Test `nc 192.168.2.100`
There is no need to do that here. Putting the text into the 'About:' box of your HN profile works just as well while not cluttering up the thread.
Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
141–150 of 164 posts
Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#142Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#143Earlier quoted context omitted.
Is there a way to know when the encrypted content i send to a site is also being provided to Cloudflare?
Isn't the SSL certificate being issued by Cloudflare a giveaway? I'm guessing it's a sufficient condition, bit not a necessary one. I.e, a could be using Cloudflare's WAF with a SSL cert issued by somebody else.
Cloudflare can issue from Google Trust Services/Digicert with ACM[0] and often does even without ACM (although maybe only for Business/Enterprise domains).
0: https://developers.cloudflare.com/ssl/edge-certificates/adva...
Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#144Earlier quoted context omitted.
They used to run it but stopped (I want to say) around 2016 or 2017. Another poster here linked[0] to how dang confirmed it is to protect against a DDOS attack. 0: https://news.ycombinator.com/item?id=38939668
The cert is Cloudflare today.
It also means Cloudflare sees HN traffic in plaintext, including login/passwords
Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#145Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#146Earlier quoted context omitted.
Indeed. WAFs need to die; they're basically all just doing https://thedailywtf.com/articles/Injection_Rejection >.
Why would you grossly oversimplify something you know is untrue
"Needs to die" is a bit harsh but there are alternatives that are better and more secure. If you're just a regular sysadmin and only want to spend 8-9 hours a day at work you might just use a WAF instead and deal with the lost performance/added cost.
Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#147"If you're seeing this message, that means JavaScript has been disabled on your browser, please enable JS to make Imgur work." Well, it's a client that has no Javascript engine. There is no need to use Javascript. This works for me just fine: https://i.imgur.com/YtepoDbh.jpg
ever since imgur started hating VPN users, I hate it back.
Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#148Any code including netcat (for it's tendency to be used in reverse shells) or SQL (for it's tendency to be used in SQL injections) tends to be blocked across the entire cloudflare-net these days.
Select id, email from users;
Works. Any sql thats actually blocked?
Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#149Earlier quoted context omitted.
That makes using https instead of http a lot less relevant.
https is important for preventing spying by anyone else in between you and the server. ISPs, coffee shop owners, schools, etc used to spy on http traffic to see what people were doing/searching for, and ISPs like xFinity injected code into non-https pages to show "important messages" to users, e.g. going over your bandwidth limit[0]. The only weak link now is Cloudflare, which is still "less secure than a direct conn…
I too inject porn images, inverted images, backwards texst, etc in http back in the day for people piggybacking (without permission) off my wifi.
Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?
#150Earlier quoted context omitted.
Which is easy enough to say, but how do you protect your site from being ddosed?
None of my sites have been in over a decade of hosting from a residential connection When it's needed, it's needed, but it amazes me how many people feel they need big brother protection for their personal blog and nextcloud
[deleted]