5 ms·

A single failure point is not what worries me. They are competent enough to avoid that. When you get your hands on a significant portion of world's traffic, yo

A single failure point is not what worries me. They are competent enough to avoid that. When you get your hands on a significant portion of world's traffic, you start feeling a temptation to pivot to a data company, like Google of FB. That's the danger I hope they will avoid as well.

wraptile 6y ago
> A single failure point is not what worries me. They are competent enough to avoid that. I remember when they offered text obfuscation protection service (i.e. hiding emails unless you click on them). It was literally ceasar cypher encoded text with the N argument right there next to it. I'm sure they are much beyond that now but I find your blind trust and assumption rather hilarious.
- ComodoHacker 6y ago
  My trust isn't blind, it's based on their solid track record in availability and network ops, while your example is about something different (text obfuscation). Anyway, I wasn't aware about that case, do you have a link to learn more?
  - wraptile 6y ago
    Stackoverflow answer of how to solve it: https://stackoverflow.com/questions/36911296/scraping-of-protected-email/36913154#36913154 https://stackoverflow.com/questions/36911296/scraping-of-pro... official docs: https://support.cloudflare.com/hc/en-us/articles/200170016-What-is-Email-Address-Obfuscation- https://support.cloudflare.com/hc/en-us/articles/200170016-W...
    - ComodoHacker 6y ago
      Thanks. Assuming keys vary [pseudo-]randomly, even the Caesar cipher is a viable protection in this particular case (mass e-mail harvesting).
      - wraptile 6y ago
        In this case you don't even need to know N, you can just cycle through it until single @ character is in the text and you have the email decoded! The only thing email harvester would need is awareness of this and few lines of code. The field even clearly identifies itself! Source: I wrote a generic web-scraper for these emails several years ago :D
lima 6y ago
> A single failure point is not what worries me. They are competent enough to avoid that. Like recently, when a single BGP configuration mistake brought down their entire backbone?

wraptile 6y ago

> A single failure point is not what worries me. They are competent enough to avoid that. I remember when they offered text obfuscation protection service (i.e. hiding emails unless you click on them). It was literally ceasar cypher encoded text with the N argument right there next to it. I'm sure they are much beyond that now but I find your blind trust and assumption rather hilarious.

ComodoHacker 6y ago
My trust isn't blind, it's based on their solid track record in availability and network ops, while your example is about something different (text obfuscation). Anyway, I wasn't aware about that case, do you have a link to learn more?
- wraptile 6y ago
  Stackoverflow answer of how to solve it: https://stackoverflow.com/questions/36911296/scraping-of-protected-email/36913154#36913154 https://stackoverflow.com/questions/36911296/scraping-of-pro... official docs: https://support.cloudflare.com/hc/en-us/articles/200170016-What-is-Email-Address-Obfuscation- https://support.cloudflare.com/hc/en-us/articles/200170016-W...
  - ComodoHacker 6y ago
    Thanks. Assuming keys vary [pseudo-]randomly, even the Caesar cipher is a viable protection in this particular case (mass e-mail harvesting).
    - wraptile 6y ago
      In this case you don't even need to know N, you can just cycle through it until single @ character is in the text and you have the email decoded! The only thing email harvester would need is awareness of this and few lines of code. The field even clearly identifies itself! Source: I wrote a generic web-scraper for these emails several years ago :D

lima 6y ago

> A single failure point is not what worries me. They are competent enough to avoid that. Like recently, when a single BGP configuration mistake brought down their entire backbone?