4 ms·
Ok. I might have misworded my answer, but assuming that cloudflare has to do more about this, what would it be?
by valand 2y ago
Ok. I might have misworded my answer, but assuming that cloudflare has to do more about this, what would it be?
- rocqua 2y ago(not who you are responding too). Either discontinue the service, or serve each pipe from a subdomain that encodes the original source. Something that lets security tooling block known bad sites, without having them block a lot of legitimate sites.
- fch42 2y agoThey should act (on malware et al.) when people report it, https://www.cloudflare.com/en-gb/trust-hub/reporting-abuse/ https://www.cloudflare.com/en-gb/trust-hub/reporting-abuse/ That said, they're also using the "utility argument" - just as your phone provider won't screen you at every call you make, your electricity provider won't lock your supply until you authenticate use for non-nefarious purposes , your ISP won't content-filter, Cloudflare also says they won't police per-use other than when under explicit legal mandate (court injunctions). That's fair enough, at least to me.
- psd1 2y agoSure, but in this instance, they're offering an anonymous service. Just require a sign-up and a captcha, like you do for all of your other products, FFS. Are they on drugs? Do they want more botnets, to drive DoS mitigation sales?