IP enumaration is also pretty trivial. I guess that what attackers might be usin... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

chinathrow on May 5, 2016 | parent | context | favorite | on: Everybody gets WebSockets

IP enumaration is also pretty trivial. I guess that what attackers might be using to "unhide" domains. Scan the net and request the required domain name?

seabee on May 5, 2016 | [–]

That won't work if the origin firewall allows only CloudFlare IP ranges.

homero on May 5, 2016 | [–]

Maybe but this helps https://support.cloudflare.com/hc/en-us/articles/204899617

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact