Hacker Newsnew | past | comments | ask | show | jobs | submit | more RyeCombinator's commentslogin

It's always DNS


Interesting to see what the end game is here. Is the goal to prevent a hostile takeover by competitors?


It's a Growth/PE-lead deal with Ryan returning as CEO.

Either he'll execute and help Bolt hit the metrics needed to IPO, or the fund will spin it off or sell it to another fund or company.

Either way the terms are very generous for the two unnamed funds.

I think Index Ventures and ADIA (making an e-commerce push recently) are the two partners because of their e-commerce heavy portfolios, can justify unlocking one-click pay within their portfolio, and can protect Revolut from Klarna's recent expansion into neobanking.


May I ask who you ended up going with? We had a similar experience recently and have some concerns with anything on CF.


We already have DDoS protection from our colo provider and it wasn't clearly advantageous to switch to Cloudflare. We were mainly interested in zero trust but I don't know what we're looking at as of now; we still use various VPNs which, while not exactly fashionable, do work for us.


For things that are current such as game scores, news, I use google search.


Where can we fund more information about this?


There are so many that it's just not funny. :(

https://www.nbcnews.com/tech/security/scathing-federal-repor...

https://www.wiz.io/blog/bingbang

https://www.theverge.com/2023/7/12/23792371/security-breach-...

https://www.wiz.io/blog/midnight-blizzard-microsoft-breach-a...

These are just the first few I've found for the last 12 months.

There are more if you go back even 12 months further, and I'm pretty sure the above aren't the complete list for the last year anyway.

Microsoft are actually really bad at this Cloud "security" thing. :( :( :(


3 of those are about Exchange and one is about Bing (involving AAD, but it was an AAD app that was misconfigured and not an AAD issue itself). The teams that run Azure are in entirely separate organizations with wildly different product stacks.

Exchange has a bunch of decades old infrastructure and is a security nightmare afaik. Dunno much about Bing.

The "org chart" graphic with MS orgs all pointing guns at each other is real shit. Different orgs have very different security postures, and Azure's is much stronger than others.

Source: spent some time at MS


Diversifying a lot. Next acquisition will be Ghost(https://ghost.org/) I bet. Similar DNA, fits in the portfolio (If they are trying to match the feature set of Google) and have no VC backing.


Wouldn’t that be interesting. Snatch up a privacy friendly analytics company and some forum plugins while they’re at it to help people more easily create non-creepy online communities using their tech The all in one solution for being a good digital citizen?

The world where everyone can easily have their own webpage without it being a Facebook or LinkedIn page


That would be very difficult. The ghost foundation's constitution specifically states the company cannot be bought or sold.


Maybe they are okay with joining forces


Stalwart is great and has out of the box JMAP support - I don't believe there's anything else out right now that checks all the boxes like Stalwart for an AIO mailserver.


Blew the door right open and handed a golden parachute


Love the idea. I'm not sure if anyone has found a sustainable model yet.

Looking at the current CNCF landscape, majority of the graduated projects have huge backing from single corps - promoted with the open source labelling.

https://www.cncf.io/projects/

i.e. argo by Intuit, Cilium by Cisco, SPIFFE/SPIRE by VMware/HPE


And this is why I keep coming back to Common Lisp


Underrated comment


The fact that there are many projects depending on a single corp doesn't mean there aren't projects who are supported by community or a group of corp, I don't know take rust, take podman


What are some other viable options?


1) not using DoS / DDoS protection, or using any number of hosting services that have this built in, or using a service that doesn't marginalize large parts of the world in the name of "security". DoS / DDoS attacks are not as common as Cloudflare would want you to believe.

2) use literally any other registrar / DNS service / hosting platform. You then won't need to worry about whether people all over the world will be getting CAPTCHAs on ever visit because of where they live or what browser they choose to use.


They don’t only offer DDoS protection, but also a WAF (Web Application Firewall), and if you run commodity software, attacks are very common.

I know this because I manage a WordPress site fronted by a different WAF, and I can see in the logs that malicious bots are trying to pwn the site basically 24/7.

(and before you say ‘patches’ – yes, but defense in depth is a thing, and you don’t always have the luxury of vendors with good security practices.)


Yes, Wordpress is attacked incessantly. It's designed to be actively hostile to security, so yes, a firewall that helps ameliorate is a good thing.

However, if you really care about Wordpress security, a WAF is just covering things up, and yes, you need to patch (but that's not really the fix). The proper fix is to reconfigure things to not follow Wordpress' absolutely ridiculous security. While patching depends on vendors, securing Wordpress from its own hubris doesn't depend on vendors.

But even where Cloudflare's products are arguably good, they still do too much in my opinion to marginalize non-mainstream visitors and to re-centralize the Internet around one big company. Every time they have issues, huge parts of the Internet are affected. If I wanted a WAF, I'd get it from elsewhere.


WP core isn’t bad, the problem is when you’re the ops guy and you get handed an installation with 30 plugins.

Anyway, WP was just an example. Are you 100% certain that all your software is 100% on the ball when it comes to modern security practices? We all know that not everyone takes security seriously.

> Every time they have issues, huge parts of the Internet are affected. If I wanted a WAF, I'd get it from elsewhere.

Which ‘elsewhere’ would you suggest? Every time AWS, Azure or GCP have issues, the internet is affected too.


Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: