Comment

Comment on Can't add or remove saved posts and can't add profile picture

seems like we’re not the only ones trouble by some changes clouflare did to their OWASP ruleset: community.cloudflare.com/t/…/19

this is a change cloudflare did to the detections they have for http requests to our server. this could affect any API calls from any clients towards our API backend, including automod actions. at most however this would prevent some automod actions from being executed, it couldn’t cause e.g. false positives.

source

Sort:hotnew top

HowRu68@lemmy.world ⁨1⁩ ⁨week⁩ ago
Tnx for your reply @MrKaplan@lemmy.world:

Sorry, I’m not very knowledgeable about this stuff.

So the issue lies with cloudflare and not lemmy. wold, correct? So, any info or links about this cloudfare issue known atm?

Could you perhaps please translate this into user experience, like issues with editing a post and / or a comment for users?

And if this has resulted into more strict automod functions as well?

In my case for example, an ealier post was " falsely flagged" and removed.

At this point I don’t care specifically about my old post, but this auto-mod false flag thing, could be a thing maybe?

source
- MrKaplan@lemmy.world ⁨1⁩ ⁨week⁩ ago
  
  the issue lies with cloudflare and not lemmy. wold, correct?
  
  the issue seems to stem from a change done by Cloudflare not too long ago, but that doesn’t mean that we’re unable to work around it. i’m currently implementing some changes that should help with this.
  
  any info or links about this cloudfare issue known atm?
  
  the link was included in my previous comment
  
  please translate this into user experience
  
  for the most part, any “read” operations (looking at a post, comment, user, etc) should not be affected by this. for any “write” operations (login, posting, commenting, editing posts/comments, etc.) there seems to be a higher error rate currently related to this. in those cases the action would simply not be completed, and depending on the client (app, default web interface, alt ui) this could range from and endless loading indicator to an error being displayed to nothing being displayed.
  
  if this has resulted into more strict automod functions
  
  no, and this was not an automod removal. you can see the reason why it was removed in the modlog: lemmy.world/modlog?postId=36129581
  
  you should also have received a message from our automod informing you about the removal, but automod is only informing you about what happened, not the one taking action in this case.
  
  source
  - HowRu68@lemmy.world ⁨1⁩ ⁨week⁩ ago
    
    Thanks and check. Would be nice if you could find a workaround.
    
    Also, TIL, and I just looked up what that OWASP all meant via this link owasp, so like a firewall and the rules.
    
    “Each rule in the OWASP managed ruleset is associated with a paranoia level. Rules associated with higher paranoia levels are considered more aggressive and provide increased protection. However, they might cause more legitimate traffic to get blocked due to false positives.“
    
    And yes, I got a report as to the reason why my Post was removed via the auto-mod. I also consulted the communitymods but no response.
    
    My 95% chance guess is that apperantly the publishers had changed one word in the title, as I always copy the suggested title: the word “Brainwashing” was changed into” Indoctrination” , hours after I made the post… So , still imo a bit of paranoid auto mod.
    
    source