Live data from Hacker News

Issues with Cloudflare Images

blog.klungo.no

71–80 of 152 posts

Re: Issues with Cloudflare Images

#71

Earlier quoted context omitted.

Thank you. If there's any other feedback you could take from this, please know that I've submitted a similar feature request for point #6, so that I could know the ID of the image from the direct creator upload. Without that, a malicious user of mine could possibly create many millions of images, and I would have no way of knowing who it was that created the image, and no way of knowing which images to delete or trac…

I think Images could greatly benefit from having a tag/label system that allows you to decorate it, similar to how enterprise cache tags was implemented. That way, it is trivial to do things like "delete by user id X" as well as covering your use case.

yes, cloudinary has this feature. you can create X amount of name value pairs on the assets. its in the ui but also in the api - https://cloudinary.com/documentation/image_upload_api_refere...

Re: Issues with Cloudflare Images

#72
Off topic, but I couldn't read this because the blog is in dark mode and doesn't offer a light mode. For a lot of people with astigmatism, dark mode is simply unusable for text heavy sites.

There are objective reasons why dark mode is worse than light mode, but I think anyone should be able to pick whatever mode they prefer.

See this for more info:

https://levelup.gitconnected.com/why-dark-mode-causes-more-a...

I have no data to back this up, but I suspect the main reason dark mode is so popular these days it's because there are a lot of users using devices in poor light conditions. The second big reason is probably more cultural, as dark mode looks more modern, unlike these damn boomer UIs from the 90s (sarcasm).

Some people argue about energy efficiency and OLED, which is true, but that seems like a niche use case to force dark mode on all your users.

Re: Issues with Cloudflare Images

#73

I thought Cloudflare was going to win the image hosting/serving/resizing game based on their original blog post, but that doesn't seem to be the case. I kept getting frustrated with the complexity and changing costs of solutions out there, so about a year ago I launched https://www.simplefileupload.com . It's a super easy, flat rate cost solution to quickly allow users to upload images and files. It provides a custom…

THANK YOU!been looking for a upload img simple api to use for my new app im building.

Re: Issues with Cloudflare Images

#74
post #72

Off topic, but I couldn't read this because the blog is in dark mode and doesn't offer a light mode. For a lot of people with astigmatism, dark mode is simply unusable for text heavy sites. There are objective reasons why dark mode is worse than light mode, but I think anyone should be able to pick whatever mode they prefer. See this for more info: https://levelup.gitconnected.com/why-dark-mode-causes-more-a... I hav…

Just activate reader mode.

Re: Issues with Cloudflare Images

#75
post #72

Off topic, but I couldn't read this because the blog is in dark mode and doesn't offer a light mode. For a lot of people with astigmatism, dark mode is simply unusable for text heavy sites. There are objective reasons why dark mode is worse than light mode, but I think anyone should be able to pick whatever mode they prefer. See this for more info: https://levelup.gitconnected.com/why-dark-mode-causes-more-a... I hav…

> dark mode looks more modern, unlike these damn boomer UIs from the 90s (sarcasm).

At least for me dark mode brings back all the feelings of the 80s text UI, which was predominantly white/gray on black or perhaps white/yellow on dark blue - and quite readable. (I also recall that in some domains MDA monochrome monitors with green or orange on black were popular).

Re: Issues with Cloudflare Images

#76
post #72

Off topic, but I couldn't read this because the blog is in dark mode and doesn't offer a light mode. For a lot of people with astigmatism, dark mode is simply unusable for text heavy sites. There are objective reasons why dark mode is worse than light mode, but I think anyone should be able to pick whatever mode they prefer. See this for more info: https://levelup.gitconnected.com/why-dark-mode-causes-more-a... I hav…

Just activate reader mode.

Sure, but I shouldn't need to do that.

Re: Issues with Cloudflare Images

#77

I love Cloudflare, but these Image products are a black mark on their reputation. Every point the author says is 100% correct. I'll add one more point, which ended up making it a total non-starter: you can't import lots of images because their rate limits are so pernicious. If you have tens of thousands or millions of images, keeping within their single digit per second rate limit, which appears to be totally non-neg…

Why do you want to import them – why not just fetch them from origin based on demand?

I can't stand Cloudflare, the only cause of downtime we've in the last 5 years...we've switched to Microsoft Front door

Re: Issues with Cloudflare Images

#78
post #46

Earlier quoted context omitted.

> You should never allow dynamic image resizing since it is commonly used in various attacks. Can you say or link to more? I'm not following this. Like... attacks... on Cloudflare?

Resizing an image is computationally intensive (at least compared to the average HTTP request). You can sidestep that by using caching: resize once, then serve the cached version from then on. Dynamic resizing opens you up to a DDOS attack, essentially: someone would request the image at 1x1, and 1x2, and 1x3... you get the idea. But yeah, if there was anyone able to mitigate that risk via other means you'd think it…

[deleted]

Re: Issues with Cloudflare Images

#79

I love Cloudflare, but these Image products are a black mark on their reputation. Every point the author says is 100% correct. I'll add one more point, which ended up making it a total non-starter: you can't import lots of images because their rate limits are so pernicious. If you have tens of thousands or millions of images, keeping within their single digit per second rate limit, which appears to be totally non-neg…

Why do you want to import them – why not just fetch them from origin based on demand?

Kind of negates the "Image store" feature of Cloudflare Images ...

Re: Issues with Cloudflare Images

#80

Earlier quoted context omitted.

> You should never allow dynamic image resizing since it is commonly used in various attacks. Can you say or link to more? I'm not following this. Like... attacks... on Cloudflare?

I worked with sites that had performance issues because of attacks against dynamic image scaling in Cloudflare (scaling probably done with workers). Services like Cloudflare does not in general protect against service design issues. I try to explain that to people all the time. I also worked with another provider where a monthly bill got 5 times higher one month because images were requested at many different large s…

Huh. I don't understand how this would effect a site using Cloudflare Images. It seems like maybe a DDOS against Cloudflare itself, but I don't see how it would be a problem for your site. But you say it was, so.

But okay, thanks for providing more context. I have not used Cloudflare Images at all, so I don't really know, just trying to make sense of it.

Post reply on HN