elithrar

6 ms·

1.
EmDash – A spiritual successor to WordPress that solves plugin security(blog.cloudflare.com)
703 points by elithrar 6mo ago|504 comments
2.
by elithrar 1y ago
IPs as identifiers aren’t great: in a world of both CGNAT (more shared IPs) and a ton of sketchy residential proxies, they’ve become poor proxies for identity of a “thing”.
3.
by elithrar 2y ago
There's ~four of us trying to reproduce this right now, using Astro and Remix, and cannot at all. An important note: React-based frameworks tend to use camelCase attributes vs. hyphen-case (which is the output) in components: including
4.
by elithrar 2y ago
Can you share the ticket ID here and/or email me the details? silverlock@cloudflare
5.
by elithrar 2y ago
This should not be the normal experience. Want to drop me an email - silverlock@cloudflare - and I will have the team look into it ASAP. (I lead our storage & DB product teams here at CF)
6.
by elithrar 2y ago
> The fact that D1 still doesn't support replication is an indication to me that it has been deprioritized, likely with other newer and less used products, while the infrastructure updates are dealt with. D1 is definitely not depr
7.
by elithrar 2y ago
> What a nightmare! Now your application code spills into your database and our initial goal of simplifying application development is nothing but a long-forgotten dream. All of that for what? To save a few milliseconds to display a web
8.
by elithrar 2y ago
(I work at CF) The dashboard team had a bug that caused too-large cookies to be returned to some users. They’ve rolled out a fix but you can also clear cookies to remedy.
9.
by elithrar 2y ago
Unrelated - that’s a planned infra maintenance event.
10.
by elithrar 3y ago
Our public postmortem on the incident: https://blog.cloudflare.com/cloudflare-incident-on-october-3...
11.
by elithrar 3y ago
See my comment here: https://news.ycombinator.com/item?id=38075877 (We’ll share more when we can)
12.
by elithrar 3y ago
This should be resolved. We’re still investigating the underlying root cause, and intend to share a write-up once we have that in hand. This is not the way we wanted anyone to start their week. (I am the PM lead for Cloudflare Workers: Data
13.
by elithrar 3y ago
Not related. (I am the PM lead for Workers databases & storage)
14.
by elithrar 3y ago
> due to the writers literally having disdain for the actual source material and we're just using the how's setting as a backdrop to push their own entirely disconnected stories. Is this concretely true, or just disinformation
15.
by elithrar 3y ago
(I lead DO & databases product here at Cloudflare) Thanks for the kind words! Durable Objects also underpins a tremendous amount of what we build internally as well — it’s fundamentally a very powerful “coordination API”. FYI: We’re con
16.
by elithrar 3y ago
> do you think you will have any API driven access to the data held in these services? IE, I don't per se want to have to use a worker to arbitrage between the Cloudflare platform and HTTP access to the data within Cloudflare system
17.
by elithrar 3y ago
Correct. DuckDB is really interesting technology, but it's not a direct successor to SQLite for transactional workloads. It's also very new: there's a LOT of new code in DuckDB on top of the (heavily fuzzed) SQLite parts. (I
18.
by elithrar 3y ago
Fixing this. We ran a few benchmarks (and some were much faster than 37x), but this was a more typical case. Not our goal to inflate numbers.
19.
by elithrar 4y ago
> The problem with MQTT is that most of the use cases I’m interested in involve a web browser as at least one party of the connection, and the browser doesn’t support MQTT. I could wrap MQTT in a WebSocket, but then I’d lose the advantag
20.
by elithrar 4y ago
I would strongly recommend against using IP ACLs to "... verify the source IP of the request to prevent acknowledging webhooks from unknown and potentially malicious servers." You should validate that the request is signed correct
21.
by elithrar 4y ago
That’s not the case — note that we don’t say “trusted network” in the blog. That’s definitely not the right solution. There’s two key parts: 1) we can filter and secure traffic _leaving_ the device, whether bound for the Internet or interna
22.
by elithrar 4y ago
From the blog: > ... we know that data locality is important for a good deal of compliance use cases. Jurisdictional restrictions will allow developers to set a jurisdiction like the ‘EU’ that would prevent data from leaving the jurisdic
23.
Cloudflare’s Zero Egress Fee Object Storage, R2, Is Now GA(blog.cloudflare.com)
129 points by elithrar 4y ago|33 comments
24.
by elithrar 4y ago
> In my case, despite living near Detroit and CF's datacenter there, I'm routed through Chicago, adding 40ms to any roundtrip time. This shouldn’t be the case: want to email me (silverlock at cloudflare) the output of https:&#
25.
by elithrar 4y ago
It should work directly against R2 - our S3 compatible object storage) w/ no egress fees: https://developers.cloudflare.com/r2/ Makes experimenting with things like this much cheaper. (I work for CF)
26.
Broadest US Pirate Site Injunction Rewritten/Tamed by Cloudflare(torrentfreak.com)
4 points by elithrar 4y ago|0 comments
27.
by elithrar 4y ago
The $20/mo Pro plan includes formal support (one of the big perks of Pro!)
28.
by elithrar 4y ago
Just replied. Ultimately it looks like the existing DS records for your domain weren't removed (and you can see that in your DNSViz output). Still have some questions for "how" it was working beforehand (see the email for tho
29.
by elithrar 4y ago
(It sucks that I had to see this on HN) Can you email me - silverlock at cloudflare - with your ticket ID and domain name so I can understand what broke?
30.
by elithrar 4y ago
The F-Secure folks also have https://github.com/F-Secure/mqtt_fuzz - although it doesn't support authenticated brokers as of yet.

More ›