6 ms·

You block this guy from the internet for a week —- for no apparent reason —- and then you come in here with a nitpick about how another related system works? R

• judge2020 4y ago
  The point is that Cloudflare does not beam IP reputation data to Google. If Google and CF are blocking this IP separately, what's the chance there's some malicious device or hacked IoT device on the network, participating in DDOS attacks or unauthorized vulnerability scanning of random websites?
  • zinekeller 4y ago
    Yeah, if for example Spamhaus (which both Cloudflare and Google consult) has detected that a subnet is bad then that could be the cause. Still, it doesn't excuse Cloudflare that there's no redress if you are caught on a block or even a clue on what you can do to reduce it (especially that Spamhaus do have redress procedures).
  • cvwright 4y ago
    Fair point
  • pessimizer 4y ago
    According to another comment, it's a wrong point: https://blog.cloudflare.com/cleaning-up-bad-bots/ https://blog.cloudflare.com/cleaning-up-bad-bots/ > Once enabled, when we detect a bad bot, we will do three things: (1) we’re going to disincentivize the bot maker economically by tarpitting them, including requiring them to solve a computationally intensive challenge that will require more of their bot’s CPU; (2) for Bandwidth Alliance partners, we’re going to hand the IP of the bot to the partner and get the bot kicked offline; and (3) we’re going to plant trees to make up for the bot’s carbon cost.
    • jgrahamc 4y ago
      Yeah. I'm looking into that.
    • judge2020 4y ago
      I'm pretty sure this was for a situation like Digitalocean themselves hosting a bot, but such IP sharing very well might be currently (ab)used by partners, if it's happening here.
• noasaservice 4y ago
  • tshtf 4y ago
    • acdha 4y ago
      It makes a very broad claim which makes it sound like an extortion racket but doesn't have anything to back it up. I would bet that if it included some evidence it would fare much better. For example, they have a ton of large organizations which are customers. The very first question the average reader is going to have is whether it's really the case that these sites are predominantly attacked by booter services which use Cloudflare for hosting? That seems unlikely and as general rule here the broader the claim the more people are going to expect you to show that you did your homework first.
      • deleted 4y ago
        [deleted]
      • gusgus01 4y ago
        The claim was discussed in this post: https://news.ycombinator.com/item?id=32709329 https://news.ycombinator.com/item?id=32709329 Basically DDOS booters use Cloudflare to protect their websites from competitors, since Cloudflare is one of the best. The same people Cloudflare is protecting (and claims to do so on an ethical neutrality basis) is furthering the need for Cloudflare to exist.
        • acdha 4y ago
          Note that I’m not saying whether or not this is true, only that a comment which links to something like that will generally fare better than one which begs the question.
        • deleted 4y ago
          [deleted]
• stefan_ 4y ago
  A wrong nitpick, even! Way to look like the asshole.