3 ms·
And unfortunately, cloudflare is everywhere. This trend will make it even harder for projects like a new search engine to enter the game.
by rainingcatndogs 6y ago
And unfortunately, cloudflare is everywhere. This trend will make it even harder for projects like a new search engine to enter the game.
- raverbashing 6y agoBecause if you don't have it some a-hole will go and ddos your site or you want to prevent a hug-of-death because of reasons. It seems a lot of issues happen because bad players are continued to allowed to thrive, example: everybody uses a big provider because they're the only ones that solved the spam issue.
- Kaze404 6y agoI use Zoho.com and I rarely get spam, if ever.
- snazz 6y agoZoho isn't Google-size, but it isn't irrelevant, either. Sending mail from a self-hosted email server is far harder since the big providers might put it in spam or drop it even earlier.
- dzhiurgis 6y agoTo add to sibling - running your own mail server is the only way to ensure your email is not read by someone else which is so messed up.
- londons_explore 6y ago> running your own mail server is the only way to ensure your email is not read by someone else But any mail you send to someone else probably ends up read by Google/Microsoft anyway, since that's where their mailbox is. Also, email security is a joke. It's 2020, and even TLS encrypted SMTP connections tend not to check for a valid certificate, making them trivial to MITM.
- 55555 6y agoPractically speaking how does one MITM an SMTP connection? For example, from Google to Microsoft. They connect directly to the IP addresses they get from MX records + lookup. What's the actual threat vector/execution here?
- londons_explore 6y agoAnyone with hardware on the network path can do it... Or anyone who can inject BGP routes can do it too.
- pvorb 6y agoI use it as well and I get sooo much more spam than I git on Gmail.
- cblconfederate 6y agocloudflare can just allow a fair crawl rate instead of a captcha on first request
- beagle3 6y agoThe problem is that bad actors can masquerade as a lot of independent clients (The first D in DDoS stands for "distributed"). Figuring out whether a site is under a DDoS attack or getting legitimate requests from many sources is a very hard problem, and can just be worded "telling good actors from bad actors" -- no simple solution works; also, who YOU consider a good actor and who the website owner considers a good actor may be at odds. Most people (and CloudFlare by default) consider FAcebook a good actor; but as far as I'm concerned, Facebook is an evil an actor as one can be.
- cblconfederate 6y ago> sources is a very hard problem We're talking about virtually unknown blogs that get 1 http request from my server's IP, which is not blacklisted anywhere. It's not hard at all , i just think cloudflare's tech s not that good
- hombre_fatal 6y agoYou're really pulling a "how hard could it really be??" to DDoS prevention? You should at least be humbled by how few services can even offer DDoS protection that works against volumetric attacks and isn't just based on null-routing. The people with skin and money in the game might know something you don't.
- cblconfederate 6y agohere's how simple it is : if (!website.underDDoS && website.requestedTimesToday[ip] <10) showCaptcha=0;
- beagle3 6y ago