Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Cloudflare took down our website

robindev.substack.com

Post reply on HN
Print view View original

421–430 of 483 posts

Re: Cloudflare took down our website

#421

Post by throwitaway1123 »

fredthedeadhead wrote: post #415
587846 wrote: post #66

This is my first post on Hacker News as I primarily just browse. This situation kept me intrigued, wanting to know how it would unfold. The Google Cloud situation and all these little happenings, including the proliferation of Gen AI into everything, make me long for the days when companies had their mainframes onsite, in closets or separate rooms, away from CDNs and cloud networks. It seems like a better idea to use…

> The Google Cloud situation What's the Google Cloud situation?

They accidentally deleted a customer's account somewhat recently [1][2][3].

[1] https://news.ycombinator.com/item?id=40313171

[2] https://news.ycombinator.com/item?id=40304666

[3] https://news.ycombinator.com/item?id=40466810

Re: Cloudflare took down our website

#422

Post by user_7832 »

user_7832 wrote: post #264
CtrlAltDelete51 wrote: post #233

Earlier quoted context omitted.

Almost, like … maybe one of the “protection” providers might have ways to suppress bad media? puts on tin foil hat and looks around nervously

A more charitable interpretation is that lots of techy HN'ers would rather defend CF against an unknown company, as some sort of tribal allegiance - the same way Apple has a huge cult following. Nonetheless the end result (flagging/downranking) is wrong - hell, I had to find this thread by going to my previous comments as I couldn't find it on the front 2 pages. If that isn't considered an abuse of systems (again, ch…

If someone disagrees with me or if I wrote something wrong I'll be happy to modify/edit my comment, but if you just downvote it really isn't clear

Re: Cloudflare took down our website

#423

Post by curtisblaine »

dangus wrote: post #384
curtisblaine wrote: post #361

Earlier quoted context omitted.

This still doesn't contain the word "gambling". Instead, it says that they can terminate your account at any moment, for any reason, no matter what your business type is, which is the opposite of "trust".

Oh well, last I checked “gambling” will match with a .* regex pattern.

Yeah, but "gardening" matches too. So are you proposing that gambling sites and gardening sites have the same level of risk?

Re: Cloudflare took down our website

#424

Post by NicoJuicy »

kalleboo wrote: post #403
nolongerthere wrote: post #232

Earlier quoted context omitted.

She did say she was around for only 6 months and enterprise sales cycles can last 12+. Though I guess if you’re engaging in scammy behavior it can be much less… maybe she wasn’t willing to do that.

Although in OP apparently the enterprise sales cycle is 24 hours

Cloudflare is getting IP's flagged because of them and enterprise offers Bring Your Own IP.

Not really nice to leave out halve of the info :)

Re: Cloudflare took down our website

#426

Post by jasonm23 »

mschuster91 wrote: post #318
dist-epoch wrote: post #307

Earlier quoted context omitted.

Gaming machines are highly regulated, almost like medical devices. There are seals on the hardware, any modification must be approved, you must certify that the payout is the expected one, ...

I'd say worse than medical. As long as it works and doesn't fail, no one will give a fuck about medical hardware or the condition it's in. Just look at your average GP's ultrasound, it's probably older than the GP themselves is. Gambling however, you constantly have government auditors and the tax office crawling up your literal arse to make sure you don't cheat the gamblers, or worse, the government out of their mon…

Pretty sure it's your figurative arse but potato, pot-ahh-toh

Re: Cloudflare took down our website

#427

Post by msh »

psd1 wrote: post #96
587846 wrote: post #66

This is my first post on Hacker News as I primarily just browse. This situation kept me intrigued, wanting to know how it would unfold. The Google Cloud situation and all these little happenings, including the proliferation of Gen AI into everything, make me long for the days when companies had their mainframes onsite, in closets or separate rooms, away from CDNs and cloud networks. It seems like a better idea to use…

Did you ever notice the bit in EULAs that states that maximum liability to the vendor is capped at what you paid? When big cloud goes down, you get a few days of credit. That's it.

When you do custom enterprise agreements you can get a lot more than that.

Re: Cloudflare took down our website

#428

Post by pornel »

redman25 wrote: post #217
ecjhdnc2025 wrote: post #122

I will remind HNers: is Cloudflare not the company that leaked sensitive data through cache files that were indexed by at least Google, and when the tech community were up in arms about the massive leakage of sensitive data, the CEO’s strategy was to turn up here and criticise Google for not deindexing quickly enough? You get what you pay for.

That's one of the main reasons I'm leary about them. Such a big f-up is difficult to forget. It shows that they have a move fast and break things culture which for a company that is responsible for critical infrastructure feels wrong.

In response to this incident Cloudflare has made big engineering changes, including huge work to move away from C as much as possible.

The offending parsers were rewritten in Rust (https://github.com/cloudflare/lol-html), as well as WAF, image optimization, and a few others. Nginx is being replaced with a custom cache server.

New implementations are using either the Workers platform, or are written in Rust or Golang.

Re: Cloudflare took down our website

#429

Post by pornel »

trane_project wrote: post #366
redman25 wrote: post #217

Earlier quoted context omitted.

That's one of the main reasons I'm leary about them. Such a big f-up is difficult to forget. It shows that they have a move fast and break things culture which for a company that is responsible for critical infrastructure feels wrong.

I interviewed there once and they asked me what I would do if a service broke after a deployment. I said the first step was to revert to the last known good version and then investigate. Color me surprised when that was not the answer they expected.

Cloudflare's internal release tool suggests revert when monitoring detects failures during deployment, so this question doesn't describe Cloudflare's practices. There must have been something more to it, or it was a misunderstanding.

Re: Cloudflare took down our website

#430

Post by dangus »

curtisblaine wrote: post #423
dangus wrote: post #384

Earlier quoted context omitted.

Oh well, last I checked “gambling” will match with a .* regex pattern.

Yeah, but "gardening" matches too. So are you proposing that gambling sites and gardening sites have the same level of risk?

No, but I am saying that OP’s company has a combination of risk and likely overuse of services from being a global gambling website.

Being a gambling website makes you an outsized target for attacks.

OP basically wanted to run DraftKings from the small business plan and CF understandably didn’t care to deal with a loss-leading customer like that.

Post reply on HN