/meta/ - meta

>cloudflare
really nigga?

>cuckflare
I don't think it works on tor, which kinda defeats its purpose on blocking images. (I'm also not sure what false positive and negative rates it has. To be honest, CP is the only annoying thing, I'm not sure what else it would block.) Plus it harasses users with javashit and jewgle captcha. And whenever the ceo has a bad day, he nukes a site. Plus one more party to collect all kinds of data (and they have access to the plaintext). I don't want anything like this until I really need it, and even in that case I'd look for alternatives first.
>It also helps to block proxies as well
This is not cuckchan, proxies have legitimate use cases, and as long as they don't create a huge problem I don't care (and since all the IP addresses are hashed in the DB, I'm not even sure what post comes from a proxy and what not)

>https://archive.is/0nxyG
Cuckflare collects data and man-in-middles connections with their DDoS protection.

Cuckflare has infected too many websites as it is, even websites that aren't even mainstream, like VidLii and fanfiction.net and nyaa.si. It sucks and forces everyone to de-anonymize themselves on any website that uses it.

If it's just to stop CP perceptual hashes like phash work just as well. Just hash every file posted and you'll know if it's too similar to a previous flagged image without having to keep CP in your server and without having to rely on cloudflare.

ClipboardImage.png
[Hide] (5.1KB, 324x88)

>>46
I use it mostly as a reverse proxy for anti-DoS (network layers). I also found it convenient for blocking ASNs when we got raided by a /pol/ user obsessively posting CP from a VPS and changing location.
Neither of those seem necessary to you unless you start hosting a drama-bait board in the future. But on my site it was under attack from individual and in one case state-sponsored actors (someone pissed off a country in SEA lol).
Fuck PRISM and all that, but unless you have private boards or self-host, then basically everything except post passwords and staff settings is public information hosted on commercial servers anyway and nerds have darknet options and proxies if they actually care about their infosec. If Cloudflare ruins a user's privacy model on an anonymous imageboard, it was never effective in the first place. (@ >>61)

>>67
phash is great for the current CP spammers, where they change the hash but the phash remains close, and where IIRC they usually stick with the same picture for a while.

>>67
Actually I have a very simple perceptual hash thing hacked together (that almost took down the server yesterday, imagemagick is shit. Might be the reason behind some "Something broke" errors some anons were getting.). It's a bit manual right now, any kind of automation is not a high priority for me now right now.

>>139
Why not use jschan's built-in fuzzy hash? It's werked for me so far for filtering commercial CSAM.

>>168
1. It didn't exists when I started using the current solution
2. As far as I know it can only match for an exact fuzzy hash which kinda defeats the purpose, small differences are the same. I think this helped catch me CP images which were the same but with a different URL watermark.

a5e524489a191132af5fcde353e19225f49b9bf10ad1fdafc43794ff51610064.jpg
[Hide] (80.9KB, 700x700)

>>170
Fair point, you've been on jschan longer than I have. With jschan's implementation it takes some massaging to match nearly identical images, but it doesn't just match the exact file. For example, here are two hashes from spam posts:
ff00c1d57a61a8ba
ff00c1d57a61e8b8
All I have to do is filter for ff00c1d57a61a and ff00c1d57a61e to stop future spam for that specific image, variants included. Sounds like your implementation is more finely tuned, though.

Since we're on the topic of spam, I'll shill XJ-9K to you:
https://xj9k.neocities.org/
https://junkuchan.org/origin/thread/457.html#4449
I haven't implemented anything from them yet but it is a pretty neat project.

>>175
Feels pretty tedious. If you calculate the hamming distance between the two hashes, you'll see that's 2. If jschan could do it, you could just add a filter for ff00c1d57a61a8ba and (say) max distance=2, and it would match both. And also ff00c1d57a61acbe, which is also bound to be similar.

My "hashes" look like this:
	'CP1': [
		0.489656, 0.0675636,  1.60258,	 1.42863,
		3.52474,   1.38529,	 3.44002,	1.75575,
		6.98833,	3.4452,	  4.3161,	2.47032,
		7.21341,   3.51376, 0.424894, 0.0113652,
		1.53821,  0.507692,	 3.73382,	1.27282,
		3.30786,   1.60575,	 6.93337,	3.04631,
		4.18564,   1.87194,	  7.0374,	4.16202,
		0.352069,  0.437672,  1.49136,	 1.54866,
		4.65797,   3.70002,	 3.47888,	3.36337,
		7.54734,   6.99339,	 4.76161,	4.24589,
		9.50999,	7.1144
	],
Which is a pretty unholy sight, but this is what imagemagick produces. Then I can calculate the mean squared error and block if it is too high. But the current solution is pretty slow and resource heavy, so I will likely explore other options in the future.

>>176
I should have given ff00c1d57a21e8ba as a second example, because what I gave is also matched by your filter.

>>176
It hasn't been too tedious on my end, but I've been stopping them in other ways that involve less whack-a-mole. I'll have to peek at your source code and see if your method works for me sometime. With regards to imagemagick, GraphicsMagick just werks for me, your mileage may vary.