Comment on Supporting the future of the open web: Cloudflare is sponsoring Ladybird and Omarchy

• moseschrute@lemmy.world ⁨1⁩ ⁨week⁩ ago

  There are also many Lemmy instances that are intentionally blocking VPNs because they have to to stay afloat.

  source
• IphtashuFitz@lemmy.world ⁨1⁩ ⁨week⁩ ago

  Exactly. My employer uses Akamai, which is larger than Cloudflare. Akamai provides the ability to block traffic from Tor, traffic from VPNs, traffic from any countries you desire, and so on. They also provide managed lists of countries listed in thing like ITAR so you can easily block them if you want.

  source
• drmoose@lemmy.world ⁨1⁩ ⁨week⁩ ago

  Nope. Cloudflare use a complex set of fingerprinting tools that determine security scores. It’s literally social credit system for web user agents and the site admits have little control over that.

  source

  • AmbiguousProps@lemmy.today ⁨1⁩ ⁨week⁩ ago

    While true that there are security scores, the site admins set which score (if any) to block at. So, they do have control over that. Same goes for the bot fight mode as well. So, site admins do have control over whether or not to block based on the associated score.

    source

    • drmoose@lemmy.world ⁨1⁩ ⁨week⁩ ago

      The control is very limited unless you’re enterprise subscriber and even then CF is super sneaky and doesnt actually report the real world. I had a few clients where they were clearly suffering losses due to cf implementation (you could literally see sales dip when cf is enabled) but they didnt believe me because cf dashboard doesn’t report false positives or anything of that sort and they had no in house analytics to really understand the issue.

      source

      • AmbiguousProps@lemmy.today ⁨1⁩ ⁨week⁩ ago

        It’s literally not limited. If you don’t put a WAF rule based on the score then it doesn’t get blocked based on the score. It’s that easy. I’ve got clients and my own site on Cloudflare, so I know how it works. You don’t even need the pro subscription to do that.

        source

        • -> View More Comments