News for hackers. Stuff that matters.

A comment on CloudFlare, We Have a Problem. Parent comment

Re:CloudFlare, We Have a Problem by joepie91_ on Saturday July 16, 2016 @09:29PM (#12108618)
This is almost literally how they are marketing their product: https://www.cloudflare.com/overview/

Either you invest effort into security anyway and you don't need CloudFlare, or you don't invest effort into security and CloudFlare won't save you either. In neither case is CloudFlare the solution.

[ Parent | on HN ]
Re:CloudFlare, We Have a Problem by manigandham on Saturday July 16, 2016 @09:52PM (#12108688)
Or the logical way to think about this is that CloudFlare is another vendor that you can use (amongst many) to create the security you need with the trade-offs that are acceptable.

Marketing does not absolve you from proper configuration... clearly you have it out for this company for some reason.

[ Parent | on HN ]
Re:CloudFlare, We Have a Problem by ZoF on Sunday July 17, 2016 @04:00AM (#12109416)
Yes, I personally wasn't trying to convey anti-CloudFlare sentiment, I even said "and other CDN providers"

I don't think this is a 'CloudFlare vuln' or the responsibility of CloudFlare to resolve etc...

I maintain that it is sloppy work that leaks the underlying webserver IP, but also that few people care about doing so.

[ Parent | on HN ]