4 ms·

Notes; 1. Serving from github still shares the tracking information. It can be argued that github is better than cloudflare/facebook, however bear in mind gith

Notes; 1. Serving from github still shares the tracking information. It can be argued that github is better than cloudflare/facebook, however bear in mind github has politically motivated staff. Long cache is a great idea. Alternatively cut out unnecessary js. 2. Nice idea, it does hamper the ease of use of your blog though - I would never click to view, though I did read some that were visible when I finished the article. 3. Do you find the information from this useful? In a way that isn't trivially parsable from server logs? I ask because we are reviewing the quality of our user analytics, and our ga seems rather pointless atm.

d2p 10y ago
1. Good point; I'm not really sure where I was going with this now; GitHub and another CDN are basically the same. I must've been distracted while replying! 2. Yeah, it's not ideal. In this case, it looks like Disqus are gonna fix stuff though (they've commented on my post; there's a link right at the top of the article now). 3. I don't have access to the server logs as I'm running on GitHub Pages, so something like Analytics is all I have. I do find it useful (given no server logs), it's nice to see the traffic to my blog; there's no point posting if nobody is reading! :-)
- Normal_gaussian 10y ago
  2. That's pretty good! 3. That is very interesting, now knowing your stack (pages + disqus + adverts) I see one side of the 'problem' is that bloggers don't have much choice in terms of revenue, so the infrastructure charges with user data . The other side is likely the complexity, incompatibility, and time wasting of home rolled solutions. The really nice part of a CDN deployed blog is handling the traffic spikes though.
StavrosK 10y ago
What's wrong with Cloudflare?
- j_s 10y ago
  Depends on the definition of wrong! CloudFlare is a bit of an HN darling thanks to their employees' active contributions and submitting every technical post on their blog. Free distributed DNS and potential DDoS protection is also a tempting offer. To privacy-conscious users: CloudFlare is the man-in-the-middle for more and more of the Internet, potentially tracking at Google-like levels. CloudFlare may: ... Add script to your pages to, for example, add services, Apps, or perform additional performance tracking. (Unfortunately this is opt-out rather than opt-in.) https://www.cloudflare.com/terms https://www.cloudflare.com/terms To Tor users: CloudFlare implements a captcha to protect servers from malicious traffic; the implementation has caused tremendous annoyance in the past and the company may have been slow to address this problem. https://news.ycombinator.com/item?id=7977780 https://news.ycombinator.com/item?id=7977780 (example complaint, 3 years ago) https://news.ycombinator.com/item?id=11388560 https://news.ycombinator.com/item?id=11388560 (9 months ago, from cloudflare) https://news.ycombinator.com/item?id=11404770 https://news.ycombinator.com/item?id=11404770 (the tor project response) https://news.ycombinator.com/item?id=12122268 https://news.ycombinator.com/item?id=12122268 (6 months ago, additional discussion of tor vs. captcha) To DDoS victims: CloudFlare protects several DDoS vendors while gaining business protecting DDoS victims, citing free speech. https://krebsonsecurity.com/2016/10/spreading-the-ddos-disease-and-selling-the-cure/ https://krebsonsecurity.com/2016/10/spreading-the-ddos-disea... https://news.ycombinator.com/item?id=7242377 https://news.ycombinator.com/item?id=7242377 To CloudFlare customers: CloudFlare has a "target on its back" and has faltered against DDoS in the past, causing outages for all of its customers. AFAIK: It's been a while. To CloudFlare freeloaders like me: CloudFlare doesn't have much incenctive to protect its free-tier users from DDoS. Related: Akami stopped helping DDoS'd pro-bono client Brian Krebs. https://news.ycombinator.com/item?id=12561928 https://news.ycombinator.com/item?id=12561928
  - StavrosK 10y ago
    Ah, thank you for the detailed reply. I started using CF more extensively yesterday, due to their free CDN (which is working great), but I agree that their MITMing the internet is worrisome. Maybe I should switch to MaxMind, if it's cheaper than CloudFront.

d2p 10y ago

1. Good point; I'm not really sure where I was going with this now; GitHub and another CDN are basically the same. I must've been distracted while replying! 2. Yeah, it's not ideal. In this case, it looks like Disqus are gonna fix stuff though (they've commented on my post; there's a link right at the top of the article now). 3. I don't have access to the server logs as I'm running on GitHub Pages, so something like Analytics is all I have. I do find it useful (given no server logs), it's nice to see the traffic to my blog; there's no point posting if nobody is reading! :-)

Normal_gaussian 10y ago
2. That's pretty good! 3. That is very interesting, now knowing your stack (pages + disqus + adverts) I see one side of the 'problem' is that bloggers don't have much choice in terms of revenue, so the infrastructure charges with user data . The other side is likely the complexity, incompatibility, and time wasting of home rolled solutions. The really nice part of a CDN deployed blog is handling the traffic spikes though.

StavrosK 10y ago

What's wrong with Cloudflare?

j_s 10y ago
Depends on the definition of wrong! CloudFlare is a bit of an HN darling thanks to their employees' active contributions and submitting every technical post on their blog. Free distributed DNS and potential DDoS protection is also a tempting offer. To privacy-conscious users: CloudFlare is the man-in-the-middle for more and more of the Internet, potentially tracking at Google-like levels. CloudFlare may: ... Add script to your pages to, for example, add services, Apps, or perform additional performance tracking. (Unfortunately this is opt-out rather than opt-in.) https://www.cloudflare.com/terms https://www.cloudflare.com/terms To Tor users: CloudFlare implements a captcha to protect servers from malicious traffic; the implementation has caused tremendous annoyance in the past and the company may have been slow to address this problem. https://news.ycombinator.com/item?id=7977780 https://news.ycombinator.com/item?id=7977780 (example complaint, 3 years ago) https://news.ycombinator.com/item?id=11388560 https://news.ycombinator.com/item?id=11388560 (9 months ago, from cloudflare) https://news.ycombinator.com/item?id=11404770 https://news.ycombinator.com/item?id=11404770 (the tor project response) https://news.ycombinator.com/item?id=12122268 https://news.ycombinator.com/item?id=12122268 (6 months ago, additional discussion of tor vs. captcha) To DDoS victims: CloudFlare protects several DDoS vendors while gaining business protecting DDoS victims, citing free speech. https://krebsonsecurity.com/2016/10/spreading-the-ddos-disease-and-selling-the-cure/ https://krebsonsecurity.com/2016/10/spreading-the-ddos-disea... https://news.ycombinator.com/item?id=7242377 https://news.ycombinator.com/item?id=7242377 To CloudFlare customers: CloudFlare has a "target on its back" and has faltered against DDoS in the past, causing outages for all of its customers. AFAIK: It's been a while. To CloudFlare freeloaders like me: CloudFlare doesn't have much incenctive to protect its free-tier users from DDoS. Related: Akami stopped helping DDoS'd pro-bono client Brian Krebs. https://news.ycombinator.com/item?id=12561928 https://news.ycombinator.com/item?id=12561928
- StavrosK 10y ago
  Ah, thank you for the detailed reply. I started using CF more extensively yesterday, due to their free CDN (which is working great), but I agree that their MITMing the internet is worrisome. Maybe I should switch to MaxMind, if it's cheaper than CloudFront.