(untitled)

What are the dangers of Cloudflare on websites? How much data can be accessed by Cloudflare if i use a website with it?

>>65977 >What are the dangers of Cloudflare on websites? Look up Crimeflare http://crimeflare.eu.org Cloudflare is basically MITM. They also often shadow ban Tor (in other words, make you solve endless (?) amount of captchas). You can also use mkproof and Tor (onion site) as alternative to it (I admit that combination doesn't do everything Cloudflare does but it should be good enough).

>>65977 you can't access these websites trough TOR

>>65977 Cloudflare is effectively a centralization of decentralization. Imagine I want to have the ability to publish articles and know how having a single source for them that can easily be drowned out is stupid. So, I distribute a cryptographic key and sign these articles, then allowing anyone in the network to redistribute them. My readers can read what I write and verify it to be what I've written. Importantly, I can't reasonably get statistics or other things which depend upon a global view. Cloudflare can be thought of as similar, but the entire network is controlled by a single entity who has much greater control than anyone in this decentralized system would have and, further unlike this decentralized system, Cloudflare is unwilling to allow new people to freely join the network and is able to transparently modify any traffic without any reader being able to tell the difference.

>>65977 If you're just visiting sites that use cloudflare, there's not really a problem. There's the same data mining and tracking you have to worry about everywhere but on a larger scale since cloudflare is used by so many sites. So you visit site A and site B and both use cloudflare, cloudflare can build a profile of you through that knowledge, and they can know roughly how much time you spend on the sites. That's the biggest issue to me. If the site you're visiting doesn't use use TLS, they could also spy on your traffic, but that's more a reason to never use sites that don't use TLS. Some people hate cloudflare because they kicked 8chan off for, well, being 8chan, and the people who dislike it usually frame it as if cloudflare is a massive censorship machine. I don't care about 8chan, but it is important to note that governments could force any 3rd party DDoS protection service to suspend protections for clients. There are some conspiracies that cloudflare pays for DDoS attacks against non-users to turn them into users, which is certainly a plausible strategy for any DDoS protection company, but to my knowledge there is no proof of this. >>65980 >>65983 >banning Tor Is there a reliable source for this? I've accessed cloudflare sites using Tor and never had issues with the catchall. Is it only restricted during attacks? >is able to transparently modify any traffic without any reader being able to tell the difference. Cloudflare doesn't have access to the site's SSL keys so this is only true for sites that don't implement TLS, or maybe sites that use Cloudflare's SSL service depending on how those keys are generated. But I can't find any instance where cloudflare actually modified any sites content during delivery.

>>65987 >Is there a reliable source for this? I've accessed cloudflare sites using Tor and never had issues with the catchall. Is it only restricted during attacks? I've personally only had issues with POST on tor, but some places have outright now allowed me in. I think cloudflare allows the server operator to choose whether to disallow tor outright or just disallow POST.

>>65985 the web was never decentralized you stupid fuarrrk. what is with it with ib aspies and making this conflation? call it federated or whatever gay buzzword you want. decentralized means nodes are fungible and each one contributes to the strength or security of the network, as in bit torrent, freenet, bitcoin, etc

>>65977 cloudflare is fuarrrking garbage and youre gay if you use it - requires JS for "under attack mode" pages - requires browser fingerprint to match their whitelist if you use a proxy that is in the ban list (i.e, every proxy vpn and tor node in existence) - tries to prevent web scraping (hence why the above exists) - has a WAF (obsolete 90s garbage snakeoil, also why above exists) - predictably, their WAF backfired and caused stack smashing tier vulnerabilities in their infra, leading to private sessions of banks leaking to other customers

>>65987 >Is there a reliable source for this? I've accessed cloudflare sites using Tor and never had issues with the catchall. Is it only restricted during attacks? open a page without tor browser and you'll see how this actually works. also, they only unblocked tor browser in 2018, they still had around 8 years or so of blocking tor non stop

>>65987 i mean (in case there is any confusion): open a page with tor but with a browser other than tor browser

If you Lains were to try to convince a dev of a site to change from Cloudflare what would be the better alternatives?

>>65998 not cloudflare /thread

>>65998 Do what kiwifarms did

>How much data can be accessed by Cloudflare if i use a website with it? everything that is sent to cloudflare can be read by cloudflare. it is like MITM attack.

>>66053 I wouldn't call it "like MITM attack". It out right is a MITM. Many people seem to not understand how genuinely bad this is, in both privacy AND security. All it takes is one guy getting into their database, because you know damn well they save everything.

>>65998 The issue is that there aren't a lot of alternatives, and the alternatives that do exist aren't free, and still require the same level of access as CF to user data, which does make them just as bad.

They bent the knee to international censorship right after explaining that doing so would not and that doing so always results in all governments and corporations pushing and getting more

>>65998 Hi roll. I am glad you didj't just listen to agent Smith back home and are doing your due research. Remember to tell lain that the reason you are being advertised MitMflare is to mitigate CP spam.

>>67036 IIRC there are ways to configure commercial firewalls and IDS/IPS that prevent DDoSing via packet filtering. I keep hearing "just use the cloud to prevent DDoS" but no idea how a cloud is supposed to stop excessive traffic to a system.