it's tendency to be used in SQL injections) tends to be blocked across the entire cloudflare-net these days.
AFAIK most of these filters are disabled by default when setting up your website on Cloudflare, so most websites using the Cloudflare network likely have this turned off.
This is correct, it’s part of their WAF offering where there is rule-based blocking of content.
Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#35Cloudflare has access to everyone's cleartext? I was unaware of this. NSA must love that
It’s a CDN that caches content and it’s able to inject “are you human?” verification pages, it can rewrite content on demand (e.g. serve optimized images / html / JavaScript). It seems obvious to me that they have access and ability to modify all cleartext content in-flight.
Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#36[flagged]
Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#37Cloudflare has access to everyone's cleartext? I was unaware of this. NSA must love that
Same for Akamai, Cloudfront, Fastly, etc. Pretty much every business that wants to offload DDOS protection, caching,and some level of frontline security uses a proxying CDN. An alternative is to keep all of your CDN assets on a CDN bucket on its own hostname, with your main secret-containing business apps on your own servers, but it costs a lot to manage this level of separation and the payoff is only protection agai…
That makes using https instead of http a lot less relevant.
Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#38[flagged]
[flagged]
Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#39So HN uses Cloudflare? That surprises me because typically I notice sites using Cloudflare because my mobile running GNU Linux cannot pass their dreaded Turnstyle. Luckily that does not happen for HN.
They used to run it but stopped (I want to say) around 2016 or 2017. Another poster here linked[0] to how dang confirmed it is to protect against a DDOS attack. 0: https://news.ycombinator.com/item?id=38939668
The cert is Cloudflare today.
Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#40What if you Base64 encode this? Pretty trivial to add to the form logic.
yeah, i'd expect dang to just jump right on that. just because you feel it is trivial does not mean that it should be done.