# Does this board use a security company like Cloudflare or BitMitigate? **URL:** \ **Category:** About This Message Board\ **Created:** [August 6, 2019, 1:39am UTC](https://boards.straightdope.com/t/does-this-board-use-a-security-company-like-cloudflare-or-bitmitigate/838212 "2019-08-06T01:39:02Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![aceplace57](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/aceplace57/32/3500_2.png) [@aceplace57](https://boards.straightdope.com/u/aceplace57)\ **Post date:** [August 6, 2019, 1:39am UTC](https://boards.straightdope.com/t/does-this-board-use-a-security-company-like-cloudflare-or-bitmitigate/838212/1 "2019-08-06T01:39:02Z")
I’ve been following the news about 8chan. Was surprised to learn that companies like Cloudflare and BitMitigate protect web sites from attacks. I recall this board has been hit by denial-of-service attacks. If the SDMB is using BitMitigate they need to find another provider. The SDMB isn’t controversial, but there are plenty of hackers out there that will attack anyone. > **[Online providers knock 8chan offline after mass shooting](https://apnews.com/article/us-news-ap-top-news-social-platforms-international-news-shootings-f82d6b27caf64167852ace2dad6c0c63)** > > BOSTON (AP) — The online message board 8chan was effectively knocked offline Monday after two companies cut off vital technical services following the mass shooting in El Paso, Texas , whose perpetrator was linked to the site. 8chan is known for... > [@](#): > > Like Cloudflare, BitMitigate protects web sites from denial-of-service attacks that can make them unreachable — the kind of online armor that contentious message boards require to survive. > > But on Monday, London-based Voxility, a provider of network hardware and services, upended both Epik and BitMitigate by terminating its contract with the companies, said Maria Sirbu, the company’s vice president of business development. ---
**Author:** ![TubaDiva](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/tubadiva/32/507_2.png) [@TubaDiva](https://boards.straightdope.com/u/TubaDiva)\ **Post date:** [August 6, 2019, 1:45am UTC](https://boards.straightdope.com/t/does-this-board-use-a-security-company-like-cloudflare-or-bitmitigate/838212/2 "2019-08-06T01:45:09Z")
Dunno but that’s part of the deal, isn’t it? That’s not the kind of information a company wants to make public – they don’t want to talk about their security measures because it IS a matter of security. Jenny your humble TubaDiva Administrator ---
**Author:** ![aceplace57](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/aceplace57/32/3500_2.png) [@aceplace57](https://boards.straightdope.com/u/aceplace57)\ **Post date:** [August 6, 2019, 2:10am UTC](https://boards.straightdope.com/t/does-this-board-use-a-security-company-like-cloudflare-or-bitmitigate/838212/3 "2019-08-06T02:10:08Z")
Sometimes it helps to let people know a place is protected. A lot of people put ADT signs in their yard. Some of them aren’t clients of that company. The signs often work anyway. I understand the board doesn’t want to give out specific information about security. ---
**Author:** ![steronz](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/steronz/32/11765_2.png) [@steronz](https://boards.straightdope.com/u/steronz)\ **Post date:** [August 6, 2019, 2:46am UTC](https://boards.straightdope.com/t/does-this-board-use-a-security-company-like-cloudflare-or-bitmitigate/838212/4 "2019-08-06T02:46:08Z")
> [@TubaDiva](#): > > Dunno but that’s part of the deal, isn’t it? That’s not the kind of information a company wants to make public – they don’t want to talk about their security measures because it IS a matter of security. > > Jenny > your humble TubaDiva > Administrator Generally speaking, security through obscurity isn’t security at all. Like, if you have a lock, you might think you wouldn’t want to advertise what kind of lock it is because that would attract people who might know that particular lock’s weakness, but a true lock picking expert wouldn’t be stymied by that – they’re going to recognize the lock and know its weakness. Better to get a good lock in the first place than hope to keep its weaknesses secret. Plus, you know, if Cloudflare is providing DDoS protection all traffic is going to be routed through their servers anyway, which is going to let the cat out of the bag. To answer the OP, it looks like SDMB is hosted on Google’s cloud, so they’re going to be the ones providing DDoS protection. ---
**Author:** ![Darren\_Garrison](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/darren_garrison/32/92_2.png) [@Darren\_Garrison](https://boards.straightdope.com/u/Darren_Garrison)\ **Post date:** [August 6, 2019, 4:10am UTC](https://boards.straightdope.com/t/does-this-board-use-a-security-company-like-cloudflare-or-bitmitigate/838212/5 "2019-08-06T04:10:55Z")
> [@TubaDiva](#): > > Dunno but that’s part of the deal, isn’t it? That’s not the kind of information a company wants to make public – they don’t want to talk about their security measures because it IS a matter of security. > > Jenny > your humble TubaDiva > Administrator Not at all (I explain to _the site administrator_). When there are problems with a site, Cloudflare displays (to the user at home) error messages such as [this](https://support.cloudflare.com/hc/article_attachments/115003660331/image1.png). Nothing secret. You don’t have Cloudflare. ---
**Author:** ![Helena330](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/helena330/32/531_2.png) [@Helena330](https://boards.straightdope.com/u/Helena330)\ **Post date:** [August 6, 2019, 5:06am UTC](https://boards.straightdope.com/t/does-this-board-use-a-security-company-like-cloudflare-or-bitmitigate/838212/6 "2019-08-06T05:06:36Z")
Here’s a thought: \*Maybe they don’t want to talk about it. \* ---
**Author:** ![Snowboarder\_Bo](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/snowboarder_bo/32/229_2.png) [@Snowboarder\_Bo](https://boards.straightdope.com/u/Snowboarder_Bo)\ **Post date:** [August 6, 2019, 5:45am UTC](https://boards.straightdope.com/t/does-this-board-use-a-security-company-like-cloudflare-or-bitmitigate/838212/7 "2019-08-06T05:45:34Z")
> [@steronz](#): > > Generally speaking, security through obscurity isn’t security at all. Like, if you have a lock, you might think you wouldn’t want to advertise what kind of lock it is because that would attract people who might know that particular lock’s weakness, but a true lock picking expert wouldn’t be stymied by that – they’re going to recognize the lock and know its weakness. Better to get a good lock in the first place than hope to keep its weaknesses secret. Lemme see… so if I get, say, a Master lock, then anyone who wants to look it up could pick the lock, including a lock pick expert. But if I get a lock and no one knows what kind of lock it is, only a lock pick expert could pick the lock. But you think it makes more sense to get the Master lock? :dubious::rolleyes: ---
**Author:** ![steronz](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/steronz/32/11765_2.png) [@steronz](https://boards.straightdope.com/u/steronz)\ **Post date:** [August 6, 2019, 5:53am UTC](https://boards.straightdope.com/t/does-this-board-use-a-security-company-like-cloudflare-or-bitmitigate/838212/8 "2019-08-06T05:53:30Z")
> [@Snowboarder\_Bo](#): > > Lemme see… so if I get, say, a Master lock, then anyone who wants to look it up could pick the lock, including a lock pick expert. > > But if I get a lock and no one knows what kind of lock it is, only a lock pick expert could pick the lock. > > But you think it makes more sense to get the Master lock? > > :dubious::rolleyes: [I’m not making this up.](https://en.wikipedia.org/wiki/Security_through_obscurity) > [@That wiki](#): > > An early opponent of security through obscurity was the locksmith Alfred Charles Hobbs, who in 1851 demonstrated to the public how state-of-the-art locks could be picked and who, in response to concerns that exposing security flaws in the design of locks could make them more vulnerable to criminals, said: “Rogues are very keen in their profession, and know already much more than we can teach them”. The principal is that your lock should be unpickable, rather than having a pickable lock and keeping its identity (and its flaws) secret. ---
**Author:** ![Sunny\_Daze](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/sunny_daze/32/438_2.png) [@Sunny\_Daze](https://boards.straightdope.com/u/Sunny_Daze)\ **Post date:** [August 6, 2019, 7:45am UTC](https://boards.straightdope.com/t/does-this-board-use-a-security-company-like-cloudflare-or-bitmitigate/838212/9 "2019-08-06T07:45:46Z")
The idea is that obscurity should not be your only defense. This is not the same idea as telling the adversary what your defenses are. ---
**Author:** ![Snowboarder\_Bo](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/snowboarder_bo/32/229_2.png) [@Snowboarder\_Bo](https://boards.straightdope.com/u/Snowboarder_Bo)\ **Post date:** [August 6, 2019, 3:30pm UTC](https://boards.straightdope.com/t/does-this-board-use-a-security-company-like-cloudflare-or-bitmitigate/838212/10 "2019-08-06T15:30:55Z")
> [@Sunny\_Daze](#): > > The idea is that obscurity should not be your only defense. This is not the same idea as telling the adversary what your defenses are. Aye. ---
**Author:** ![TubaDiva](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/tubadiva/32/507_2.png) [@TubaDiva](https://boards.straightdope.com/u/TubaDiva)\ **Post date:** [August 6, 2019, 4:40pm UTC](https://boards.straightdope.com/t/does-this-board-use-a-security-company-like-cloudflare-or-bitmitigate/838212/11 "2019-08-06T16:40:44Z")
Please note that everything about the Chicago Sun-Times is private; it’s a privately held company. As a general rule they do not talk overmuch about anything except that they want you to buy the paper and subscribe to their services. Jenny your humble TubaDiva Administrator ---
**Author:** ![Derleth](https://avatars.discourse-cdn.com/v4/letter/d/b9e5f3/32.png) [@Derleth](https://boards.straightdope.com/u/Derleth)\ **Post date:** [August 6, 2019, 5:11pm UTC](https://boards.straightdope.com/t/does-this-board-use-a-security-company-like-cloudflare-or-bitmitigate/838212/12 "2019-08-06T17:11:19Z")
> [@Sunny\_Daze](#): > > The idea is that obscurity should not be your only defense. This is not the same idea as telling the adversary what your defenses are. No, you assume your adversary knows what your defenses are, because it gives them no advantage to know any such thing assuming you’re competent. ---
**Author:** ![DPRK](https://avatars.discourse-cdn.com/v4/letter/d/4491bb/32.png) [@DPRK](https://boards.straightdope.com/u/DPRK)\ **Post date:** [August 6, 2019, 5:38pm UTC](https://boards.straightdope.com/t/does-this-board-use-a-security-company-like-cloudflare-or-bitmitigate/838212/13 "2019-08-06T17:38:01Z")
Who are the Sun-Times’s adversaries? ---
**Author:** ![Sunny\_Daze](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/sunny_daze/32/438_2.png) [@Sunny\_Daze](https://boards.straightdope.com/u/Sunny_Daze)\ **Post date:** [August 6, 2019, 5:39pm UTC](https://boards.straightdope.com/t/does-this-board-use-a-security-company-like-cloudflare-or-bitmitigate/838212/14 "2019-08-06T17:39:50Z")
Your statement in no way contradicts mine. However, given the state of computer security I disagree that telling attackers exactly how you’re defended makes sense. ---
**Author:** ![Derleth](https://avatars.discourse-cdn.com/v4/letter/d/b9e5f3/32.png) [@Derleth](https://boards.straightdope.com/u/Derleth)\ **Post date:** [August 6, 2019, 6:07pm UTC](https://boards.straightdope.com/t/does-this-board-use-a-security-company-like-cloudflare-or-bitmitigate/838212/15 "2019-08-06T18:07:39Z")
> [@DPRK](#): > > Who are the Sun-Times’s adversaries? Realistically, spammers. > [@Sunny\_Daze](#): > > Your statement in no way contradicts mine. However, given the state of computer security I disagree that telling attackers exactly how you’re defended makes sense. Thinking secrecy protects you is wrong. That’s my point. ---
**Author:** ![steronz](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/steronz/32/11765_2.png) [@steronz](https://boards.straightdope.com/u/steronz)\ **Post date:** [August 6, 2019, 6:17pm UTC](https://boards.straightdope.com/t/does-this-board-use-a-security-company-like-cloudflare-or-bitmitigate/838212/16 "2019-08-06T18:17:59Z")
Y’all may be reading too much into my choice of the word “advertise” in post #4. Certainly there’s no sense in putting up a big neon sign advertising the brand of lock you’re using, that gets you nothing. However, if a friend asks you what kind of lock you bought to lock up your bike, and you’re hesitant to tell her because you’re afraid some nefarious actor might overhear you, that’s probably a sign that you’re thinking about security wrong. In the same way, if someone asks what DDoS protection your site uses and you’re hesitant to tell them because you think it will hurt your security for people to know, you’re probably thinking about it wrong. And it’s especially silly in the case of DDoS protection, because there’s basically no way to actually keep that a secret – a simple traceroute will tell anyone what you’re using if you’re using a 3rd party service provider. In any case, this is ATMB not GD and the question has been answered. ---
**Author:** ![AlsoNamedBort](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/alsonamedbort/32/3213_2.png) [@AlsoNamedBort](https://boards.straightdope.com/u/AlsoNamedBort)\ **Post date:** [August 6, 2019, 6:27pm UTC](https://boards.straightdope.com/t/does-this-board-use-a-security-company-like-cloudflare-or-bitmitigate/838212/17 "2019-08-06T18:27:30Z")
> [@DPRK](#): > > Who are the Sun-Times’s adversaries? The Tribune is coming! The Tribune is coming! ---
**Author:** ![Atamasama](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/atamasama/32/12961_2.png) [@Atamasama](https://boards.straightdope.com/u/Atamasama)\ **Post date:** [August 6, 2019, 7:37pm UTC](https://boards.straightdope.com/t/does-this-board-use-a-security-company-like-cloudflare-or-bitmitigate/838212/18 "2019-08-06T19:37:10Z")
I hope the arch-rival of the _Sun-Times_ is the _Moon-Spaces_. ---
**Author:** ![Derleth](https://avatars.discourse-cdn.com/v4/letter/d/b9e5f3/32.png) [@Derleth](https://boards.straightdope.com/u/Derleth)\ **Post date:** [August 6, 2019, 8:27pm UTC](https://boards.straightdope.com/t/does-this-board-use-a-security-company-like-cloudflare-or-bitmitigate/838212/19 "2019-08-06T20:27:15Z")
> [@Atamasama](#): > > I hope the arch-rival of the _Sun-Times_ is the _Moon-Spaces_. You mean the _Washington Times_? ---
**Author:** ![Snowboarder\_Bo](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/snowboarder_bo/32/229_2.png) [@Snowboarder\_Bo](https://boards.straightdope.com/u/Snowboarder_Bo)\ **Post date:** [August 6, 2019, 8:32pm UTC](https://boards.straightdope.com/t/does-this-board-use-a-security-company-like-cloudflare-or-bitmitigate/838212/20 "2019-08-06T20:32:00Z")
> [@Derleth](#): > > Realistically, spammers. > > Thinking secrecy protects you is wrong. That’s my point. …and that’s why governments everywhere no longer classify information as secret, right? :dubious: [Next page](https://boards.straightdope.com/t/does-this-board-use-a-security-company-like-cloudflare-or-bitmitigate/838212.md?page=2)