prdonahue

6 ms·

31.
by prdonahue 2y ago
You’re misunderstanding. LE went GA in April 2016 and Cloudflare is talking about ~2 years prior to that (where they used GlobalSign and Comodo, not LE).
32.
by prdonahue 2y ago
I do, feel free to DM on Twitter. Just pull an 18 kW system in a few months ago and it’s been great. (Full disclosure: I’m in the solar industry, but on the software side. Recently left Cloudflare to join Aurora Solar as CPO.)
33.
by prdonahue 2y ago
And some have pro-inflammatory properties.
34.
by prdonahue 3y ago
The problem is, like with financial advisors, it’s nearly impossible to reliably discern the good agents from the bad. And most are bad as the market is flooded with charlatans who market themselves relentlessly. If you disagree, what’s a
35.
by prdonahue 3y ago
If Delta's "AI" support they force you through (even as Diamond Medallion) before you can chat with a representative is an indication of their competency, this monitoring is doomed.
36.
by prdonahue 3y ago
I’m not sure they’d be doing this if Ford EVs were flying off the lot (they’re not).
37.
by prdonahue 3y ago
Curious why you are considering dropping the statin? Are you having side effects, e.g., muscle soreness, or is ezetimibe alone enough to push your ApoB below 60 mg/dL?
38.
by prdonahue 4y ago
Who cares if there’s a marketing component to it? P0’s efforts make the Internet more secure for everyone. ETA: They also need to draw attention sometimes to slow actors in addressing the fixes.
39.
by prdonahue 4y ago
Yes, especially as compliance and regulatory frameworks continue to evolve and become more difficult to adhere to as mentioned elsewhere in the comments. We're inherently faster than other "serverless" platforms due to the sc
40.
by prdonahue 4y ago
SpaceVenture from the ex-Sierra Space Quest developers took 10+ years on Kickstarter. Easier to slip deadlines when you don’t have a studio making external commitments.
41.
by prdonahue 4y ago
Do you have a support ticket # you can email me w/details (pat at cloudflare)? We take every reported false negative as an opportunity to improve our DDoS mitigations, and these reports are very helpful. As of a few weeks ago, you can
42.
by prdonahue 4y ago
I agree this is a problem, and we're actively working to fix it. Specifically, there's a ticket in progress to improve how bot mitigation handles requests for certain types of static content (including RSS feeds).
43.
by prdonahue 4y ago
We're (Cloudflare) working on expanding our URL scanning tool, currently located within the Security Center "Investigate" tab. Any feature requests or things you'd like to see that Cloudflare could do differently?
44.
by prdonahue 4y ago
Happy to answer any questions about the offering.
45.
by prdonahue 4y ago
Appreciate the speculation, but using Firefox does not increase your likelihood of being flagged as a bot nor does it increase your threat score.
46.
by prdonahue 4y ago
(I’m responsible for Cloudflare’s L7 security products) While we can’t comment on the specifics of any customer configuration, we do not block or challenge Firefox by default—either with our Bot Management products or with any other L7 secu
47.
by prdonahue 5y ago
Alternatively, you could just run Cloudflare Access and use stronger auth without having to worry about rate limiting: https://developers.cloudflare.com/cloudflare-one/tutorials/r... .
48.
by prdonahue 5y ago
> It ensures that they're protected against a trivial and fairly outdated set of threats. You might say that's better than nothing, but questionable protection leading to a sense of security is more dangerous than having nothin
49.
by prdonahue 5y ago
Yes, the former. Think of it as orange clouding/proxying your email traffic. After the deal closes, we plan to make it a single-click in the DNS dashboard (and elsewhere) to start filtering your email through Area 1's technology.
50.
by prdonahue 5y ago
Cloudflare employee here. When I graduated from college I left a publicly exposed box (in those days we had a flat, campus-wide /16 with no NAT'ing) server running in the basement of a dorm. I think they finally removed it and the
51.
by prdonahue 5y ago
The newest version removed the ability to use a local repo (on iCloud, etc.) and they force you to use their monthly cloud service vs. buying outright. See here for more details: https://news.ycombinator.com/item?id=28145247
52.
by prdonahue 5y ago
Can you share data on how much latency this adds to TTFB?
53.
by prdonahue 5y ago
Given the severity, we've also rolled this out to our Free plan customers, who don't otherwise have access to the WAF.
54.
Cutting Cloud Costs at Cloudflare with Matthew Prince(lastweekinaws.com)
1 points by prdonahue 5y ago|0 comments
55.
by prdonahue 5y ago
Stay tuned .. Today we can help quite a bit by proxying TCP traffic using Cloudflare Spectrum, e.g., spoofed traffic will never reach origin as it can't complete a handshake, we can use things like SYN cookies to challenge source, etc.
56.
by prdonahue 5y ago
Not really practical or effective to implement. The attacks more often than not come from botnets comprised of compromised consumer devices. You can’t just outright drop traffic from residential ISPs. We didn’t disclose it at the time but t
57.
by prdonahue 5y ago
Once you get to a certain scale, you don’t really worry about those vectors anymore. The more interesting/difficult to mitigate attacks are those that complete handshakes (if TCP) and make fully formed requests at L7 that otherwise app
58.
by prdonahue 5y ago
Drop me a note and I'll connect you with the right PM: pat at cloudflare.com.
59.
by prdonahue 5y ago
We're hiring remotely for most roles these days, so long as you reside in a country where we're set up to hire people (tax presence, etc.).
60.
by prdonahue 5y ago
So you can nick collide people, obviously.

More ›