Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?

news.ycombinator.com

Post reply on HN
Print view View original

81–90 of 164 posts

Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?

#81

Post by david_draco »

jrockway wrote: post #71

This line works: nc -l -p 1234 -q 1 > testfile.txt The other one doesn't. alias foobar=nc cat testfile.txt | foobar 192.168.2.100 1234 I was hoping that it was a "useless use of cat" filter, but nope. It just doesn't like the bytes nc next to an IPv4 address. This is also fine, but blocked if you change the slash to a dot: nc 192/168.2.100 1234 This works too: nc \ 192.168.2.100 1234 OK, that's all for now. Can you b…

Good that there are open source alternatives:

  socat - TCP4:192.168.2.100:1234

  socat TCP4-LISTEN:1234,fork,reuseaddr -
https://www.redhat.com/sysadmin/getting-started-socat

Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?

#83

Post by dividuum »

usr1106 wrote: post #31

So HN uses Cloudflare? That surprises me because typically I notice sites using Cloudflare because my mobile running GNU Linux cannot pass their dreaded Turnstyle. Luckily that does not happen for HN.

Yep. Without leaving the browser, https://news.ycombinator.com/cdn-cgi/trace confirms that.

Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?

#84

Post by gnfargbl »

jrockway wrote: post #71

This line works: nc -l -p 1234 -q 1 > testfile.txt The other one doesn't. alias foobar=nc cat testfile.txt | foobar 192.168.2.100 1234 I was hoping that it was a "useless use of cat" filter, but nope. It just doesn't like the bytes nc next to an IPv4 address. This is also fine, but blocked if you change the slash to a dot: nc 192/168.2.100 1234 This works too: nc \ 192.168.2.100 1234 OK, that's all for now. Can you b…

> Can you believe people pay money for "web application firewalls"?

I think it's like a lot of things in computer security, in that system owners just don't want to be the slowest gazelle in the herd. If an attacker is mass-exploiting some new remote vulnerability, then maybe the WAF means that you're one of the lucky ones who doesn't get hit. And yes, that's a very big maybe there.

WAFs don't do much to prevent targeted attacks except to require the attacker to craft a WAF bypass. As you've shown.

Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?

#86

Post by tick_tock_tick »

xk_id wrote: post #53
judge2020 wrote: post #47

Earlier quoted context omitted.

https is important for preventing spying by anyone else in between you and the server. ISPs, coffee shop owners, schools, etc used to spy on http traffic to see what people were doing/searching for, and ISPs like xFinity injected code into non-https pages to show "important messages" to users, e.g. going over your bandwidth limit[0]. The only weak link now is Cloudflare, which is still "less secure than a direct conn…

Is there a way to know when the encrypted content i send to a site is also being provided to Cloudflare?

No, just like there is no way to know if a site not fronted by cloudflare decided to send all traffic their after.

Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?

#87

Post by egeozcan »

jiggawatts wrote: post #79
bandergirl wrote: post #65

Earlier quoted context omitted.

That code makes me sick to my chest. Why are some people allergic to reading? Nah I’m not opening that link, I got it

Even if they got the link, read it, they probably didn't fully understand the concepts. I wish this was a joke, but just last month I spent literally hours arguing with multiple people -- on shore -- that that kind of query rewrite/rejection approach was never going to work properly, and only properly parameterised queries were correct. Nope. Fix after fix, then fixes for the fixes, then workarounds for the glitches,…

A common problem with technical leads is that occasionally they tend to forget that they can't know all the correct solutions and it's usually better to yield to those who do. Sometimes seniority makes this even worse.

Source: After so many years of dealing with bad technical decisions became a TL myself :)

Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?

#88

Post by egeozcan »

helsinkiandrew wrote: post #74
cj wrote: post #43

Earlier quoted context omitted.

The aggressiveness of the "dreaded Turnstyle" is 100% configurable. It's very easy to disable it completely via Cloudflare settings. Using cloudflare doesn't require you to use all of its features, and almost every feature can be turned off.

I always feel the turnstyle makes a website feel a bit condescending - you need to test MY connection before I get to your crappy site? Is there a reason it needs to be visible whilst performing checks? or is it just security theatre?

I always assumed that it is running some client side sanity checks to detect automated user agents but never checked.

Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?

#90

Post by gus_massa »

LeoPanthera wrote: post #59
gus_massa wrote: post #3

To get a fast answer, it's beter to send an email to the mods hn@ycombinator.com

In this case, I appreciate that OP made a public post, in case others encounter the same problem.

dang is not reading every single post in real tieme, so posts may get unoticed and the guidelines ask to send an email instead.

In this case, it looks like some comments are giving good advice about the tradeoff and how to fix it, so I have to agree with you.

Post reply on HN