Live data from Hacker News

Among European Companies That Use a CDN, Nearly 9 in 10 Use Cloudflare

ciphercue.com

291–300 of 386 posts

Re: Among European Companies That Use a CDN, Nearly 9 in 10 Use Cloudflare

#291
post #176

Earlier quoted context omitted.

There’s no way a single datacenter costing a couple of billion dollars can store “all Internet traffic the NSA can access”, unless the traffic the NSA can access is a microscopic fraction of the total Internet traffic. Think about it. The Internet runs on tens of thousands of massive datacenters. Thousands are being built as we speak. Obviously a single datacenter cannot hold an appreciable fraction of that. BTW, the…

https://en.wikipedia.org/wiki/Fairview_%28surveillance_progr... https://en.wikipedia.org/wiki/Room_641A Public information shows that the NSA has been active intercepting as much data as possible. It doesn't require the budget of a FAANG to peek through a significant volume of internet data.

That’s not what the GP comment said though. They claimed that they are storing everything they can intercept, which is weapons grade horseshit.

Re: Among European Companies That Use a CDN, Nearly 9 in 10 Use Cloudflare

#292
post #176

Earlier quoted context omitted.

There’s no way a single datacenter costing a couple of billion dollars can store “all Internet traffic the NSA can access”, unless the traffic the NSA can access is a microscopic fraction of the total Internet traffic. Think about it. The Internet runs on tens of thousands of massive datacenters. Thousands are being built as we speak. Obviously a single datacenter cannot hold an appreciable fraction of that. BTW, the…

> The Internet runs on tens of thousands of massive datacenters. "The Internet" would require 1000 times less servers if it wasn't running off Python scripts in Docker containers in VMs in a virtual overlay network. (I'm exaggerating these numbers only slightly.)

Sure. But a government agency has secretly rebuilt all the same infrastructure without Python, on a shoestring budget compared to what Big Tech is spending, yet it’s a lot more efficient than what they use, right?

Re: Among European Companies That Use a CDN, Nearly 9 in 10 Use Cloudflare

#293
People rarely reach for a CDN. They only ever reach for Cloudflare. Nobody's reaching for Akamai without a good sales pitch, nobody's tossing up between Akamai and Cloudflare, everyone's using CF because it's free. And they don't need the thing CF offers, they don't go out looking for it, it comes to them and they say "that sounds neat" and set it up.

Re: Among European Companies That Use a CDN, Nearly 9 in 10 Use Cloudflare

#294
post #9

> The front door is not the whole stack Hey Claude, can you move the ciphercue blog to Cloudflare so it can deal with traffic from HN? On a more serious note, Cloudflare comes packed with features even on its free plan which makes it useful for any size website. For a real business it's one of the cheapest options for DDoS protection on the market. Some years ago you would have paid a fortune for Akamai or Level3 to…

> now you can get by on a $200 a month plan for a small business You're delusional if you think that $200/month is appropriate for a small business to pay to host a website ... Most websites don't need a CDN nor DDOS protection, you need to configure your webserver to rate limit stuff that suck bandwidth/CPU from you, but besides that, you've basically fallen for the marketing from Cloudflare that everything requires…

If it's one thing I learned from my old web hosting business, it's that any website can be in immediate need of a CDN or DDOS protection at any given time. It's the only business where my customers were randomly attacked for seemingly no good reason. It's also why I got the hell out of that business.

Re: Among European Companies That Use a CDN, Nearly 9 in 10 Use Cloudflare

#295

Earlier quoted context omitted.

> The hidden cost, of course, is that the NSA learns everything there is to know about you and your customers You're replying to a comment talking about migrating from Google, so I assume you're claiming this is more of a risk with Cloudflare than Google (or other American providers like AWS)? If so, what's your source for that claim?

Heck the NSA backdoored our head of states phones - if “NSA wants my data” is your threat model you are pretty much cooked everywhere. Even if you host on your own server and operate everything yourself it’s no big secret that the NSA is listening in on the node/isp level

You may as well make them work hard to get it. The NSA can only get metadata from your ISP.

Re: Among European Companies That Use a CDN, Nearly 9 in 10 Use Cloudflare

#296

Earlier quoted context omitted.

The NSA couldn't care less about you and your customers, nor do they have any interest whatsoever in the megaton of worthless internet traffic that goes through Cloudflare. This article, from over a decade ago now, explains how they actually operate. Gobbling up all the traffic is a 20+ year old idea that never bore any fruit and is amazingly pointless. Instead, they might drop an implant in the SSD firmware of devic…

There's a lot of important data that runs through Cloudflare, so I think it's a bit naive to think that there's nothing interesting for the NSA there.

I'm more concerned about crimeflare's own incentive to analyze our traffic that people already willingly let them MITM, and somehow sell it to the highest bidder.

Re: Among European Companies That Use a CDN, Nearly 9 in 10 Use Cloudflare

#297

Earlier quoted context omitted.

Heck the NSA backdoored our head of states phones - if “NSA wants my data” is your threat model you are pretty much cooked everywhere. Even if you host on your own server and operate everything yourself it’s no big secret that the NSA is listening in on the node/isp level

"The “threat model” section of a security paper resembles the script for a telenovela that was written by a paranoid schizophrenic: there are elaborate narratives and grand conspiracy theories, and there are heroes and villains with fantastic (yet oddly constrained) powers that necessitate a grinding battle of emotional and technical attrition. In the real world, threat models are much simpler (see Figure 1). Basical…

Yeah but like, they still have to do that, we don't put our own uranium lumps in our cellphones like we do with cloudflare.

Re: Among European Companies That Use a CDN, Nearly 9 in 10 Use Cloudflare

#298

It's seriously good value for small websites. Basically, there is no cost aside from the domain. And for registering and managing domains, they are pretty much the most affordable option as well. And they have a few other things that aren't half bad to use with pretty generous freemium layers. We used Google's CDN for the last six years or so but it's pretty annoying to deal with and you have to pay for a load balanc…

I cannot visit most crimeflare sites because I just get endless captcha loops.

Re: Among European Companies That Use a CDN, Nearly 9 in 10 Use Cloudflare

#299
post #156

Earlier quoted context omitted.

I also believed that, but at least for India, this doesn't work in practice. Unless you atleast do the 25$ pro plan, cloudflare routes even india-to-india, hell, even mumbai-to-mumbai and aws_mumbai-to-cloudflare_mumbai traffic via Marsaille!! Not even Singapore. The unstated reason is that indian transit is expensive, though I fail to believe its cheaper to go from mumbai to marsaille and back to mumbai. I am guessi…

Transit in some countries, like India, genuinely is that expensive. Keep in mind it doesn’t cost Cloudflare any more to serve Indian traffic from Marsaille than to serve non-peered French traffic from that colo - they aren’t paying the cost of getting traffic between India and France.

The traffic still has to flow from an india provider to the international leg and back via the domestic provider.

In anycase, then they should document it clearly that they have unacceptable insertion latency in india and the free plan is entirely unusable for india. Instead of advertising '10 pops in india!!'

Post reply on HN