5 ms·
Is the problem that the stressor services don't have robust KYC?
by robertlagrant 2y ago
Is the problem that the stressor services don't have robust KYC?
- jsheard 2y agoLegit load testing services like loader.io require you to prove you own the site you are targeting, yes. "Stressers" let you point their orbital laser at whatever you want, they might say it's only meant for use against your own servers but that's just an ass-covering pretense.
- robertlagrant 2y agoSure. But that's what I'm asking. Why blame Cloudflare rather than the companies themselves?
- jsheard 2y agoDDoS providers and other for-profit miscreants are incentivized to DDoS each other into oblivion, and Cloudflare is the only one of the giant mitigation providers who are willing to protect them from their competition. There are bulletproof alternatives like DDoSGuard but their network is absolutely nowhere near as expansive as CFs is, nor is it free to use, nor do they have enough legit customers to rule out blocking their entire ASN in a corporate filewall to stop phishing attacks. CFs share of the blame is for making bad actors lives much easier than it should be.
- Dylan16807 2y agoI feel like the portion of blame for stopping criminals from attacking each other is pretty low.
- duskwuff 2y agoThat would imply that those services have legitimate use cases. Most of them don't, and they're well aware of it.