5 ms·
Cloudflare just isn't worth the tradeoffs: the risks associated with their centralization, how they made Tor basically unusable on non-onion sites, the lack of
by dmix 4y ago
Cloudflare just isn't worth the tradeoffs: the risks associated with their centralization, how they made Tor basically unusable on non-onion sites, the lack of transparency when content-moderating the internet, etc.
The space is in need of solid competitors to break the stranglehold they have on the internet. Whether it's the right combination of services, documentation, etc.
- andrewnyr 4y agothere are many solid competitors: Amazon, Fastly, Akamai, Imperva to name a few
- wahnfrieden 4y agoBunny
- hoppla 4y agoThere is an easy way to get the banhammer from Amazon, and it is possible host a JavaScript page that triggers it for any visiting user. I did tell Amazon about it, but it fell for deaf ears. The ban lasts for about a week and the internet is mostly unusable in that period
- WirelessGigabit 4y agoFuck Akamai. Have you worked with them? They are the most archaic internet company you can think of. Their UI is stuck in 2000. Just like their procedures.
- thaumaturgy 4y agoTor made Tor unusable on non-onion sites. I feed a netfilters table with the list of exit node IPs that Tor publishes (https://check.torproject.org/torbulkexitlist https://check.torproject.org/torbulkexitlist) as a standard part of server deployment, and it's the single most effective way to reduce form and login abuse on hosted sites. I like the idea of Tor, but there's no denying that it's a huge source of nuisances.
- shaky-carrousel 4y agoI live in a country with censored internet. What you are doing is harmful. I can only hope whatever you provide is irrelevant enough.
- thaumaturgy 4y agoI'm sorry. I have a colleague based out of Venezuela. We've had to work together to get tunnels and vpns configured so that he can get uncensored and secure internet access. But Tor is an enormous source of abusive traffic and if I don't filter it, then that's harmful to site owners. I'm being forced to choose between the needs of people that I know, work with, and depend on financially, and the needs of people in countries with issues that are far outside my ability to resolve. It's not a hard decision.
- justsomehnguy 4y ago> It's not a hard decision. Depends on what you imply under 'hard'. As a IaaS provider I endured alk the hurdles about that and ten years later - I don't care, at least not until my outbound bill is bigger than usual. Like some of the clients are on CentOS6, on a public facing machines.
- Zak 4y agoThere are probably more sophisticated options that would solve your problems than simply blocking it.
- judge2020 4y agoSuch as?
- cowtools 4y agoThe answer depends on the type of service you host. I don't know what you need to do, but I do know that filtering IP space is merely security-by-obscurity, it is a cheap and broken solution to the hard problems of sybil resistance. If you need IP filtering to operate on a day-to-day basis, then the security of your service is fundamentally broken. Tor users do not have any special properties over clear-net users besides low accountability for their IP space. There are other ways to acquire this type of setup that don't involve broadcasting a public list of known exit nodes as an act of good faith. Any sophisticated attacker will be able to easily get ahold of the IP space and bandwidth they need to do their work, whether it's through a botnet or simply because they operate out of some less-accountable country like China or Russia. IP filtering: now you have two problems!
- matheusmoreira 4y ago> how they made Tor basically unusable on non-onion sites I wonder if that's such a bad thing. Tor is safer when the traffic never leaves the network. In the ideal world, everything that matters would be inside the Tor network instead of being merely accessible through it.