vnkr

7 ms·

1.
by vnkr 2y ago
That looks like a lot of work.
2.
The problem with using shared secrets for CI/CD services(goteleport.com)
3 points by vnkr 4y ago|0 comments
3.
by vnkr 4y ago
Cloudflare is a tool. Website owners use this tool to solve the challenges they face. You are shouting at a wrench.
4.
by vnkr 4y ago
Depending on the mode you choose there can be an interactive element
5.
by vnkr 4y ago
Not on purpose. https://www.cloudflarestatus.com/incidents/jgv6r0czdddt
6.
July 2022 Web Server Survey(news.netcraft.com)
2 points by vnkr 4y ago|0 comments
7.
by vnkr 4y ago
Cloudflare does not protect that website. It’s not behind Cloudflare.
8.
by vnkr 4y ago
https://news.ycombinator.com/item?id=32015971
9.
by vnkr 4y ago
Correct. And also customer needs, UI technologies, the way people use apps and services change. So it's all right for apps to change as well.
10.
by vnkr 4y ago
If you don't want your software to change, don't update it. The way Thunderbird looks and the messages list is a large part of it is horrendous and is a deal breaker for me, for example.
11.
by vnkr 4y ago
Yes, but FF on iOS sucks precisely for the reason stated in the article.
12.
by vnkr 4y ago
I don't use FF on desktop partly because I don't use it on mobile and so can't sync open tabs, bookmarks, etc.
13.
by vnkr 4y ago
Cloudflare's status page is one of the very few services of Cloudflare that are hosted elsewhere precisely for the reason it needs to be available if something isn't working.
14.
by vnkr 4y ago
That's what is suggested in the blogpost as one of future prevention plans.
15.
by vnkr 4y ago
It's very difficult if not impossible to create a staging environment that would well enough replicate production at this scale. What bog posts suggest as a remediation in the process: "There are several opportunities in our autom
16.
by vnkr 4y ago
The isolation itself happens by way of prepending the URL in the original link with a Remote Browser endpoint. In order to do that Area 1 has to either be your MX or integrated with your email provider via API AFAIK
17.
Browser isolation for email links to stop modern phishing threats(blog.cloudflare.com)
3 points by vnkr 4y ago|2 comments
18.
by vnkr 4y ago
You don’t, even the free plan has 3 included. HTML can often be server rendered dynamic and is unsafe to cache by default.
19.
by vnkr 4y ago
By “this” do you mean the fact that “we do not block or challenge Firefox by default”?
20.
by vnkr 4y ago
Customers can create firewall rules to challenge requests using any type of request metadata. User agent is one of the filters, that can be used in manual Firewall fields.