Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
YouTube Security VideosVisual Studio Code: VS Code Learn: Extending Agents(24.09.2026 um 21:00 Uhr)
•
YouTube Security VideosGoogle Cloud Tech: Turn Audio into Action with Gemini 3.5 Transcribe(24.09.2026 um 21:00 Uhr)
••••
Unix & Linux ServerUSN-8815-1: libass vulnerabilities(24.09.2026 um 16:57 Uhr)
•••••
YouTube Security VideosVisual Studio Code: VS Code Learn: Extending Agents(24.09.2026 um 21:00 Uhr)
•
YouTube Security VideosGoogle Cloud Tech: Turn Audio into Action with Gemini 3.5 Transcribe(24.09.2026 um 21:00 Uhr)
••••
Unix & Linux ServerUSN-8815-1: libass vulnerabilities(24.09.2026 um 16:57 Uhr)
•••••
Intelligence View
⚡ tsecurity.de Intelligence

The zero-egress trick that lets me give away a media tool for free

I run a small free tool called imgi. You drop in two images, drag a slider to compare them, and get a permanent link to paste anywhere. Before and after shots, mostly: a photo edit against the untouched shot, a game mod next to vanilla, an…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

I run a small free tool called imgi. You drop in two images, drag a slider to compare them, and get a permanent link to paste anywhere. Before and after shots, mostly: a photo edit against the untouched shot, a game mod next to vanilla, an AI upscale against the source file.



Here's what nobody warns you about when you build one of these. The hard part isn't the slider. It's the bandwidth bill.



Every viewer who opens a comparison pulls down two full-resolution images. One link that catches on, a few thousand views, and you're pushing gigabytes out the door. On most cloud storage the egress is what gets you. AWS S3 charges about $0.09 per GB to send data out, and storage itself runs around $0.023/GB a month, so holding onto the file is cheap and handing it to people over and over is where the meter actually runs.



Run the numbers on something that's supposed to be free and shareable. A single before/after pair might be 8MB. Ten thousand views is 80GB leaving the building, call it seven bucks for one link. Feels like nothing until a few comparisons actually spread and you're looking at hundreds of them. That's the quiet reason a lot of free image tools bolt on limits, or drown the page in ads, or just disappear one morning after the founder finally does the math. imgsli, the before/after tool a ton of people leaned on for years, went offline a while back. I don't know their reasons and I won't invent them. But I recognize the shape of the problem, because I stared at the same spreadsheet before I wrote a line of code.






The one line item that changes everything



The fix that made imgi viable is boring, and it's the whole game: Cloudflare R2 doesn't charge for egress. Zero dollars per GB out, no asterisk. You pay for storage (about $0.015/GB a month, a hair under S3) and for operations, and then serving the bytes is free no matter how far a link travels. That 80GB comparison that would've cost me seven dollars on S3 costs me nothing to hand out. Cloudflare's own comparison puts a 20TB-a-month media workload at over $1,700 in S3 egress versus basically storage-only on R2.



Once the egress line reads $0, I can say "free forever, links that don't rot" and actually mean it, rather than it being the kind of promise that gets walked back in eighteen months when the invoice starts to sting.






The rest of the stack



Everything else sits on the same platform so I'm not paying for a server that idles at 3am:




  • Next.js on the App Router, but deployed to Cloudflare Workers through @opennextjs/cloudflare instead of a Node box. The SSR runs at the edge.

  • R2 for the image bytes.

  • D1, Cloudflare's SQLite, for the little scrap of metadata each comparison needs: the short ID, which two R2 keys it points at, the labels on each side.

  • Workers Analytics Engine to count views without a cookie or a third-party script.






The gotcha that cost me an afternoon



On Workers you're billed and rate-limited per request, and the obvious setup routes every image fetch through the Worker. That's one invocation per image, per viewer. It piles up fast enough to trip limits during a spike, which is exactly when you don't want your site falling over. So the images serve straight off R2's own path now, and a view doesn't wake the Worker for each file it needs. The Worker just handles the page and the routing; the actual image bytes never touch it. If you build anything media-heavy on Workers, sort that split out early, ask me how I know.






The slider, since that's what you came for



Two images stacked in the same box, identical dimensions, absolutely positioned so they overlap pixel for pixel. The top one gets clipped and you drag the clip edge across. No canvas and no library, nothing re-rendering on every frame either. Pointer events cover mouse and touch, arrow keys cover the people who'd rather not touch a mouse, and a little care keeps it from fighting the page scroll on a phone. That's most of it, honestly. Which is why it still feels a bit funny that the slider is the part everyone asks about, when it was the easy bit.



One detail I do care about: every image comes back byte-for-byte identical to what went up. No silent recompression. Plenty of hosts squeeze your file to save on, you guessed it, storage and bandwidth. When the whole job of the tool is judging fine detail in an upscale or a retouch, a quietly crushed image ruins the point. Because R2 isn't charging me for the bytes, I don't have to touch them.






Why I bothered writing this



You can go poke at imgi.co if you want, no signup, and there's an offline mode that runs the comparison entirely in your browser without uploading a thing. Mostly though I typed this up for the R2 point. The tool is just where I happened to run into it. If you've got a side project that dies on the spreadsheet the second you price the bandwidth, go re-price it against zero egress. A whole category of "too expensive to give away" ideas quietly comes back to life.






Sources for the pricing figures: Cloudflare R2 vs S3.

CTI Threat Relationship Graph3 Knoten / 2 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
SOC Incident Playbook: Remote Code Execution (RCE) Defense
Syntax validiert (0 Fehler)
title: Detect Exploitation - The zero-egress trick that lets me give away a media tool for free
id: 507c318d-d713-4566-a86b-8f7a073e0254
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "The zero-egress trick that let" ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("The zero-egress trick that lets me give ")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
message: "*The zero-egress trick that lets me give *"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where Message has "The zero-egress trick that lets me give "
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich The zero-egress trick that lets me give .... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten The zero-egress trick that lets me give away a media tool for free

Thematisch verwandte Begriffe: zeroegress, trick, that, lets · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-61782 | Rsdoctor is a build analyzer tailored for projects built with Rspack. Pr…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel • Rechts: nächster Artikel • unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel TTP ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...
↗ Original-Quelle