Earlier quoted context omitted.
Won't anubis do the same?
ANUBIS = Annoying Normal Users, Barely Inconveniencing Scrapers
Scrapers started to solve PoW?
Cloudflare Email Service: private beta
511–520 of 578 posts
Re: Cloudflare Email Service: private beta
#512Eventually all Internet protocols will be MITMed by cloudflare. Your single point of interception!
To be honest, the internet was worse without Cloudflare, so as long as they provide a good service for their customers, I’m fine with it. This is one of those. Google is in a perfect position to compete but they don’t, so it’s not like Cloudflare is a monopoly or something. At least they’re not selling ads using your data.
>Google is in a perfect position to compete but they don’t, so it’s not like Cloudflare is a monopoly or something.
Compete on what? I think I saw captchas on sites with google trust services certificates. It's not a google service?
Re: Cloudflare Email Service: private beta
#513Earlier quoted context omitted.
For example, recently certain big corp ask me to verify something. I clicked on the link in the E-Mail and it was suck on Cloudflare the click button over and over again. No matter how many times I clicked. Do I need to find another internet access now?
You need to become more like a "normal person." No VPN (unless your ISP is extremely shady, then do use a VPN or change ISP), no overly zealous adblock (ublock origin on default settings should be fine), no JS blocking / weird privacy extensions / whatever, nno PiHole, just what your average, relatively tech-savvy geek would use. HN readerships's problems with Cloudflare are mostly their own fault. "normal" internet…
>[1] except for people in specific countries, and I do feel sorry for those.
Normal people also travel, and ended in those said countries sometimes. Which is the time when you need these things to work from any kind of connection.
Re: Cloudflare Email Service: private beta
#514Earlier quoted context omitted.
Businesses are not expected to protect your freedom of speech. If you want to say stuff that no one wants to print, you can't sue a business for not printing it. The government can't stop you from requesting a permit and saying it on public lands, though... And back when telecoms were common carriers, you could have done such from your home Internet, now you can only do it from your voice line.
Right but ISPs and services like CF should be neutral parties just like the Cisco routers and Corning fiber. They should not be arbiters of what’s currently acceptable. Thats not to say they are not subject to jurisdictional law but rather they should not be their own law imposing their views. Now of course if they want to provide you the user with tools to filter or hide things you disagree with out, by all means.
Yep- your phone or electrical provider don’t monitor your speech for objectionable content and neither should someone like Cloudflare once they achieve ’utility’ like status.
Re: Cloudflare Email Service: private beta
#515It's always shocking to me how many people blindly sacrifice the principles that make the things their lives depend on actually worthwhile. The internet isn't just a thing that happened, it was developed and rolled out under specific principles and vision, and violating those principles destroys the system. The internet doesn't work if Matthew Prince gets to act as global gatekeeper, or if CloudFlare gets conscripted…
or if CloudFlare gets conscripted as the new PRISM or NSA censorship
PRISM and the NSA are not involved in censorship but they do like to ingest a lot of data, the more the merrier. Only certain members of CF would know if they are already looped in and would have signed scary things preventing disclosure if that were the case. I just assume everything going through a CDN is monitored since it is a MitM by design. A long while back Akamai got in a lot of trouble for some of their people selling data to a country in the middle east, I forgot which one.
The way the censorious game works in the Ministry of Truth a sub-committee in the DHS sends private messages to former federal employees that work in high positions at tech platforms and advises them what to censor giving the company a way to say they did not officially comply with censorship demands. I will let the Queen of the internet explain [1]. Letting federal employees message people outside of logged government chat platforms is problematic.
[1] - https://www.youtube.com/watch?v=zdjQWuJeVqE [video][13 mins]
Re: Cloudflare Email Service: private beta
#516Earlier quoted context omitted.
Use other services where necessary, and sparingly. Use only what's functionally necessary, and diversify. Encourage your employer or organization to avoid vendor lock. Don't ever meet with salespeople, stay in charge of your websites and infrastructure. Find a highly disagreeable technical engineer to tell you what you can get away with; you probably don't need the scale of the things CloudFlare, AWS, et al impose by…
DDoS via AI bots doesn't have a straightforward solution at the individual level (Anubis-like solutions only neutralize the dumbest of bots). If you have a reference otherwise, I'd love to have it.
Digital bill of rights and enforcing laws already on the books, imposing requirements on ISPs to remove bad actors, and having governments and law enforcement agencies actually do the boring and tedious work of tracking these people down and shutting them down. Disconnecting ISPs from the rest of the internet when they cannot police themselves. Shutting down "VPN" services that harvest and abuse residential IP blocks of their users to evade detection while accepting money from bot herders, and other criminal activity that gets ignored.
We have sensible laws on the books, treaties, and all sorts of agreements with entities ranging from big corporations to ISPs to countries, but they aren't enforced. Just look at how long spam call centers have been an issue - if we start playing hardball and simply shutting off entire regions until providers and governments comply with basic enforcement, we can have a civilized internet.
These botnets are not magic. They're not subtle. They're not ultra-secure beyond the reach of mere mortals to do anything about.
They're allowed to persist for all sorts of reasons, ranging from utility to nation state level threat actors to local ISP corruption and bribery to simple laziness and incompetence.
From the top down, governments merely need to enforce the rules that are already in play. I guarantee if you disconnect large regions of India where many of these sorts of problems originate, the people there will convince their local officials to take appropriate action - and if that doesn't work, we don't need them on the internet anyway.
Same goes for any regional ISPs in the US, or Canada, or anywhere else in the world.
We have rules, let's try following them before we decide on mechanisms like CloudFlare or other centralized controls.
Re: Cloudflare Email Service: private beta
#517Earlier quoted context omitted.
More like Amazon SES than Sendgrid.
Those two are pretty equivalent in my mind, though I've only done trivial things with them. What's the diff?
sendgrid has an email marketing platform with list and audience management tools, in addition to just the ability to send emails. think mailchimp.
Re: Cloudflare Email Service: private beta
#518Very strong move, by one of the few fair comanies that can pull this off
Re: Cloudflare Email Service: private beta
#519Earlier quoted context omitted.
I run my own email server and you couldn't pay me to use a commercial provider like Google instead. The privacy benefits are huge and there is no one to restrict my storage or change my "terms and conditions" overnight. The days of people running their own servers are gone because of the shortsightedness and laziness of IT managers. They though the "cloud" would be easier and cheaper, and they are now trapped.
Can you share what your antispam strategy is? I have arrived at the opinion that what I would do if I moved to selfhost would just be to pay some trivial amount for outbound email via a provider like sendgrid as someone else in these comments has also mentioned. Since I send out maybe a half dozen emails a month I don't think this would be a big deal. But when I relied on selfhosted email several years ago, I was alw…
Reverse DNS check and rspam check at connection phase (no spam folder and false positive gets an email from their MTA)
Re: Cloudflare Email Service: private beta
#520Earlier quoted context omitted.
> The days of people running and maintaining their own are pretty much long gone This is very much a myth. There's a lot of FUD around how mail is "hard", but it's much less complicated than, say, running and maintaining a k8s cluster (professionally, I'm responsible for both at my org, so I can make this comparison with some authority). Honestly `apt install postfix dovecot` gets you 90% of the way there. Getting sp…
> There's a lot of FUD around how mail is "hard", but it's much less complicated than, say, running and maintaining a k8s cluster The main difference is that you're fully in control of the k8s cluster, but no matter what you do, you don't have control over the email infrastructure, because deliverability depends on the receiver. On every receiver you send to. People say "I don't have deliverability problems!" but how…
Meh, one could also complain they don't have control over backbone networks, transit, peering agreements, and intermediary routing therefore hosting a service on k8s is futile without using a managed provider / PaaS.
> People say "I don't have deliverability problems!" but how do you know?
Because people reply to my emails.. because I email documents to family/friends/landlord/etc and they receive it as expected..
> Most places don't tell you they rejected your email.
Of course they do, this is what DMARC is for.