The core features of a WAF do require SSL offload, which of course means that the data needs to be unencrypted with your certificate on their edge nodes, then re-encrypted with your origin certificates. There is no other way in a WAF to protect from these exploits if the encryption is not broken, and WAF vendors can respond much faster than developers can to put protections in place for emerging threats.

I had never considered that Akamai or Cloudflare would be doing any deeper analytics on our data, as it would open them up to significant liability, same as I know for certain that AWS employees cannot see the data within our buckets.

As for the captcha prompts, I can’t speak to how those work in Cloudflare, though I do know that the AWS WAF does leave the sensitivity of the captcha prompts entirely up to the website owner. For free versions of CF there might be fewer configurable options.

Can you educate me on the negatives of Cloudflare?

My company is on Akamai, who has a pretty solid combined offering of WAF, DNS, and CDN, and yet I still feel like their platform is antiquated and well overdue for a refresh.

Thinking back to log4j, it was cloudflare who had the automatic protections in place well ahead of Akamai, who we had to ask for custom filters. Cloudflare also puts out many articles on Internet events and increase adoption of emerging best practices, sometimes through heavy shaming.

Very cool 😎 what a time to be alive for a handheld gamer. The Turnip drivers seem to have very active development, and even in the months I’ve owned the Odin 2, the updated drivers have solved several minor problems on Yuzu/Suyu/Sudachi.

If Linux or Steam Deck OS ever comes to the Odin 2 I will probably wait a long time before I consider trying it out. At this point in my life I don’t have as much mental energy after work to tinker and when I pick up the Odin 2 I really just want it to work. When the Retro Game Corps guide for Steam OS on Odin 2 drops I’ll know it’s time.

This is an entirely different segment of gaming but recently I have been reaching more for my AYN Odin 2 Pro. I love the size and battery life and how I feel like I can pick it up and jump into a game quickly.

Android isn’t perfect and emulation is in a funny spot right now with the switch emulators pivoting what feels like every few weeks, but it’s an incredible device.

That said, the Deck is quite a bit more capable with a higher quality library of games. Valve killed it with the Deck and the Odin is not nearly a full replacement.

Do you really look at him and think he’s the best person to continue running the country? Look at what happened with RBG, who died in office allowing Republicans to load the supreme court with judges who are objectively bad.

Biden was fine and all, but it’s starting to feel like Weekend at Bernies. Better democrat candidates exist.

Edit: I get the down votes, but the truth is that it’s a real concern and confidence is waning. Voters need to be excited and feel confident in their candidate or the turnout will suffer like it did with Hillary. Right or wrong it’s the truth. Strategy is important even if it means making hard uncomfortable decisions.

Your link is to example.com

Possibly, but it doesn’t have anything to do with being on-call.

Eyyy yes! I just picked up an MZ-N505 a few months ago! It’s been great at work to quickly start music without staring at my phone for 5 minutes first.

Eh, it’s not quite the same as other professions. If a sysadmin gets an after hours call, they must work it. If a ride share person is offered a fare, they can accept it or turn it down.

Plex, as a company, definitely is aware of what items are in your library but streams don’t go through the Plex servers unless you use the Plex proxy service which is enabled by default but only used when the client connection speed is too slow to use the desired streaming setting.

Everyone who accesses their Plex externally should use app.plex.tv rather than NAT/port forwarding unless you’re also doing IP whitelisting on the NAT (not feasible for most remote access scenarios, as IPs are dynamic in most cases). Jellyfin should never be exposed externally.

I work in a highly regulated sector of IT and have learned that even the most robust software will have serious exploits at some point.

I have not looked into it for a while but I believe their servers broker a direct connection between the client and server.

I always wonder why some people are so dedicated to Jellyfin. Even if JF had full feature and experience parity, it would still not have secure remote access the way Plex does. There is no need to port forward or NAT Plex for external access if you use app.plex.tv to access. With the threat landscape the way it is today, that is worth a lot.