News for hackers. Stuff that matters.
Re:Mullvad: Removing the Support for Forwarded Ports by Wicher on Tuesday May 30, 2023 @08:31AM (#36124033)
Users of cloudflare-ish services (site owners) may see a joyful dashboard counter that expresses "we blocked 9000 nefarious attempts this month" instead.

Of course without the big fat asterisk of "actually, we have no idea what our false positive ratio is. So they could be 9000 prospective customers that we blocked."

And then the customer will think "oh wow good service, all those baddies blocked, better stay in the warm embrace of this service or who knows what will happen to my site".

Re:Mullvad: Removing the Support for Forwarded Ports by judge2020 on Tuesday May 30, 2023 @11:22AM (#36125933)
This is being improved by CF - if you have any "managed challenge" firewall rules on the CF dashboard, which is 'browser detection and Captcha if potential bot', it will show a Captcha Solve Rate, so hopefully site owners will adjust their firewall rule settings till the CSR is under 10% or so.

https://rr.judge.sh/Screenshot%202023-05-30%20at%2011.19.52%...