pull down to refresh

Something this article doesn't mention is that Cloudflare breaks HTTPS. I'm guessing this person hasn't mentioned it because cloudflare has hidden this fact very carefully and even "privacy bros" don't look into things enough. Cloudflare ddos protection acts as a MITM, everything is run through THEIR certificates. So any site that uses their ddos protection, cloudflare can see literally everything you do on the site. where you go on the site, what information you send to the server, etc, it's all transparent to them.

And yes they are a Global Active Adversary. The NSA realized that trying to gobble the entire internet by themselves was retarded, so they use Cloudflare and Akami and Amazon and all the major hosting services to do their work for them. even SimpleX uses Akami servers for example.

In order to stay anon, you can no longer use just one solution anymore. you have to build your own relay consisting of carefully picked and randomized nodes using VPN, TOR/I2P, proxies, dVPN, etc etc

More information about how exactly the Man-in-the-middle cloudflare attack works:
https://www.troyhunt.com/cloudflare-ssl-and-unhealthy-security-absolutism/ (ironically connects to cloudflare)
https://github.com/nym-zone/block_cloudflare_mitm_fx/issues/15#issuecomment-354773389

Government ties, links to many other info sources:
https://xn--gckvb8fzb.com/thoughts-on-cloudflare/ (onion)

Famous info dump:
https://0xacab.org/dCF/deCloudflare/-/blob/master/readme/en.md

reply

Cloudflare has been on my shitlist ever since it booted kf off, while still providing services to various other illegal and controversial websites. Thank goodness people worked to create alternatives ie Tartarus, and that anime girl one used on some file hosting sites iykyk

reply
that anime girl one used on some file hosting sites

You're talking about Anubis, and it is garbage, it's always fucking BREAKING and not working. The latest issue is the one that keeps telling you that you dont have cookies enabled.

It's used on most privacy frontends for some fucking reason. Privacy frontends were already a shoddy solution at best, then Anubis tranime furry shit came along and ruined the rest of the good ones, it's impossible to use any privacy frontend now. I curse Anubis, trannies ruin literally everything.

reply

I realize it's not ideal, but these frontends need protection from bots and AI scrapers. I'll tale Anubis over Cloudflare any day, at least it works on TOR.

reply

Wow, this is scathing and a high quality critique.

reply

Yup. Check this out when you have a chance.

reply