News for hackers. Stuff that matters.
Re:Cloudflare CDN Partial Outage by jgrahamc on Tuesday October 25, 2022 @01:48PM (#33333887)
Fix is rolling out.
Re:Cloudflare CDN Partial Outage by throwthere on Tuesday October 25, 2022 @02:20PM (#33334283)
Is this related to switching the firmware on the Minitel 2?
Re:Cloudflare CDN Partial Outage by jgrahamc on Tuesday October 25, 2022 @02:34PM (#33334465)
Re:Cloudflare CDN Partial Outage by stavros on Tuesday October 25, 2022 @03:47PM (#33335264)
I'd like to read an article about how the firmware caused the outage. It wouldn't be true, but it'd be a fun read.
Re:Cloudflare CDN Partial Outage by jgrahamc on Tuesday October 25, 2022 @03:49PM (#33335287)
10 years ago we bought every Minitel in existence from eBay and connected them into a giant X.25 network spanning the globe. Unfortunately, one EPROM didn't have a cover over its window and bright sunlight in Madrid caused firmware corruption.
Re:Cloudflare CDN Partial Outage by ThePowerOfFuet on Tuesday October 25, 2022 @04:06PM (#33335474)
> 10 years ago we bought every Minitel in existence from eBay and connected them into a giant X.25 network spanning the globe. Unfortunately, one EPROM didn't have a cover over its window and bright sunlight in Madrid caused firmware corruption.

What a tease. If only.

Re:Cloudflare CDN Partial Outage by geocrasher on Tuesday October 25, 2022 @01:58PM (#33334034)
Many thanks sir, from a company that uses Cloudflare Enterprise for delivery.
Re:Cloudflare CDN Partial Outage by ehPReth on Tuesday October 25, 2022 @01:52PM (#33333955)
Thank you! What happened out of curiosity?
Re:Cloudflare CDN Partial Outage by jgrahamc on Tuesday October 25, 2022 @02:34PM (#33334467)
Team is writing it up. Will get it out later today.
Re:Cloudflare CDN Partial Outage by tikotzky on Tuesday October 25, 2022 @02:45PM (#33334597)
We were seeing some pages with cookies incorrectly getting cached, causing users to get logged in as other users. We quickly disabled cache on the dashboard, is this related to that?
Re:Cloudflare CDN Partial Outage by jgrahamc on Tuesday October 25, 2022 @02:48PM (#33334622)
Please email me details (jgc).
Re:Cloudflare CDN Partial Outage by bcjordan on Tuesday October 25, 2022 @11:13PM (#33339381)
Curious what you find happened with that.

On the webdev side—what can be done as extra defense-in-depth step to guard against this kind of issue? Unrelated to Cloudflare I feel like it is a common issue that crops up on even massive sites quite often. Is there some sort of secondary check / content decryption that could be required on the client-side to contain session cookie crossover?

Re:Cloudflare CDN Partial Outage by rob-olmos on Thursday October 27, 2022 @12:02AM (#33352929)
Outside of HTTPS, typically it would be tying the session cookie to the IP address or netblock but because it's Cloudflare IPs, for regular browser navigation requests I don't think there's anything that can be done?
Re:Cloudflare CDN Partial Outage by ehPReth on Tuesday October 25, 2022 @06:47PM (#33337216)
Awesome - thanks :)
Re:Cloudflare CDN Partial Outage by outworlder on Tuesday October 25, 2022 @02:24PM (#33334338)
Doubtful anyone would post anything here before there's time to write a proper RCA.
Re:Cloudflare CDN Partial Outage by stingraycharles on Tuesday October 25, 2022 @01:51PM (#33333935)
(Parent is CTO of CloudFlare for those unaware)
Re:Cloudflare CDN Partial Outage by outworlder on Tuesday October 25, 2022 @02:25PM (#33334339)
I wish my CTO even knew what HN was.
Re:Cloudflare CDN Partial Outage by carlhjerpe on Tuesday October 25, 2022 @05:40PM (#33336534)
Some would be happy if their CTO knew anything about computing!
Re:Cloudflare CDN Partial Outage by qwertox on Tuesday October 25, 2022 @02:34PM (#33334461)
Nice. In that case I'll try to get an update on Pingora's release date. Haven't heard anything about it lately :(