damiant, to random
@damiant@mastodon.online avatar

I’ve added The Love Burn, happening this weekend in Miami, to the dust app (https://dust.events?app). The backend is now built using workers, D1 for database and R2 for static storage. I’ve now got imports from Airtable and Google Maps KML format. End result is theme camps are on the map with GPS directions to restrooms.

itnewsbot, to medical
@itnewsbot@schleuss.online avatar

Another “patent troll” defeated by Cloudflare and its army of bounty seekers - Enlarge (credit: SOPA Images / Contributor | LightRocket)

Once... - https://arstechnica.com/?p=2002992 #uspatentandtrademarkoffice #patenttrolling #routerhardware #projectjengo #patenttroll #cloudflare #policy

ljrk, to random
@ljrk@todon.eu avatar

So, does anyone know how to contact when for some reason their simply... doesn't list my domain anymore? Others do and my authoritative DNS does as well.

kn, to webdev
@kn@hachyderm.io avatar

Figured out a pretty low-effort way to take payments in a Chrome extension - no server required. Don't have to give up an extra 5% to ExtensionPay either 😄

https://kylenazario.com/blog/paid-extension-setup-with-cloudflare

pasci_lei, to random German
@pasci_lei@mas.to avatar

Interessant, wie mas.to zur selben Zeit Probleme hat zu laden, wie meine extern verfügbaren selbstgehosteten Dienste.

An die Admins @trumpet hier: Verwendet mas.to zufällig ?

Taffer, to linux
@Taffer@mastodon.gamedev.place avatar

A couple more experiments in my ongoing problem with Cloudflare's "are you a human" security check thing:

  • disabled all ad blockers, whitelisted my IP, disabled privacy features in Firefox... nope
  • Firefox on macOS with all privacy features on, all ad blocking on... works fine
  • Firefox snap instead of Firefox installed from Mozilla's builds... nope
  • Chromium on Linux... works fine
  • Safari on iPhone... works fine (obviously)

So, I guess they hate Linux?

Taffer, to firefox
@Taffer@mastodon.gamedev.place avatar

I was going to write a blog post after work today, instead I'm arguing about Cloudflare's broken "are you a human" security check with Zenva's tech support.

Same problem on the Better Business Bureau's website.

Clearly Cloudflare is NOT helping these people get their stuff configured properly.

Maybe I'll write a blog post about Cloudflare being broken. Works in Chrome or from my iPhone, of course.

nono2357, to security
nono2357, to random French
david_senate, to Cybersecurity
tallship, to foss

If Substack is perfect for your needs then use that. Your problem with substack prolly isn't who else uses it, but rather, that you yourself are calling a proprietary, privacy disrespecting deprecated monolithic silo a "Perfect solution".

Instead of doing what's right, and for the right reasons, you eschew dogfooding on when you should be championing it, and call a professional data mining haven perfect, when it is anything but.

Well, you're already on the Fediverse, so you should know better, but I'll dispense with the lecture now and point out a few good FOSS solutions that are Fediverse powered (and one that isn't, but still rocks as a publishing platform) for you:

  • Option #1, , which you can find over at its git repo under https://gitHub.com/writefreely/writefreely.
  • Option #2, deploy yourself a site, Then install the plugin - the latest release publishes into the Fediverse and allows any Fediverse account to reply/comment threads natively - like I'm responding now. It also allows anyone on the Internet to join the discussions as well. WordPress has many options for subscriber lists, Etc., as well as , if you like.
  • Option #3, is a Fediverse publishing platform that currently supports paid subscriptions for Authors: https://mitra.fediverse.observer/list - pick one that has open registrations or self-host yourself, like all of the other solutions here :)
  • If you're really talking about maintaining subscribers lists, but especially Having a subscriber list and building it up, then most ignorant folks would recommend HubSpot - but they would be wrong, because you can get the same powerful inbound marketing solution / , only better, for (That's a bare minimum savings of over $500/month)!!! So install and let it do what it does, which you can get here: https://www.mautic.org/download/source-code and then after that, use it in conjunction with the following FOSS application that was tailor made for exactly what you're asking for...
  • is FOSS, and in conjunction with an inbound marketing platform like Mautic is the perfect dynamic duo - like Batman and Robin. But even better, is that I'm going to point you towards a that is an actual cookbook written by someone expressing the same lamentations as yourself, and here's the exact solution they've provided for you:

https://www.readonlymemo.com/substack-to-ghost-migration-guide-in-2024-setting-up-mailgun-and-cloudflare/

By the way, your Mautic server also integrates directly with (or Sendgrid, SendinBlue, SparkPost, etc.) to complete your transactional email system that will tell you when each and every recipient received, viewed (and or how long) your emails, as well as how many times they looked at those emails, with a bunch of other tools as well.

I hope that helps, and I'm very glad that you came to your senses about not using a privacy disrespecting, proprietary closed source solution like Substack - besides, registering your own domain name would have hidden the fact that you were using substack anyway, so it's about YOU doing the right thing the right way. Please choose your software in the future based upon the freedoms and ethics it offers in serving you and your customers. There's evil people everywhere, and the smart ones are using FOSS too - not substack.

h/t to @marathon for boosting your post so it had much greater visibility across the Fediverse.

.

RT: https://kolektiva.social/users/Audr3y/statuses/111858776974817210

tallship,

Thank you Jawad!

It's good to receive feedback that helps people determine information that has value to others. It helps us focus on topics with merit.

There are a couple of additional things I'd like to address though, as briefly I can, considering I'm a rather loquacious sort ;)

  • I think it was @frogzone that brought up the general controversies that typically do follow around. I have privacy conscious friends on both sides of that widening chasm...

In general it tends to be the developer sorts that although are cautious, reserved usually, when passing around compliments where Cloudflare is concerned, they're also the pragmatists where performance and dare I say security is concerned, and are often quite willing to turn to Cloudflare (specifically, as a ).

With respect to security concerns, it is true that incorporating a CDN does provide a level of obfuscation of the IP spectrum, that is often cited as a major reason by hosting providers for the customer to incorporate/subscribe to CDN services (more often than not, Cloudflare - because they offer better kickbacks (er.... incentives) to hosting providers.

Then there's the hard core privacy concerned folks. delivery performance considerations typically being much less of a compelling reason to use, let alone pay, for a CDN like Cloudflare to be injected into the website admin's . This is because, and let's be real here folks, most websites don't generate anywhere near the levels of traffic that their Nginx or Apache Servers can easily serve up, and for folks on the other side of the world from the particular website, a few milliseconds on a clear day is negligible.

Now, if you're running a very busy site, like... Etsy, or even really popular sites with thousands of requests per minute then you can really benefit by spreading your cache around the globe on super fast CDN services. Even a site that receives on average 1 request per second (60 per minute - and that's pretty respectable traffic) doesn't really benefit enough from the related benefits of a CDN to mark a compelling case - the Last Mile Delivery, however, to Oslo, Norway, from a website in Melbourne, Australia... that can indeed improve perceived response by 250ms (2.5 seconds) or so.

So, just like these so-called VPN services, like NordVPN, etc., there needs to be an effort to educate the consumer as to the actual benefits expected for specific matters - some may be important considerations for the consumer, while others may just be a tech support person in a boiler room trying to reach that bonus number for the month... I've seen waaaay too many people purchase services they really didn't need or would receive much benefit from, and many support desk personnel upselling customers with things they probably shouldn't have.

Now, there's another thing I didn't mention - attacks... Good ole campaigns. Well, first of all, one should check with their hosting provider - whether they have the benefit of protections against such attacks, and then, weigh the added benefit of using something like Cloudflare to do the same job (are you paying for protection that you might need twice?).

I personally would probably not have included Cloudflare as part of the . It can be added at anytime, but some folks swear by it, so it's not that I'm on the fence about Cloudflare, it's just that I look at it more from the engineering and security perspective, with an eye specifically focused on the veracity of any perceived needs by the customer. And I'm not super fond of turning all of that DNS control (and valuable ) to some third party.

I realize that may have only served to raise more questions, so I'll just say that this is why you pay your trusted IT support professionals who make all of their money on labor they've billed you for, to sit down and discuss what you may or may not need, and especially, why 👍

  • Brenden Eich was invoked by @marathon - and I too, concur that It is only right to measure technology based on it's own merit and capability - without regard to superfluous and unrelated matters of personal politics.

When haters start fomenting hatred, disparaging everyday, average people for their informed choice of technologically capable software relevant to the task at hand, I like to remind those vile, adolescent, sniveling children that they're literally denigrating things like Brave Browser and Soapbox (the platform I'm authoring this post on), while at the same time availing themselves of the full compliment of features that 's technology affords them - JavaScript, invented by ...

And they have my blessings to completely swear off and forgo ever using JavaScript again - but they won't, will they? Why? Because they're filthy, hateful, hypocrites consumed by their own criminal commiserations.

.

SabiLewSounds, to KindActions
@SabiLewSounds@mastodon.social avatar
SabiLewSounds,
@SabiLewSounds@mastodon.social avatar

You can also see all of what I have to offer or check out my on my janky little website run on a free server and hosted on

https://sabilewcreates.com

Sometimes it's down 😅 I'm doing my best to fix that with my friend's help soon

YourAnonRiots, to hacking Japanese
@YourAnonRiots@mstdn.social avatar

, a web infrastructure company, suffered nation-state attack. Hackers accessed documentation, source code, and attempted data center breach.

https://thehackernews.com/2024/02/cloudflare-breach-nation-state-hackers.html

codewiz, to random
@codewiz@mstdn.io avatar

Flying to Bruxelles for !

codewiz,
@codewiz@mstdn.io avatar

I don't understand why didn't switch to Quiche, a full QUIC + HTTP/3 stack entirely written in and actively maintained by .

I picked Quiche in 2021 to implement DNS-over-HTTP3 (DoH3) on Android, and it was small and easy to embed into the existing C++ codebase of the Android DNS resolver.

https://github.com/cloudflare/quiche

cybernews, to Cybersecurity
governa, to random
@governa@fosstodon.org avatar
simontsui, to random

Cloudflare blog on Thanksgiving 2023 security incident:

"Based on our collaboration with colleagues in the industry and government, we believe that this attack was performed by a nation state attacker with the goal of obtaining persistent and widespread access to Cloudflare’s global network."

The attack started in October with the compromise of Okta, but the threat actor only began targeting our systems using those credentials from the Okta compromise in mid-November.
🔗 https://blog.cloudflare.com/thanksgiving-2023-security-incident

fsf, to random
@fsf@hostux.social avatar

Did you know that associate members of the Free Software Foundation (FSF) who live in the US are eligible to join the Digital Federal Credit Union (DCU) for their banking as one of the FSF's associate member benefits? https://u.fsf.org/42l https://www.fsf.org/associate/benefits

digitalRightsNinja,

@fsf I’ve wondered what ’s attraction to is based on. DCU’s app is proprietary closed-source and exclusively distributed in Google and Apple stores.

It’s really a bad idea to use because their website proxies through , a privacy abuser. For the moment, it looks like they only use CF for their sales site not the login host. But many CUs actually let CF be a MitM on their logins and sensitive financial transactions. DCU’s poor judgement could spill over to the transactional site at any time. is not a good to endorse.

Also worth noting that Cloudflare is antithetical to software freedom, according to ¶2 of this article:

https://git.disroot.org/cyberMonk/liberethos_paradigm/src/branch/master/rap_sheets/cloudflare.md

nhoizey, to random French
@nhoizey@mamot.fr avatar

Judging by this @speedcurve graph comparing TTFB from last 3 months to the 3 months before, it looks like TTFB has improved lately with , while it has degraded with :

I'm currently using Cloudflare in front of Netlify, but I'm not sure it's worth it anymore. 🤔

⚓️ https://nicolas-hoizey.com/notes/2024/02/01/2/

ai6yr, to random

Okay, what the heck was that... Key and access details on Cloudflare R2 all changed and new endpoints, etc. Unscheduled change? Had to reconfigure all my S3 storage. The life of a sysadmin!

strypey, to random
@strypey@mastodon.nzoss.nz avatar

Hey anyone who gives CloudGlare money only to get protection from DDoS attacks, be aware there are other options. Eg;

https://deflect.ca/about-deflect/

czottmann, to random
@czottmann@norden.social avatar

Discovered Tunnel today, and it didn’t disappoint. I was able to set it up locally, and I’ve used it to temporarily expose a little webhook project to the net. The docs were straightforward, it asked me to auth once via browser, the rest happened in the terminal.

https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/get-started/create-local-tunnel/

Yes, I know exists but I didn't feel like signing up for yet another service.

Taffer, to firefox
@Taffer@mastodon.gamedev.place avatar

Was going to see which courses I bought on Zenva last year, but Clownflare there is broken too: https://academy.zenva.com/

Please, Cloudflare, stop breaking the Internet! I have Firefox's fingerprinting protection enabled because of crap like Facebook, not so I can pwn courseware.

kubikpixel, to random German
@kubikpixel@chaos.social avatar

Ich weiss, das zu mindestens mal unsicher war, doch wie sieht es bei den anderen aus und nutzen die auch die aktuellste für ihre 'en? Das ist ja viel versprochen aber nicht garantiert, da Closedsource oder nicht?

« & Management – Die 9 besten IAM-Tools:
Diese Identity-und-Access-Management () -Tools schützen Ihre Unternehmens-Assets auf dem Weg in die Zero-Trust-Zukunft.»

🔐 https://www.csoonline.com/de/a/die-9-besten-iam-tools,3673918

kubikpixel,
@kubikpixel@chaos.social avatar

🧵…[ENG] It's worse than previously assumed. Apart from how many services are dependent on it, this has a very big impact

Breach: Nation-State 's Access Source Code and Internal Docs
@cloudflare has revealed that it was the target of a likely nation-state in which the threat actor leveraged stolen credentials to gain unauthorized to its server and ultimately access some documentation and a limited amount of

☁️ https://thehackernews.com/2024/02/cloudflare-breach-nation-state-hackers.html

  • All
  • Subscribed
  • Moderated
  • Favorites
  • megavids
  • kavyap
  • DreamBathrooms
  • thenastyranch
  • magazineikmin
  • khanakhh
  • InstantRegret
  • Youngstown
  • ngwrru68w68
  • slotface
  • rosin
  • tacticalgear
  • mdbf
  • Durango
  • JUstTest
  • modclub
  • osvaldo12
  • ethstaker
  • cubers
  • normalnudes
  • everett
  • tester
  • GTA5RPClips
  • Leos
  • cisconetworking
  • provamag3
  • anitta
  • lostlight
  • All magazines