Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?

news.ycombinator.com

Post reply on HN
Print view View original

151–160 of 164 posts

Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?

#151

Post by fragmede »

Aachen wrote: post #137
fragmede wrote: post #120

Earlier quoted context omitted.

Which is easy enough to say, but how do you protect your site from being ddosed?

None of my sites have been in over a decade of hosting from a residential connection When it's needed, it's needed, but it amazes me how many people feel they need big brother protection for their personal blog and nextcloud

how many people do you piss off with the opinions you post on your blog? enough to warrant being DDoS'd by an emotionally stunted highschooler with their parents/stolen credit card and the ability to Google for a botnet?

Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?

#152

Post by [deleted] »

EasyMark wrote: post #146
RockRobotRock wrote: post #142

Earlier quoted context omitted.

Why would you grossly oversimplify something you know is untrue

"Needs to die" is a bit harsh but there are alternatives that are better and more secure. If you're just a regular sysadmin and only want to spend 8-9 hours a day at work you might just use a WAF instead and deal with the lost performance/added cost.

[deleted]

Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?

#154

Post by LinuxBender »

usr1106 wrote: post #31

So HN uses Cloudflare? That surprises me because typically I notice sites using Cloudflare because my mobile running GNU Linux cannot pass their dreaded Turnstyle. Luckily that does not happen for HN.

It is at the moment.

    news.ycombinator.com. 3710 IN CNAME news.ycombinator.com.cdn.cloudflare.net.
    news.ycombinator.com.cdn.cloudflare.net. 3710 IN A 104.22.6.236
    news.ycombinator.com.cdn.cloudflare.net. 3710 IN A 172.67.5.232
    news.ycombinator.com.cdn.cloudflare.net. 3710 IN A 104.22.7.236

Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?

#156

Post by flexagoon »

EasyMark wrote: post #147
1vuio0pswjnm7 wrote: post #138

"If you're seeing this message, that means JavaScript has been disabled on your browser, please enable JS to make Imgur work." Well, it's a client that has no Javascript engine. There is no need to use Javascript. This works for me just fine: https://i.imgur.com/YtepoDbh.jpg

ever since imgur started hating VPN users, I hate it back.

You can use Rimgo, an alternative frontend for Imgur

Just replace "i.imgur.com" with one of the Rimgo instances:

https://rimgo.codeberg.page/

(The most popular ones are usually rate-limited though)

Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?

#157

Post by Dylan16807 »

jiggawatts wrote: post #79
bandergirl wrote: post #65

Earlier quoted context omitted.

That code makes me sick to my chest. Why are some people allergic to reading? Nah I’m not opening that link, I got it

Even if they got the link, read it, they probably didn't fully understand the concepts. I wish this was a joke, but just last month I spent literally hours arguing with multiple people -- on shore -- that that kind of query rewrite/rejection approach was never going to work properly, and only properly parameterised queries were correct. Nope. Fix after fix, then fixes for the fixes, then workarounds for the glitches,…

> query rewrite/rejection approach was never going to work properly, and only properly parameterised queries were correct

...what do you mean by "rewrite/rejection"?

If rewrite means "escaping strings using the database function designed for that purpose", then that approach works just fine. It's not comparable to rejection at all.

If they were making their own version, then the underlying problem is that they were making their own version. Parameterised queries are lovely but they are not the only option.

Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?

#158

Post by Dylan16807 »

anonym29 wrote: post #130
anonym29 wrote: post #48

Earlier quoted context omitted.

Hardly! Nobody is forcing you to consent to MITM, you freely choose it every time you voluntarily use a website that utilizes one.

To downvoters: please don't shoot the messenger. I'm not happy about the existence of Cloudflare (or their competitors who do the same thing) either. That said, the choice is yours whether or not to use sites that utilize such untrustworthy MITM providers, like Cloudflare. There are even browser plugins that can automatically block connections to such untrustworthy entities. This isn't an endorsement, and you should…

An extension that tries to to block cloudflare is getting closer to making your original statement true, but it's still not true.

There aren't obvious signs up front that a site is using cloudflare. Failure to spend time investigating is not "freely choosing it".

Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?

#159

Post by [deleted] »

flexagoon wrote: post #156
EasyMark wrote: post #147

Earlier quoted context omitted.

ever since imgur started hating VPN users, I hate it back.

You can use Rimgo, an alternative frontend for Imgur Just replace "i.imgur.com" with one of the Rimgo instances: https://rimgo.codeberg.page/ (The most popular ones are usually rate-limited though)

[deleted]

Re: Ask HN: Does Cloudflare block HN comments if you have code blocks in a reply?

#160

Post by anonym29 »

Dylan16807 wrote: post #158
anonym29 wrote: post #130

Earlier quoted context omitted.

To downvoters: please don't shoot the messenger. I'm not happy about the existence of Cloudflare (or their competitors who do the same thing) either. That said, the choice is yours whether or not to use sites that utilize such untrustworthy MITM providers, like Cloudflare. There are even browser plugins that can automatically block connections to such untrustworthy entities. This isn't an endorsement, and you should…

An extension that tries to to block cloudflare is getting closer to making your original statement true, but it's still not true. There aren't obvious signs up front that a site is using cloudflare. Failure to spend time investigating is not "freely choosing it".

>There aren't obvious signs up front that a site is using cloudflare.

You're joking, right?

It takes 2 seconds to click the padlock in your browser, click through once more, and see "Verified by: Cloudflare, Inc". You don't even need to view the certificate.

If 2 seconds and 2 clicks is too much time and effort, it's obviously not actually that important to the user in question.

Post reply on HN