this post was submitted on 18 Nov 2025
540 points (99.1% liked)

Technology

76917 readers
3198 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
 

A Cloudflare spokesperson told Ars that the cloud services provider saw “a spike in unusual traffic to one of Cloudflare’s services,” which “caused some traffic passing through Cloudflare’s network to experience errors.”

“We do not yet know the cause of the spike in unusual traffic,” the spokesperson said. “We are all hands on deck to make sure all traffic is served without errors. After that, we will turn our attention to investigating the cause of the unusual spike in traffic.”

top 50 comments
sorted by: hot top controversial new old
[–] HazardousBanjo@lemmy.world 3 points 5 hours ago

When damn near every single essential service is built on the same infrastructure of tissue paper and chewed bubble gum, it shouldn't surprise everyone when it collapses all at once.

[–] SHBI7368@sh.itjust.works 3 points 5 hours ago

It was google. Chatgpt and claudeai were down so i said oh hey let me try gemeni. What happened that day? By coincidence gemeni 3 came out

[–] GreenKnight23@lemmy.world 5 points 7 hours ago (1 children)

translation: we don't fucking know

[–] Burninator05@lemmy.world 2 points 3 hours ago

No translation was really needed. They outright stated that they didnt know yet.

[–] SoftestSapphic@lemmy.world 13 points 13 hours ago* (last edited 13 hours ago) (1 children)

"You see, half the internet went down because people used our services a little too much."

Ok wtf???

How does cloudflare not have DOS detection?

[–] tonytins@pawb.social 13 points 11 hours ago (2 children)

That was based on anecdotal evidence, at the time. The real cause was Cloudflare shooting themselves in foot again because of a bad config file.

[–] Kazumara@discuss.tchncs.de 6 points 7 hours ago* (last edited 7 hours ago)

The bad config file is somewhere in the middle of the chain of causality.

They changed database permissions, revealing a dormant bug in a database query, leading to config files being generated badly with duplicate lines, making them too large for intake by the bot detection service, which didn't have good input validation and made the process panic instead, ruining the service.

[–] postmateDumbass@lemmy.world 5 points 17 hours ago

All the people trying to cash out their Dr. Pepper points?

[–] mech@feddit.org 281 points 1 day ago* (last edited 1 day ago) (4 children)

Aren't spikes in unusual traffic the exact thing Cloudflare is supposed to protect you from?

[–] oppy1984@lemdro.id 12 points 1 day ago

Traffic spikes, on the Internet? One in a million chance! Now tow cloudflare outside the environment and call it a day.

[–] brokenwing@discuss.tchncs.de 79 points 1 day ago (1 children)
[–] BeatTakeshi@lemmy.world 15 points 1 day ago

Fission Mailed

[–] the_crotch@sh.itjust.works 44 points 1 day ago* (last edited 1 day ago) (2 children)

They protected the endpoints. They just weren't able to route traffic to them. Id bet it takes a MUCH larger ddos to bring cloudflare to its knees vs your average website.

[–] mech@feddit.org 33 points 1 day ago (2 children)

From a Cloudflare customer's point of view, I don't care if my site is down from a DDOS or a Cloudflare outage, but the latter seems to happen more often.

[–] NuXCOM_90Percent@lemmy.zip 4 points 13 hours ago

As it stands? Cloudflare is still incredibly effective at protecting customers from those DDOS attacks. Which, depending on your hosting solution, can mean very noticeable monetary savings because YOUR hardware/connection didn't spike. And, regardless, can mean noticeable monetary savings as your engineers didn't need to recover a crashed system because your setup was just sitting there idle.

That said: If you truly need high availability? You need to do what downdetector did and have alternatives ready in the event that Cloudflare falls over. Same as with your ISP... which should be ISPs plural.

[–] the_crotch@sh.itjust.works 25 points 1 day ago

From another cloudflare customer, if our sites still work internally it's marginally better than them being broken both inside and outside the org as they would be if they were ddosed directly. I guess it depends on what kind of services you're running.

Yeah, but just one "unusual spike in traffic" - so it seems. /s

[–] tdawg@lemmy.world 25 points 1 day ago

ostensibly sure. But it's like car insurance. People pay them no matter what so why bother doing what they promised?

[–] gravitywell@sh.itjust.works 214 points 1 day ago (3 children)
[–] locahosr443@lemmy.world 9 points 16 hours ago

Amazon is now saving Americans from the crippling debt most of them seem to get into to drive a shiny box.. I wasn't expecting that.

load more comments (2 replies)
[–] ellen.kimble@piefed.social 20 points 1 day ago (1 children)

Did someone google Google again?

[–] ivanafterall@lemmy.world 1 points 4 hours ago

Probably pointed one Google mirror at another Google mirror

[–] JohnnyCanuck@lemmy.ca 105 points 1 day ago (2 children)

My bad, I started downloading The Lord of the Rings movies - Extended Edition. Sorry!

[–] tonytins@pawb.social 78 points 1 day ago* (last edited 1 day ago) (4 children)

How many times have I told you not to download movies or games in the middle of the day? You'll tie up the phone lines.

[–] cyrano@piefed.social 72 points 1 day ago (2 children)

Ok mum I stopped torrenting. You can use the phone again.

[–] chronicledmonocle@lemmy.world 33 points 1 day ago* (last edited 1 day ago) (4 children)

You can tell we're all old as fuck Millennials, because nobody else would make this joke. Lol.

[–] k0e3@lemmy.ca 32 points 1 day ago (3 children)

I can't even explain dial up modems to my son because I'd have to start by explaining what phone lines are.

[–] Bluewing@lemmy.world 1 points 15 hours ago

It wasn't about the lines. It was always about the switches. And while they are no longer actual hardware, but rather software, those are still the what makes phones work.

[–] chronicledmonocle@lemmy.world 15 points 1 day ago

I had a Gen Z person ask me how I got a "3D printer save button" when I had a floppy disk for some reason.

[–] ace_garp@lemmy.world 9 points 1 day ago

Indeed.

"...you must first invent the universe".

load more comments (3 replies)
load more comments (1 replies)
[–] dharmacurious@slrpnk.net 14 points 1 day ago

I had fully forgotten the phrase "you'll tie up the phone line!" And I just had a nam style flashback of sneaking internet time during the day when my mom was at work, and praying that no one tried to call

load more comments (2 replies)
load more comments (1 replies)
[–] Treczoks@lemmy.world 99 points 1 day ago (3 children)

Which AI scraper went rogue this time?

[–] eRac@lemmings.world 2 points 7 hours ago

It was actually the system Cloudflare uses to catch and block bots that went haywire.

They had a fake database you could query that would pull content from a bunch of different shard databases. They updated the config so that systems querying it could see the shards in addition to the main dummy DB. The tool that pulled data out of it assumed that it could only see the dummy, however, so it just asked for everything when it pulled a report to pass to the filtering system.

The filtering system assumed the report it received would be properly formed and crashed if it got one that was malformed.

[–] ggppjj@lemmy.world 15 points 1 day ago* (last edited 1 day ago)

Gemini 3 was released today 👀

[–] VieuxQueb@lemmy.ca 18 points 1 day ago

Mabe the new bezos Prometheus?

Did I miss something? Is everyone downloading the Epstein files today?

[–] melroy@kbin.melroy.org 76 points 1 day ago (3 children)

I hope more websites will move away from cloudflare. I could not access 90% of the web anymore. This is insane if just 1 company goes down, the whole internet is dead. The internet is broken!

[–] mybuttnolie@sopuli.xyz 54 points 1 day ago (5 children)

and it's fucking annoying to check the box to "prove you're a human" when trying to access almost any site. some days it will make me do it three times before letting me through

[–] melroy@kbin.melroy.org 19 points 1 day ago (3 children)

I understand the need for anti-bot or DDoS protection, but there are better and free options today. Like Anubis. So please, in the love of The Internet, move away from cloudflare. Ideally yesterday already.

Edit: or run your own decent firewall with geo blocks. FireHOL block lists. Intrusion detection.

Setting up fail2ban. . Etc. Etc.

[–] Xylight@lemdro.id 5 points 1 day ago* (last edited 1 day ago)

Anubis isn't even comparable to cloudflare. The reason cloudflare is so effective is that they can oversee which IPs are spamming or being abusive to certain websites, and can throw up protections quickly. There are a number of negative implications that come with this, but it's quite good at its primary job.

Anubis is just a prompt that wastes CPU cycles and tries to make it more expensive for AI crawlers to do so (since they care a lot about compute costs, of course). There is no bot protection or anything happening. The "making sure you're not a bot" is quite misleading imo

[–] _cryptagion@anarchist.nexus 16 points 1 day ago (1 children)

Anubis is to protect against scraping from LLMs, it has nothing to do with DDoS protection. Not only that, but the Anubis Github repo recommends most people to use Cloudflare instead, since Anubis is the "nuclear" option.

load more comments (1 replies)
load more comments (1 replies)
load more comments (4 replies)
load more comments (2 replies)
load more comments
view more: next ›