Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

CloudFlare Watch

crimeflare.com

Post reply on HN
Print view View original

21–30 of 38 posts

Re: CloudFlare Watch

#21

Post by geofft »

nubela wrote: post #16

Shameless plug / full disclosure: I work at Kloudsec In case you're looking for alternatives, Kloudsec [1] is a minimal CDN platform made for programmers. And I think we make a good alternative because: a) You get to keep your nameservers, just point the relevant domain to our CDN's IP b) Auto LetsEncrypt SSL cert provisioning (and renewing too) c) Every plugin is optional (WAF, Pagespeed, Analytics). Just toggle the…

Shameless plugs are great, but are you saying you take active effort to keep undesirable people from using your service? Because I'm not sure (at least on this forum) why you'd want to say that you do, and you're not differentiating yourself for the purposes of this article if you're not. :)

Re: CloudFlare Watch

#22

Post by Kovah »

"It costs $22 USD a day to keep CloudFlare Watch online"

What the hell?!? He pays 600 bucks a month for some shitty HTML? What kind of hosting is this?

Re: CloudFlare Watch

#23

Post by chrisdotcode »

simonw wrote: post #6

As far as I can tell, this is by Daniel Brandt - previously of (now defunct) Google Watch and a bunch of other similar projects over the past 27+ years: http://www.leavegooglebehind.com/news/2012/02/google-critic-... (Based on the IRS letter posted on the site at http://www.crimeflare.com/gifs/irslet.gif which mentions "Public Information Research Inc", Brandt's organization) Update: confirmed, here's a page on the s…

I'm ignorant of who this man is; is there a particular reason his character should be known in the context of this website?

Re: CloudFlare Watch

#24

Post by jamespo »

heinrich5991 wrote: post #13
mikeash wrote: post #10

Earlier quoted context omitted.

I don't understand your last paragraph. CloudFlare isn't a necessary service for publishing stuff online. If they tightened up their rules, that wouldn't be a world where someone else dictates what you can say or believe. Free speech doesn't require private entities to host or publish regardless of content, and it's totally consistent to both advocate for free speech and advocate that entities not make certain kinds…

It's hard to host a website if you don't have the support of CloudFlare or something similar, DoS attacks get you off hosting providers pretty quickly.

Not only are the alternatives to CF as you acknowledge but the number of sites hit by DOS attacks is low in the grand scheme of things.

Re: CloudFlare Watch

#25

Post by shreve »

Kovah wrote: post #22

"It costs $22 USD a day to keep CloudFlare Watch online" What the hell?!? He pays 600 bucks a month for some shitty HTML? What kind of hosting is this?

That also includes all the web scraping it's doing. As it says, there's a lot of churn in the data, and it tries to keep it all updated.

Of course, that's still way too much. I don't believe that's an honest figure, or the owner is being ripped off.

Re: CloudFlare Watch

#27

Post by apecat »

jgrahamc wrote: post #3
r3bl wrote: post #2

So... judging by the titles, what this website is suggesting is basically that free speech only applies if you agree with it, and since they don't agree with CloudFlare's decision to host everything, CloudFlare is bad? Honestly, the only thing I don't like about CloudFlare is their treatment of Tor users, which I don't see being mentioned anywhere in here.

We're making a lot of changes to how we handle Tor: https://support.cloudflare.com/hc/en-us/articles/203306930

I missed this! This is great news and frankly deserves a mention on CF's really nice company blog so that as many site owners as possible learn about the new granularity for Tor.

As a Tor relay operator and CF customer, I've been really split on the effects of CF's power. After all, blocking heuristics is just what I need.

Part of my job is maintaining a bunch of viral WordPress sites on a small budget. In addition to the crazy bandwidth and responsiveness a CF pro subscription buys you, the service really is a small biz secops dream machine. I can actually focus on writing when I just put sites behind CF.

Maybe it's Appelbaum's fate to be the Stallman of any tech with mass surveillance potential. That's not an insult and it's good to have immutable critics of centralized infrastructure. But it's certainly a bit tiresome sometimes.

The options presented by CF seem to hit a nice balance. Making blanket Tor blocking an enterprise-only feature is a nice touch. In the spirit of that, it'd maybe make sense to also make JS challenge the default for new Cloudflare domains?

Now, if there only was some magic beyond keyless ssl to get rid of the MiTM aspect...

Re: CloudFlare Watch

#28

Post by buro9 »

austinheap wrote: post #19
jgrahamc wrote: post #3

Earlier quoted context omitted.

We're making a lot of changes to how we handle Tor: https://support.cloudflare.com/hc/en-us/articles/203306930

What's the point in restricting this to enterprise users? I can make access rules for every other country except 'T1' on a the entry-level paid plan?

It's only the "country level block" bit that is limited to enterprise.

But then again, if you're using Nginx something like the following may work (gah, have not tested):

    http {
      map $http_cf_ipcountry $allow_country {
          default yes;
          T1 no;
      }
      server {
        if ($allow_country = no) {
          return 403;
        }    
      }
    }
Assumes you have enabled the GeoIP stuff, which again... I've not tested whether it sends Tor through as a country identifier... I shall ask.

Or you could do the opposite and restrict access unless someone is accessing via Tor ;)

Re: CloudFlare Watch

#29

Post by jgrahamc »

apecat wrote: post #27
jgrahamc wrote: post #3

Earlier quoted context omitted.

We're making a lot of changes to how we handle Tor: https://support.cloudflare.com/hc/en-us/articles/203306930

I missed this! This is great news and frankly deserves a mention on CF's really nice company blog so that as many site owners as possible learn about the new granularity for Tor. As a Tor relay operator and CF customer, I've been really split on the effects of CF's power. After all, blocking heuristics is just what I need. Part of my job is maintaining a bunch of viral WordPress sites on a small budget. In addition t…

We are going to blog about Tor soon.
Post reply on HN