This commit is contained in:
watchdog 2019-11-29 00:28:05 +01:00 committed by Gitea
commit e43e506495
9 changed files with 65 additions and 12 deletions

View File

@ -375,6 +375,20 @@ Table of contents
> Too many to list here. It is IMPOSSIBLE to list them all! [See for yourself](https://twitter.com/search?q=Cloudflare).
" I just got 3 friends here in Germany to try - and NONE of them can gain access - they get blocked by the same captcha. I'm thinking Cloudflare has Deutsche Telekom blacklisted, or some such." by @[GrayanOne](https://twitter.com/GrayanOne/status/1200057914842587136)
"Just a friendly reminder that if your Black Friday sales page requires someone to: check a Cloudflare “Im not a robot” check box solve a CAPTCHA image its probably not worth the discount." by @[CoryJaccino](https://twitter.com/CoryJaccino/status/1199946959110443008)
"the site seems to use Cloudflare which blocks a lot of users from the start, so a large crowd can't open the site even if it's online" by @[adlerweb](https://twitter.com/adlerweb/status/1199966079126310912)
"Day 2 of trying to get my Cloudflare account deleted. They sure don't make it easy, or logic." by @[originalesushi](https://twitter.com/originalesushi/status/1199041528414527495)
"Just don't make me discover my PII in some future breach or I'll dig up my Cloudflare exodus logs and I'll step on the biggest soapbox I can find to cast hell upon you." by @[originalesushi](https://twitter.com/originalesushi/status/1199063754740314115)
"Hi there ! Your cdnjs is blocked by Stormshield firewall IPS." by @[nivuniconu_](https://twitter.com/nivuniconu_/status/1199988064589950977)
"So many people are hoping for word of an actually decisive move from the Not-Board that cloudflare thinks arseblog's under DDoS attack." by @[fuckmedoris](https://twitter.com/fuckmedoris/status/1200180923649732608)
"Whole thing happened again when I started from the beginning to reset my password, then again when it told me to reactivate my account." by @[JayNBoston](https://twitter.com/JayNBoston/status/1199829882131427333)
"You also send all the traffic to the NSA though Cloudflare — thanks but no thanks!" by @[Mcnst](https://twitter.com/Mcnst/status/1199096502968299520)

View File

@ -23,6 +23,7 @@ The origin webserver administrator allowed the agent to decide [who can access](
---
![](image/cfmarketshare.jpg)
![](image/cloudflaredearuser.jpg)
![](image/usershoulddecide.jpg)

View File

@ -18,6 +18,7 @@ Table of contents
- [Voter suppression](README_ethics.md#voter-suppression)
- [Ignoring user's preference](README_ethics.md#ignoring-user-s-preference)
- [Lying about deleting user's data](README_ethics.md#lying-about-deleting-users-data)
- [Keep your personal information](README_ethics.md#keep-your-personal-information)
---
@ -166,6 +167,25 @@ Their new privacy policy doesn't make any mention of retaining data for a year.
How can you trust Cloudflare if [their privacy policy is a LIE](https://twitter.com/daviddlow/status/1197787135526555648)?
---
### Keep your personal information
Deleting Cloudflare account is [hard level](https://justdeleteme.xyz/).
```
Submit a support ticket using the "Account" category,
and request account deletion in the message body.
You must have no domains or credit cards attached to your account prior to requesting deletion.
```
You will [receive this confirmation email](https://twitter.com/originalesushi/status/1199041528414527495).
![](image/cf_deleteandkeep.jpg)
"We have begun to process your deletion request" but "We will continue to store your personal information".
Can you "trust" this?
---

BIN
image/cf_deleteandkeep.jpg Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 51 KiB

BIN
image/cfmarketshare.jpg Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 75 KiB

View File

@ -1,9 +1,15 @@
# CrimeFlarE
***Why you should say no to Cloudflare***
***Why you should say "NO" to Cloudflare***
## Solutions - Add-ons
| Name | Developer | Support | Can Block | Can Notify |
| -------- | -------- | -------- | -------- | -------- |
| **[Bloku Cloudflaron MITM-Atakon](addon/about.bcma.md)** | Searxes | [Link](https://searxes.eu.org/) | **Yes** | **Yes** |
| **[Ĉu ligoj estas vundeblaj al MITM-atako?](addon/about.ismm.md)** | Searxes | [Link](https://searxes.eu.org/) | No | **Yes** |
| [Block Cloudflare MITM Attack](https://trac.torproject.org/projects/tor/attachment/ticket/24351/block_cloudflare_mitm_attack-1.0.14.1-an%2Bfx.xpi) | nullius | [Link](https://github.com/nym-zone/block_cloudflare_mitm_fx) | **Yes** | **Yes** |
| [TPRB](https://sw.skusklxqaqnrmszytky4vfyrg625erw4hqhiokyc2ufnokd2aitb47yd.onion/) | Sw | [Link](https://sw.skusklxqaqnrmszytky4vfyrg625erw4hqhiokyc2ufnokd2aitb47yd.onion/) | **Yes** | **Yes** |
| [Detect Cloudflare](https://addons.mozilla.org/en-US/firefox/addon/detect-cloudflare/) | Frank Otto | [Link](https://github.com/traktofon/cf-detect) | No | **Yes** |
| [Cloud Firewall](https://addons.mozilla.org/en-US/firefox/addon/cloud-firewall/) | Niklas Poslovski, Gokulakrishna Sudharsan | [Link](https://web.archive.org/web/https://gitlab.com/gkrishnaks/cloud-firewall/) | **Yes** | No |
| [Cloud Firewall](https://addons.mozilla.org/en-US/firefox/addon/cloud-firewall/) | Niklas Poslovski | [Link](https://gitlab.com/gkrishnaks/cloud-firewall/) | **Yes** | No |
See "[What you can do to resist Cloudflare?](../what-to-do.md)" for more information.

View File

@ -1,14 +1,28 @@
# CrimeFlarE
***Why you should say no to Cloudflare***
***Why you should say "NO" to Cloudflare***
## Solutions - Change default DNS provider of firefox
Mozilla (Firefox) has partnered up with Cloudflare and will resolve the
domain names from the application itself via a DNS server from Cloudflare.
Mozilla (Firefox) has partnered up with Cloudflare and will resolve the domain names from the application itself via a DNS server from Cloudflare.
Cloudflare will then be able to read everyones DNS requests.
You can disable it in “about:config". The string value of "network.trr.uri"
should be empty. Some other settings can also contain Cloudflare URLs. It
is recommended to search for "cloudflare". GNU Icecat and older Firefox
versions are not affected *yet*.
> You can disable it in “about:config"
- The string value of "`network.trr.uri`" should be empty.
- The string value of "`network.trr.resolvers`" should be set to `[]`.
> Or in /distribution/policies.json` (Firefox ESR)
```
...
"DNSOverHTTPS": {
"Enabled": false,
"ProviderURL": "https://0.0.0.0/"
},
...
```
Some other settings can also contain Cloudflare URLs. It is recommended to search for "`cloudflare`".
GNU Icecat and older Firefox versions(<68) are not affected *yet*.
![The about:config page which shows the Cloudflare DNS address in the network.trr.uri string.](../image/firefox-cloudflare-dns-settings.jpg)

View File

@ -13,13 +13,11 @@ more aimed at technical people.
We might create a guide for some self-hosting basics which don't require
Cloudflare.
`to consider: Is user---incapsula---origin really okay?`
## Alternatives
| Alternative | Drawback | Price | Link |
| ----------------- | --------------------------------- | ------ | ---- |
| PerimeterX | not gratis | ? | - |
| Impurva incapsula | not gratis | Paid | - |
| Github pages | uses Microsoft servers | Free | https://pages.github.com/ (WARNING: Tor/VPN users will get their [account blocked automatically](https://github.com/crimeflare/cloudflare-tor) by Github) |
| Gitlab pages | uses Google servers | Free | https://gitlab.com/pages/ (WARNING: Some area of Gitlab is Cloudflare) |

View File

@ -89,7 +89,7 @@ If Cloudflare leak your information or won't let you to connect to our servers,
| [Block Cloudflare MITM Attack](https://trac.torproject.org/projects/tor/attachment/ticket/24351/block_cloudflare_mitm_attack-1.0.14.1-an%2Bfx.xpi) | nullius | [Link](https://github.com/nym-zone/block_cloudflare_mitm_fx) | **Yes** | **Yes** |
| [TPRB](https://sw.skusklxqaqnrmszytky4vfyrg625erw4hqhiokyc2ufnokd2aitb47yd.onion/) | Sw | [Link](https://sw.skusklxqaqnrmszytky4vfyrg625erw4hqhiokyc2ufnokd2aitb47yd.onion/) | **Yes** | **Yes** |
| [Detect Cloudflare](https://addons.mozilla.org/en-US/firefox/addon/detect-cloudflare/) | Frank Otto | [Link](https://github.com/traktofon/cf-detect) | No | **Yes** |
| [Cloud Firewall](https://addons.mozilla.org/en-US/firefox/addon/cloud-firewall/) | Gokulakrishna Sudharsan | [Link](https://web.archive.org/web/https://gitlab.com/gkrishnaks/cloud-firewall/) | **Yes** | No |
| [Cloud Firewall](https://addons.mozilla.org/en-US/firefox/addon/cloud-firewall/) | Niklas Poslovski | [Link](https://gitlab.com/gkrishnaks/cloud-firewall/) | **Yes** | No |
- Convince your friends to use [Tor](https://www.torproject.org/download/tor/) on the daily basis. Anonymity should be the standard of the open internet!