• Vanilla_PuddinFudge@infosec.pub
    link
    fedilink
    English
    arrow-up
    95
    arrow-down
    5
    ·
    7 days ago

    I remember the day I went why are we all selfhosting and still relying on a site like Cloudflare?.

    I’m glad I agreed with me on it.

    • talentedkiwi@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      18
      ·
      7 days ago

      I’ve migrated about half of my services off of cloudflare DNS proxy. Guess which half still worked this afternoon. (Self hosting pangolin with CrowdSec as replacement). I wasn’t even using the cloudflare tunnel. Just their proxy for some bot mitigation.

      • SidewaysHighways@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        edit-2
        6 days ago

        been really enjoying pangolin so far! i got scared and ended up not installing crowdsec.

        am i missing out? how hard would that be to add after the fact?

        • talentedkiwi@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          2
          ·
          6 days ago

          Can’t speak to how difficult it would be to do after the fact. My guess is just adding in the lines in the docker compose. As for CrowdSec, it seems to run in the background and I haven’t looked at it much. I’ve triggered it a few times and locked myself out. So I’ve added my home IP to the whitelist (it’s running on a VPS). It also locked out my uptime Kuma so I whitelisted that too.

    • GreenKnight23@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      7 days ago

      still hard. most projects still CDN online instead of packaging into a single application.

      it’s one of the most infuriating things about self-hosting. so I made my own self-hosted CDN and have rewrite rules that replace most public cdb domains and reroute them to my own local.

      it would be great if I could just have something in the middle that would download once and cache locally on request, but it’s effort that would be taken from my time afk.

    • Lka1988@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      2
      ·
      6 days ago

      I used Cloudflare tunneling for a while, then started to have similar thoughts. I’m off Cloudflare now.

  • ayyy@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    32
    ·
    6 days ago

    Dafuq is a character.ai and why is it in the same list as google and cloudflare? Like yea my local grocery store had some issues should that be on the list too?

  • HugeNerd@lemmy.ca
    link
    fedilink
    English
    arrow-up
    12
    arrow-down
    3
    ·
    6 days ago

    Uh huh, just before a major democracy attacked an evil, evil country. Must be coincidence.

  • arararagi@ani.social
    link
    fedilink
    English
    arrow-up
    1
    ·
    6 days ago

    Strangely enough, twitch streams and chat were working fine but everything else was broken, had an empty following list.

    • pinball_wizard@lemmy.zip
      link
      fedilink
      English
      arrow-up
      3
      ·
      6 days ago

      It’s seen tech talks by Twitch’s engineering team. Some of those folks are scary smart.

      Not that it takes that much cleverness to avoid using CloudFlare, of course.

      But might be related. Twitch had some clever fallbacks and work-arounds for slow Internet, in that tech talk.

  • sp3ctr4l@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    9
    arrow-down
    11
    ·
    edit-2
    7 days ago

    Oh no, not Cloudflare!

    Oh right I use NextDNS, so anyway…

    Oh, its also Google, Twitch, Discord and Etsy… and some AI girlfriend generator… and Spotify?

    … People still use those? Aren’t they worried about all the security and privacy concerns, the exploitative business models?

    No?

    Huh. Well, dang, sucks for those users I guess.

    Ahem, annnyyyywaaaayyyy

    Ok, serious mode / tinfoil hat:

    … Did maybe someone in the Trump admin just try to do a US internet blackout, given all the insane shit happening, and pulled a few wrong cords out?

    Either way… and I cannot believe I am citing Ready Player One as a positive example of anything, but such is the nature of our collective degeneracy:

    Tuesdays and Thursdays are now no internet days.

    Go outside, touch grass, realize you’re addicted to social media like a drug, and begin detoxing.

    EDIT: Holy shit, Israel just struck Iran at multiple locations, presumably all or many related to their nuclear program… including Tehran.

    https://www.nytimes.com/live/2025/06/12/world/israel-iran-us-nuclear

    https://www.axios.com/2025/06/13/israel-strike-iran-trump-nuclear-talks

    https://www.nbcnews.com/world/iran/live-blog/israel-strikes-iran-middle-east-conflict-live-updates-rcna212727

    https://www.wsj.com/livecoverage/israel-iran-strike-conflict

    info blackout tinfoilhattery intensifies

      • sp3ctr4l@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        6
        ·
        edit-2
        7 days ago

        Speaking as someone who managed to quit smoking, but still uses a vape, who is focusing on doing daily PT after being maimed a while back…

        A step in the right direction is a step in the right direction, and taking one step at a time is better than none.

        Lemmy ain’t corporate like Reddit, it ain’t parasocial, only a very small number of users actually directly link their real identity to their psuedonym, and it doesn’t have a worldclass datamining/profiling algo perfecting what content to feed to specifically you, to make you angry or insecure enough to keep you engaged.

        Perfect?

        No.

        Leagues better than every alternative?

        Far as I can tell, yes.

        • NeilBrü@lemmy.world
          link
          fedilink
          English
          arrow-up
          3
          arrow-down
          1
          ·
          edit-2
          7 days ago

          Fundamentally, the brain still receives “bite-size-chocolate” dopamine hits from Lemmy by receiving positive affirmations from upvotes, cortisol from downvotes, and lends to dark behavior patterns like any forum. Adrenaline dumps when engaged in “online arguments”.

          The nature of both anonymous or personally identifiable online forums’ neurochemical stimulation of our over-sized and over-active (but evolutionarily necessary for our ancestors’ survival) amygdala fosters social media addiction.

          People like Lemmy for many reasons. Some of them are good. However, let’s not pretend that it’s “all of the good with none of the bad.” It’s healthy to be skeptical of Lemmy instances too. Screen time is the enemy.

          • sp3ctr4l@lemmy.dbzer0.com
            link
            fedilink
            English
            arrow-up
            3
            ·
            edit-2
            7 days ago

            Yeah, a great part of Lemmy’s fundamental design is that it gives the user so much ability to block specific toxic users and communities and even entire instances from being seen by that user.

            A user who is interested in self regulating or limiting that potential adrenaline overload … is aided by Lemmy in doing so.

            This is significantly different from how its nearest equivalent, reddit, operated untill about 2 years ago, when they finally added an actual block user ability.

            Still don’t think you can block the entire user group of subreddit communities, the way you can block an an entire Lemmy instance, if you want to.

            (At least not without some third party script or software… which are probably all broken by now given how hard reddit is cracking down on its API?)

            Also, moderation and admin logs are significantly less opague than on reddit.

            To the best of my knowledge, on lemmy, you can’t admin edit the post of someone you are arguing with to frame them, basically, and then turn them into a strawman of themselves, and then win that argument with them, and then ban them… as has happened on reddit.

            Also Also, … lemmy at least not yet does not appear to have a problem with a massive flood of ai bots posting god knows what % of the actual content.

            Not saying Lemmy is perfect.

            I’m saying its better.

            And I guess I’m also saying there’s a difference between being an alcoholic and enjoying an occasional drink from time to time.

            Generally: Yes, of course, approach any online messsge board or social media with caution and skepticism… but different platforms can be significantly more conducive to generating negative mental health outcomes than others…

            … short form video platforms collapse your attention span, anything that allows advertisements or ‘influencers’ who are basically just walking talking brand ambassadors lie to you to sell you all kinds of bs…

            Thats not present on lemmy, at least not that I’ve seen… so in those ways, lemmy is the marijuana to say Tiktok’s fentanyl.

      • FaceDeer@fedia.io
        link
        fedilink
        arrow-up
        120
        arrow-down
        2
        ·
        7 days ago

        If you’re not running your waifu on a local machine she’s just a digital prostitute.

      • tal@lemmy.today
        link
        fedilink
        English
        arrow-up
        35
        ·
        edit-2
        7 days ago

        When you stop using a search engine and use AI-generated responses for everything, I guess having your LLM backends go down could qualify as having a disruptive functional impact.

    • ZeroCool@lemmy.ca
      link
      fedilink
      English
      arrow-up
      51
      ·
      7 days ago

      Well, the actual headline is:

      Massive internet outage: Google services, Cloudflare, Spotify all down, users report

      Character.ai is only mentioned in the lengthy list of services that are down.

            • blargle@sh.itjust.works
              link
              fedilink
              English
              arrow-up
              9
              ·
              7 days ago

              That’s how I read it too at first- and as bad as ‘erotic role play’ with a LLM chatbot sounds, the other one is so much horribly worse.

              • seralth@lemmy.world
                link
                fedilink
                English
                arrow-up
                4
                ·
                edit-2
                6 days ago

                Actually RP and by proxy ERP is basically a perfect fit for what LLM are good at.

                Good RP is basically nothing but improv and rolling with a functional scenario no matter how weird it gets. Which LLM are fantastic at doing.

                You arnt worried about accuracy or memory after all. Just that it can string together coherent English and play pretend with you. Literally the ideal use case for a LLM.

            • toynbee@lemmy.world
              link
              fedilink
              English
              arrow-up
              7
              ·
              edit-2
              7 days ago

              I had guessed the nature of the site and “roleplay.” It is a tad silly on my part to not have guessed “erotic”; thanks for getting me there (and not in an erotic way).

              edit: Had left out the word “there.”

  • Mwa@thelemmy.club
    link
    fedilink
    English
    arrow-up
    133
    ·
    edit-2
    7 days ago

    Ohh that’s why everything is slow and this is my sanity check.

    But its scary how if Cloudflare went down most popular websites will go down with it

      • Xylight
        link
        fedilink
        English
        arrow-up
        20
        arrow-down
        1
        ·
        7 days ago

        Most people who dislike cloudflare do so for their centralization of the internet, rightly so.

        Me? I HATE THE STUPID “VERIFYING YOUR REQUEST” PROMPTS. THEY TAKE WAYYY TOO LONG AND DONT WORK WITH MY USER AGENT SWITCHER. STUPID WEBSITES WITH 3 MONTHLY USERS ARE TURNING ON ADVANCED “DDOS PROTECTION” JUST TO MAKE EVERY FUNCTION OF THEIR APP TAKE 18 MONTHS

        • nyan@lemmy.cafe
          link
          fedilink
          English
          arrow-up
          40
          arrow-down
          1
          ·
          7 days ago

          It blocks anyone not using one of its preferred browsers, among other things. It’s become the gatekeeper for a large fraction of the Internet.

            • nyan@lemmy.cafe
              link
              fedilink
              English
              arrow-up
              7
              ·
              6 days ago

              Minority browsers. Since I daily drive Pale Moon, I’m among the people affected. It’s suspected that they test only the 3-4 most popular browsers, and whether anything else works with their code is up to luck.

              You may think browsers with tiny market shares aren’t important, but all new browsers start out that way. I fear for Ladybird if it ever makes it past the alpha stage, for instance.

              • hera@feddit.uk
                link
                fedilink
                English
                arrow-up
                1
                ·
                6 days ago

                I’m super interested in alternative browsers but never have the time to test them. I always wonder what the Internet would be like if we built it from scratch right now instead of having the legacy of 30 years of development to support.

        • melroy@kbin.melroy.org
          link
          fedilink
          arrow-up
          23
          ·
          7 days ago

          He is not wrong. Look the whole internet is basically one centralized cloudflare if we continue this path.

          • Ernest@lemmy.zip
            link
            fedilink
            English
            arrow-up
            9
            arrow-down
            1
            ·
            7 days ago

            great article, and I had no idea that happened to Brian Krebs, of all people! o.O

            I do think the EFF makes a good point though, and I think personally I tend to be biased towards content neutrality over moderation (at least, more strongly the larger the platform is, and Cloudflare is very large). Not to the point of Xitter, obviously, but I think there’s at least a reasonable argument for Cloudflare in this case.


            that said, after some searching, I did find the following two articles, and I find their arguments against Cloudflare very compelling:

            Fortunately I’m already using end-to-end SSL certs via Caddy, but now I’m considering just moving off Cloudflare entirely and instead providing regular backups to Internet Archive–most of the stuff I host is entirely static and very lightweight.