5 ms·
Cloudflare should have an emergency hotline for situations like this. Charge half the ransom to handle the traffic for the duration of the attack. Offer contrac
by ymse 11y ago
Cloudflare should have an emergency hotline for situations like this. Charge half the ransom to handle the traffic for the duration of the attack. Offer contract afterwards.
- dangrossman 11y agoCloudflare's $200/month business plan includes DDoS mitigation. It's self-serve and there's an "I'm Under Attack!" button in every account. There's no extra cost for the bandwidth.
- ymse 11y agoSo $6000 would get them over two years of self-service DDoS mitigation. Ouch.
- Kimm0n0 11y agoIf you are in the privacy business, a man-in-the-middle like CloudFlare, is not the thing you try first.
- vemv 11y agoReally? Do men-in-the-middle matter if your communications are encrypted (be it HTTPS, PGP)?
- dangrossman 11y agoIn this case yes, because users don't get an encrypted channel with the site's servers, only with Cloudflare. Cloudflare isn't acting as a dumb TCP proxy which would allow that. When it hosts an HTTPS website, it does so by terminating the HTTPS connections itself. Cloudflare has the private key, and can see the content of every request/response. That's necessary to compress images, inject scripts, minify code and do all the other optimization/CDN stuff they do -- but it also means making them an MITM between a site and its users.
- billmalarky 11y agoNo, profiting in any way off blackmailers looks really bad... Reminds me of when Uber had that surge pricing scandal during the Sydney hostage crisis.
- SolarNet 11y agoI think the OP meant it as a discount. (E.g. if cloudflare blocking the attack would cost 10k (for 5 sites) for a month, offer a discount at half the ransom (3k) for however long the attack lasts days).
- billmalarky 11y agoStill too risky from a PR standpoint. It's the kind of corporate activity that means well (truly) but can be interpreted negatively too easily. Unfortunately the only safe play is to give away the service for free (for duration of the attack). Which could be a solid marketing strategy, cloudflare's price point is reasonable enough that many would stick with their service even after the attack was over.
- Cameron_D 11y agoCloudflare don't proxy mail though, which is ProtonMail's main business, so that wouldn't have done much for keeping their services up. Additionally, I don't see ProtonMail as the kind of company that'll let other third parties terminate their SSL connections/proxy all their traffic.
- cbg0 11y agoThey have BGP origin protection, where they announce your IP space for enterprise plan, probably expensive though.
- rdl 11y agoWe (CloudFlare) do. We have done onboardings in real time with people under attacks. We do full length contracts because that works better for customers, though. We don't proxy smtp. There are solutions to deal with that in a hybrid way, though.
- rasz_pl 11y agoWasnt Cloudflare founded by ex fed or something? Hosting isis chat rooms that somehow are not being taken down by US fed is also slightly suspicious.
- vabmit 11y agoCloudFlare was the first company ProtonMail called (with in 5 minutes of the DDoS starting). Unfortunately, they couldn't help ProtonMail. But, thanks to @rdl for responding to a txt on his cell phone at an inopportune time and mobilizing CloudFlare's sales and engineering teams to talk with Proton (during the company's retreat no less)! For all the people getting nasty and arm chair quarter backing this on little to no information or trying to claim credit for things they did not do- understand that once you start working in venture funded startups pretty much everyone knows each other and many people have worked together before.