undefined | Better HN

0 pointsAyyEye1y ago0 comments

> At least looking at the response headers, digikey.com is served by akamai, not cloudflare

I edited them out because they were only one of many problem sites.

> Maybe there's something extra sus about your connection/browser, but I find it hard to believe that you have to resort to getting a separate computer and making a 10 minute trek to visit a site

Maybe half a decade ago someone had malware from my IP. Maybe my router's mac address was used by some botnet software somewhere. Maybe I'm on the same subnet as some other assholes.

> 3. like it or not, neither cloudflare nor digikey has any obligation to serve you. They can deny you service for any reason they want

The vendor in question (this one was not digikey) very explicitly wanted me as a customer.

> them denying you service on that basis doesn't mean cloudflare is running a "protection racket".

Them charging to correct their mistake is.

> that's clearly not an edge case

That's my point. I know for sure that vanilla android on t-mobile periodically gets the infinite loop in this area of my city. It usually goes away within a week but there's no rhyme or reason.

> What OS/browser (and versions of both) are you using?

I have seen it on linux windows and android.

> sounds like their residential proxy detection (that you were asking about earlier) is working as intended then :^)

I don't understand this. They have a normal ISP in a business district?

ETA: I have less issues on my home computer, which browser extension'd up, ironically enough.

0 comments

gruez1y ago

>I edited them out because they were only one of many problem sites.

But the fact that other security providers flagged your IP/browser should be enough to conclude that cloudflare isn't engaged in some sort of "protection racket" to extract money from you?

>The vendor in question (this one was not digikey) very explicitly wanted me as a customer.

Most e-commerce vendors also want customers as well, the problem they can't tell an anonymous visitor a legitimate customer or not, so they employ security services like cloudflare to do that for them.

>Them charging to correct their mistake is.

It's unclear whether the cloudflare product actually constitutes "Them charging to correct their mistake". For one, it's unclear whether you're blocked by cloudflare or the site owner, who can also set rules for blocking/challenging users. Moreover, it's unknown whether the website owner would opt into this marketplace. Presumably they're blocking bots for fraud/anti-competition reasons. If that's the case I doubt they're going to put their sites up for scraping to make a few bucks. Finally, businesses are under no obligation to give you free appeals, so the inability for you to freely appeal doesn't constitute a "protection racket".

>vanilla android on t-mobile periodically gets the infinite loop

>I have seen it on linux windows and android.

you must have a really dodgy IP block then.

>I don't understand this. They have a normal ISP in a business district?

Its probably generating two signals associated with fraud:

1. high latency means than a proxy is being used. This is suspicious because customers typically don't VPN themselves halfway across the world, but cybercriminals trying to cover their tracks by using residential proxies do

2. "business" ISPs might get binned as "hosting" providers, which is also suspicious for similar reasons (eg. could be someone using a VPS as a proxy).

Sure, the unlucky few who accidentally does some online shopping when connected to their work VPN might get falsely flagged, but they probably figure it's a rare enough case that it's worth the loss compared to the overwhelming amount of fraudsters that fit the same pattern.

j / k navigate · click thread line to collapse