Jeff Cliff 2019-05-05 15:23:38 -04:00
commit f8dc65cde0
13 changed files with 846 additions and 21 deletions

View File

@ -7,7 +7,7 @@
* Else -- [PUBLIC DOMAIN (CC0)](https://web.archive.org/web/https://creativecommons.org/share-your-work/public-domain/cc0/)
This repository, cloudflare-tor, is in the PUBLIC DOMAIN (CC0).
This repository, _cloudflare-tor_, is in the PUBLIC DOMAIN (CC0).
It was created anonymously, in public, for the use of the world to resist [Cloudflare](https://cloudflare.com/).
Contributors who have anonymously contributed (including in CryptoParty) have since come forward to give this project their blessing.
Contributors who have anonymously contributed (including in [CryptoParty](https://cryptoparty.at/cryptoparty_wien_53)) have since come forward to give this project their blessing.

View File

@ -1,3 +1,12 @@
*2019.04.04*
@holydevil@birdsite:
```
The log file from your iOS app shows that you do track personal information, like device name, UUID, and an identifier - install_id That contradicts what you have in your blogpost - “We don't write user-identifiable log data to disk”
```
https://twitter.com/holydevil/status/1112769739045158912
*2019.03.13*
@thexpaw@birdsite:

407
PEOPLE.md
View File

@ -1,10 +1,15 @@
# Other Voice
# Other Voices
!["Cloudflare is not an option."](image/cfisnotanoption.jpg)
"_You shouldn't use it if you value visitor's privacy._" -- [Searxes](https://searxes.danwin1210.me/)
```
format:
"[TITLE](https://full.link/blog.html)" by [Who](Link)
Not Twitter, Toot
> "[TITLE](https://full.link/blog.html)" by [Who](Link)
Twitter, Toot
> "[SHORT TEXT]" by @[Who](Link)
Sort:
Recent article: top
@ -15,19 +20,39 @@ Disqualify:
- Twitter/Mastodon: too short text
```
###### Can't find your URL? Don't be shy, notify us.
------
###### News
"[Internet security CEO explained why his company exposed people to harassment, and suggested they should've used fake names](https://web.archive.org/web/20171024040313/http://www.businessinsider.com/cloudflare-ceo-suggests-people-who-report-online-abuse-use-fake-names-2017-5)" by [Julie Bort](http://www.businessinsider.com/author/julie-bort)
"[Cloudflare CEO Terminates Neo-Nazi Site After 'Waking Up in a Bad Mood'](https://www.zerohedge.com/news/2017-08-17/cloudflare-ceo-terminates-neo-nazi-site-after-waking-bad-mood)" by [The_Real_Fly](https://www.zerohedge.com/users/therealfly)
"[Cloudflare CEO on Terminating Service to Neo-Nazi Site: 'The Daily Stormer Are Assholes'](https://gizmodo.com/cloudflare-ceo-on-terminating-service-to-neo-nazi-site-1797915295)" by [Kate Conger](https://kinja.com/conger)
"[Zaradi hrošča iz Cloudflara več mesecev curljalo](https://slo-tech.com/novice/t694836/p5445996)" by [Slo-Tech](https://slo-tech.com/)
"[Everything You Need to Know About Cloudbleed, the Latest Internet Security Disaster](https://gizmodo.com/everything-you-need-to-know-about-cloudbleed-the-lates-1792710616)" by [Adam Clark Estes](https://kinja.com/ace)
"[Why Cloudflare Let an Extremist Stronghold Burn](https://www.wired.com/story/free-speech-issue-cloudflare/)" by [Steven Johnson](https://www.wired.com/author/steven-johnson/)
------
###### Blog
(Just don't add Medium.com articles. It's cloudflared. It doesn't matter he/she write great article)
"[I dont trust Cloudflares 1.1.1.1 App and Warp VPN](https://blog.kareldonk.com/i-dont-trust-cloudflares-1-1-1-1-app-and-warp-vpn/)" by [Karel Donk](https://blog.kareldonk.com/)
"[Dont Use Cloudflare Because You Impose This on People Who Least Want It](http://techrights.org/2019/02/17/the-cloudflare-trap/)" by [Dr. Roy Schestowitz](http://techrights.org/)
"[Cloudflare: The bad, the worse and the ugly?](http://webschauder.de/cloudflare-the-bad-the-worse-and-the-ugly/)" by [Alle Beiträge](http://webschauder.de/author/jw/)
"[I dont trust Cloudflare with IPFS](https://blog.kareldonk.com/i-dont-trust-cloudflare-with-ipfs/)" by [Karel Donk](https://blog.kareldonk.com/)
"[Cloudflare IPFS experiment](https://js.ipfs.io/ipns/QmZJBQBXX98AuTcoR1HBGdbe5Gph74ZBWSgNemBcqPNv1W/cloudflare-IPFS-experiment.html)" by [Joe](https://js.ipfs.io/ipns/QmZJBQBXX98AuTcoR1HBGdbe5Gph74ZBWSgNemBcqPNv1W/index.html) - ([archive](http://archive.fo/139z1))
"[Cloudflare IPFS experiment](https://js.ipfs.io/ipns/QmZJBQBXX98AuTcoR1HBGdbe5Gph74ZBWSgNemBcqPNv1W/cloudflare-IPFS-experiment.html)" by [Joe](https://js.ipfs.io/ipns/QmZJBQBXX98AuTcoR1HBGdbe5Gph74ZBWSgNemBcqPNv1W/index.html) [[mirror](http://archive.fo/139z1)]
"[Don't Trust CloudFlare](https://write.lain.haus/thufie/dont-trust-cloudflare)" by [@lunaterra@cyberia.social](https://cyberia.social/@lunaterra)
@ -35,6 +60,8 @@ Disqualify:
"[Support End-to-End Encryption on the Web](https://www.wordfence.com/blog/2017/03/support-end-to-end-encryption/)" by [Mark Maunder](https://www.wordfence.com/)
"[MITM-as-a-Service: The Threat Surface We Didnt Know We Had](http://daveshackleford.com/?p=1134)" by [Shack](twitter.com/daveshackleford/)
"[Journal CloudFlare au milieu](https://linuxfr.org/users/thibg/journaux/cloudflare-au-milieu)" by [ThibG](https://linuxfr.org/)
"[why you shouldnt use Cloudflare](https://tech.tiq.cc/2016/01/why-you-shouldnt-use-cloudflare/)" by [tiq](https://tech.tiq.cc/)
@ -51,9 +78,13 @@ Disqualify:
"[iSucker: Big Brother Internet Culture](https://exiledonline.com/isucker-big-brother-internet-culture/)" by [The Exiled](https://exiledonline.com/)
"[Growing Cloudflare Menace](http://imhhge4lijqv7jzf.onion/warning.html)"
------
###### Forum
###### Forum / Wiki
"[Anonym im Internet - Inhaltsverzeichnis](https://wiki.kairaven.de/open/anon/netzwerk/anet)" by [Kairaven](https://hp.kairaven.de)
"[Issues with corporate censorship and mass surveillance](https://www.torproject.org/projects/tor/ticket/18361)" by [Jacob Appelbaum](https://twitter.com/ioerror)
@ -66,3 +97,371 @@ Disqualify:
"[How likely is it that CloudFlare is an NSA operation?](https://www.quora.com/How-likely-is-it-that-CloudFlare-is-an-NSA-operation/answer/Hamid-Sarfraz)" by quora
"[cloudflare 是如何转发 HTTPS 流量的?](https://www.v2ex.com/t/406759)" by [feast](https://www.v2ex.com/member/feast)
"[Cloudflare The Asocial](http://asocialfz7ncw5ui.onion/articles/internet/cloudflare.html)" by [ASocial](https://theasocial.github.io/) [[mirror](https://theasocial.github.io/articles/internet/cloudflare.html)]
"[CloudFlare Sipuliwiki 3](http://nla423n3gyyunhci.onion/index.php?title=CloudFlare)"
"[fuckcloudflare/cloudflare-tor](http://volagitvnzf3o56b.onion/cgit/fuckcloudflare/cloudflare-tor/)"
------
###### Twitter (aka "Birdsite")
"RSS Feed is behind the Cloudflare DDoS protection. My RSS Reader is self hosted, so it is impossible for it to retrieve any feeds" by @[GarcaMan2](https://twitter.com/GarcaMan2/status/1121234101657321474)
"Mais comment osez-vous parler de "respect des données personnelles"? Votre site est bourré de traceur en tout genre! Pire vous routez vos utilisateurs via cloudflare aux USA!" by @[Armdias](https://twitter.com/Armdias/status/1120957817693847557)
"Avoid and ask any website you use why they are using them and to stop ASAP." by @[larrybeck_](https://twitter.com/larrybeck_/status/1120840099112026112)
"Zero Cloudflare, our site scores a 98% on pagespeed.. Really cant see any benefit to using cloudflare at all" by @[WESHUK](https://twitter.com/WESHUK/status/1120817837499650048)
"I read a description of CloudFlare as a "man-in-the-middle attack on the entire internet" and now I'm just a LIIIIIITLE bit conflicted." by @[ianbeck](https://twitter.com/ianbeck/status/1120814430239907840)
"Cloud flare you overdoing everything. Now i need to do a CAPTCHA for every page i visit. It surely changes how we use the web." by @[Kemboidickson](https://twitter.com/Kemboidickson/status/1115317470078930951)
"IP's are being blacklisted and denied access to any site using Cloudflare." by @[purplepopoto](https://twitter.com/purplepopoto/status/1118415845296762880)
"My IP got flagged for spam cause I tried logging into VRChat when they were having issues. Now I keep getting captchas for everything" by @[Fleurfurr](https://twitter.com/Fleurfurr/status/1118385992938020867)
"the equivalent of a Flash-required splash page 20 years ago. It makes you look stupid." by @[skry](https://twitter.com/skry/status/1096832011631681537)
"You say you're in IT but don't acknowledge the SPOF issue in cloudflare (right after privacy issues and Tor users problems to access your content)?" by @[Idfollowher](https://twitter.com/Idfollowher/status/1094339678516449282)
"I can't even reach the "contact us' without cloudflare banning my IP because of 'rate limit'." by @[SirIsaacIn1905](https://twitter.com/SirIsaacIn1905/status/1091368707484311552)
"Mind telling me why everything your apart of thinks im a Robot?" by @[BrewManChew_](https://twitter.com/BrewManChew_/status/1118618347174858753)
"I've always referred to CloudFlare as the 'global passive adversary ya momma warned you about'." by @[NetworkString](https://twitter.com/NetworkString/status/1120073249189179392)
"They'll have to monetize data eventually, likely with an unnoticed tweak to their ToS." by @[phyzonloop](https://twitter.com/phyzonloop/status/1119703561087148032)
"#Cloudflare increases its MITM'ing of the web with a free #VPN for mobile. Best to avoid IMO." by @[sweepthenet](https://twitter.com/sweepthenet/status/1113086245159256066)
"Not playing the game is the best thing for anyone who wants to use the internet without being blocked." by @[Ares_CVR](https://twitter.com/Ares_CVR/status/1118429720515891200)
"VRChatのようなゲームはCAPTCHAフォームを受け取ることができないので、ブラックリストに捕まった人々は事実上ゲームをプレイすることができません。" by @[Meowkyway222](https://twitter.com/Meowkyway222/status/1118427292676476929)
"今日からなんか各地のサイトでCloudflareとかいうページが表示されてcaptchaのチェックをやたら求められるようになった" by @[yagamo54](https://twitter.com/yagamo54/status/1118115780984311809)
"クライアントがバグって意図せず攻撃者のような大量アクセスしてCloudflare大激怒でVRCユーザーのIPアドレスがブラックリスト入りってことかね" by @[bironist](https://twitter.com/bironist/status/1118474120960757760)
"バグが原因でCloudflare使ってるWebサービス全体にIPブロックされてる" by @[JO2PEG](https://twitter.com/JO2PEG/status/1118506271651401728)
"Whats going on with this cloud flare thing its locked me out of all website" by @[Xiverta](https://twitter.com/Xiverta/status/1118417249222529024)
"Cloudflare run DoH and do Man-In-the-middle of the century" by @[FernandoGont](https://twitter.com/FernandoGont/status/1106469002807779330)
"It's not a fully-encrypted experience. In fact, Cloudflare becomes, by definition, a Man In The Middle (MITM) -- and at mass scale!" by @[FernandoGont](https://twitter.com/FernandoGont/status/1077984986144354304)
"I guess #cloudflare's business model is #spam (and man-in-the-middle attacks on #tls)" by @[christophe0o](https://twitter.com/christophe0o/status/1069295953478336517)
"Our users are actually customers, and we look out for them and strive to satisfy them. Unlike the lying #Clownflare, which wants to be an MITM." by @[brettglass](https://twitter.com/brettglass/status/1118543682385399809)
"You buy the "free" service with your sites traffic.a.k.a mitm the heck out of you." by @[cireumayn1](https://twitter.com/cireumayn1/status/1114673721355251712)
"Who the hell is cloudflare and why do they block access" by @[TheCubanEdge](https://twitter.com/TheCubanEdge/status/1120513042704404480)
"Why should we trust cloudflare to MITM all our traffic as a VPN when there are such bad security practices in place with existing products?" by @[GvilleComputer](https://twitter.com/GvilleComputer/status/1113046802566131713)
"So, you are actually putting the trust in a commercial provider that is already in a position to find out very private details about you?" by @[h3artbl33d](https://twitter.com/h3artbl33d/status/1112763751353200642)
"Cloudflare seems to be protecting it a bit too much" by @[spitf1r3](https://twitter.com/spitf1r3/status/1104908643017940992)
"all web traffic is routed through CloudFlare - which is an adversary to privacy (MitM by design)" by @[h3artbl33d](https://twitter.com/h3artbl33d/status/1111982937707298816)
"Aren't Cloudflare themselves the biggest MITM around?" by @[auspicacious](https://twitter.com/auspicacious/status/1111500313259724803)
"This Cloudflare error is popping up on a ton of sites all of a sudden. It doesn't seem to be malware or anything..." by @[Eltalite](https://twitter.com/Eltalite/status/1118011155509682176)
"When #Cloudflare and #Google prevent you from watching a government's parliamentary debates. Does that count as interfering with democratic processes?" by @[STP_KITT](https://twitter.com/STP_KITT/status/1113442207619358720)
"I MADE A BILL PAYMENT BUGGING IT OUT AND IT DOUBLE CHARGED ME CAUSE OF IT." by @[The_FoxGod](https://twitter.com/The_FoxGod/status/1118579858437578752)
"People find themselves met with a brick wall of endless captcha requests any time they try to go to a cloudflare-protected website, and they can't even submit a ticket to Cloudflare about it because they're protected, obviously. " by @[RiDakuYazumi](https://twitter.com/RiDakuYazumi/status/1118512842959929344)
"Blind people simply can't pass them. Your test is failing at telling humans & computers apart." by @[axelsimon](https://twitter.com/axelsimon/status/1094303636350529536)
"My IP was blocked by Cloudflare because I can't access a variety of websites without the CAPTCHA page showing up. I also can't play RuneLiteClient anymore." by @[MohamedMounib3](https://twitter.com/MohamedMounib3/status/1119654593867075586)
"Hey ProtonVPN some of your servers in PT are blocked by cloudflare" by @[brecke](https://twitter.com/brecke/status/1118896499121897474)
"Your support of Cloudflare's spyware and lies demonstrates that, again, you're either misguided or malevolent." by @[brettglass](https://twitter.com/brettglass/status/1119720600363261953)
"It wants to be a 'man in the middle' between you and the Internet, and between Web sites and the Internet." by @[brettglass](https://twitter.com/brettglass/status/1119721137263534081)
"I don't know why I was banned from access government website." by @[abidavid1199](https://twitter.com/abidavid1199/status/1119734124821057536)
"You've officially banned my country via CloudFlare's firewall. I honestly, sincerely hope your company goes bankrupt because this is pure bs." by @[ii0wii](https://twitter.com/ii0wii/status/1119520320703143941)
"I had a friend who got banned by cloudflare" by @[WhisperMute](https://twitter.com/WhisperMute/status/1118946685324070914)
"Hey guess what! i got ip banned by Cloudflare Woohoo!" by @[cearealkillas](https://twitter.com/cearealkillas/status/1118626896143511552)
"vrchat fucked up and ended up having bunch people banned from cloudflare so no one could login i cant even watch anime" by @[LoliGoddess_VR](https://twitter.com/LoliGoddess_VR/status/1118424623392202752)
"Imagine being so incompetent at networking that you get your users flagged for spam from cloudflare, you guys are a joke" by @[SilverTheFlat](https://twitter.com/SilverTheFlat/status/1118203335973244934)
"Cloudflare is trash, has always been trash, and will continue to be trash." by @[justkelly_ok](https://twitter.com/justkelly_ok/status/897519768323768320)
"You probably got blacklisted by Cloudflare like a good amount of people" by @[Mertvyi_](https://twitter.com/Mertvyi_/status/1118550942394109957)
"Only started today. I am definitely not a robot!" by @[TheReal_blue166](https://twitter.com/TheReal_blue166/status/1087778908324458496)
"Ridiculous CAPTCHA usage, Cloudflare Edition; 'not a robot' to refresh the API key for an account that's already locked behind credentials + MFA, and requiring the password." by @[sindarina](https://twitter.com/sindarina/status/1042085625032257536)
"I spent my day telling Cloudflare every 5 min on every site that i'm not a robot." by @[morhac](https://twitter.com/morhac/status/1017409748482719744)
"People are being blacklisted by cloudflare, and the fact that it's literally all down to the vrc devs, this will end with a lawsuit" by @[Retr0Fighter](https://twitter.com/Retr0Fighter/status/1118487667094765569)
"This little VRChat bug is banning people from actual millions of websites with very few convenient fixes." by @[RiDakuYazumi](https://twitter.com/RiDakuYazumi/status/1118514780652879872)
"DO NOT GO ON THE VRCHAT WEBSITE THEY WILL ALSO BLOCK YOUR IP" by @[ECW117](https://twitter.com/ECW117/status/1118477598202507265)
"Im so damn annoyed with this Cloudflare stuff" by @[styloVR](https://twitter.com/styloVR/status/1118545393158119425)
"Gonna quit VRChat for a bit to avoid a cloudflare ban. This isn't gonna end pretty for the dev team at all." by @[iamblssm](https://twitter.com/iamblssm/status/1118621746326675457)
"Cloudflare like to act as champions of free speech, but as soon as protections for free speech disappear, they all but rolled over and censored that speech." by @[ThisIsMissEm](https://twitter.com/ThisIsMissEm/status/1118390074557775872)
"I am stuck at an infinite loading screen trying to load the game. This has also caused my IP to be flagged by Cloudflare" by @[Etna_AD](https://twitter.com/Etna_AD/status/1118393520077901824)
"GOT FLAGGED FROM CLOUDFLARE FOR PLAYING/STREAMING VRChat SO NO STREAM TODAY" by @[odomfire](https://twitter.com/odomfire/status/1118263523002519553)
"How do I fix the cloudfare from popping up. This has made it Impossible for me to even stream." by @[RealTypey](https://twitter.com/RealTypey/status/1118272161607749632)
"ISPs don't sell customer DNS data. Cloudflare is fearmongering in an effort to garner DNS traffic to spy on and sell its VPN" by @[brettglass](https://twitter.com/brettglass/status/1118202225715752960)
"You're lying about your paid product, too. VPNs don't protect privacy, because their exit nodes are easy for governments to monitor." by @[brettglass](https://twitter.com/brettglass/status/1118271101665255432)
"can you unflag my ip please. its actually stoping me from doing anything" by @[churchillvr](https://twitter.com/churchillvr/status/1118164231860432896)
"So much for transparency. If they have nothing to hide, why block me?" by @[phyzonloop](https://twitter.com/phyzonloop/status/1118229040777826305)
"Seems like your Cloudflare waf rule is blocking me!" by @[JobinNixHive](https://twitter.com/JobinNixHive/status/1118242827731914754)
"Tu veux nous informer d'un problème? Ok, mais donne tes données personnelles avant." by @[fladna9](https://twitter.com/fladna9/status/1037585196802101249)
"Your Cloudflare config is being screwy & blocking my wifes IP (which has been the same IP for over a year) which is screwing up her stream." by @[alexanderhanff](https://twitter.com/alexanderhanff/status/1115660493669191680)
"Cloudflare's WAF blocking Googlebot. Is this accurate? Even this morning I woke up and noticed another page dropped" by @[madhacks](https://twitter.com/madhacks/status/1114577907114856448)
"I'm super tired of websites deciding what I want, or indeed who I am, based on my current geolocation." by @[storyneedle](https://twitter.com/storyneedle/status/1084821216597135360)
"Im fucking tired of cloudflare and their nonsense grandstanding about DoH." by @[JumpyBirdBird](https://twitter.com/JumpyBirdBird/status/1065536618667270145)
"im getting tired of cloud flares captcha on every single site" by @[riyadhalnur](https://twitter.com/riyadhalnur/status/729191160917319680)
"Hate captcha. Hate Cloud Flare." by @[EconomicMayhem](https://twitter.com/EconomicMayhem/status/723348151181164544)
"So nice of cloud flare to use a captcha provider that doesnt appear to work inside China, thus completely blocking sites." by @[albertren](https://twitter.com/albertren/status/716233184833196032)
"eww I got cloudflarecaptcha'd again… too lazy to search for a good pic tho, so I'll just pretend I didn't click link for once" by @[yuki_the_maven](https://twitter.com/yuki_the_maven/status/708468683430039552)
"I'm having trouble getting to your site, everytime i try to get to it, cloud flare seems to block me" by @[slurpeerun](https://twitter.com/slurpeerun/status/1067652451270967296)
"You have Cloudflare on your website and you're blocking access from entire countries?" by @[dec23k](https://twitter.com/dec23k/status/1111961153742213121)
"hey Cloudflare, why do you suck so much? you've blocked my ability to use streamlabs while streaming." by @[Sam41gaming](https://twitter.com/Sam41gaming/status/1101413577796153344)
"#Cloudflare Owns the encryption keys to the servers that collected the data from the 2018 voting machines." by @[MaggieMaeMooCow](https://twitter.com/MaggieMaeMooCow/status/1062775200192770048)
"What about stop using stupid Cloudflare!" by @[x61sh](https://twitter.com/x61sh/status/1116808798897868800)
"I dont want to select pictures with a car plate to read a fuckin article on web" by @[umurgdk](https://twitter.com/umurgdk/status/1116649566416162818)
"クラウドフレアっていうやつにアクセス拒否くらってる模様" by @[notmoneybutrust](https://twitter.com/notmoneybutrust/status/1114273590944210944)
"If you use 1.1.1.1, cloudflare will be able to snoop on what you do on the Internet." by @[neirbowj](https://twitter.com/neirbowj/status/1116545712668516352)
" Cloudflare blocks a bunch of people without giving you any choice in the matter. If you're using cloudflare you are allowing them to censor who hits your site." by @[jeffcliff1](https://twitter.com/jeffcliff1/status/1108142374776176640)
"It breaks a lot of things for me, like images stop loading on Twitter or some apps straight up dont work." by @[ScottishBakery](https://twitter.com/ScottishBakery/status/1116673794855272449)
"Not just you. CloudFlare got interrupted a few times today." by @[guyothersome](https://twitter.com/guyothersome/status/1116471262132436994)
"1.1.1.1 prevents some apps from working, in particular I have problems connecting with the app" by @[SCRWD](https://twitter.com/SCRWD/status/1116291854759354371)
"First, you create a problem. Then, you pretend to solve that problem." by @[switch_d](https://twitter.com/switch_d/status/1116039082977533952)
"Cloudflare DNS is flaking out ugh" by @[sleepingkyoto](https://twitter.com/sleepingkyoto/status/1115014195286646784)
"Tell eastdakota it's not nice to block me. He said in his YouTube interviews that #censorship is bad." by @[phyzonloop](https://twitter.com/phyzonloop/status/1067177577519898626)
"They want to be a single point of failure once again and they've already failed once" by @[wombatush](https://twitter.com/wombatush/status/1114464442794643461)
"This special treatment is inexcusable" by @[saleemrash1d](https://twitter.com/saleemrash1d/status/1114289465760075776)
"You are KILLING the #internet and aiding #surveillance agenda of #GAFAM and others" by @[Dr. Roy](https://twitter.com/schestowitz/status/1067299259593175040)
"The log file from your iOS app shows that you do track personal information" by @[holydevil](https://twitter.com/holydevil/status/1112769739045158912)
"Which part of the privacy policy allows you to share data with marketing crap" by @[thexpaw](https://twitter.com/thexpaw/status/1108424723233419264)
"Can you explain why I am blocked from accessing your site?" by @[Susan_Larson_TN](https://twitter.com/Susan_Larson_TN/status/1110207775311912966)
"Did my questions and comments hit a little too close to home so you BLOCKED ME?" by @[phyzonloop](https://twitter.com/phyzonloop/status/1109133085336047617)
"Why is your site blocking me?" by @[flarn2006](https://twitter.com/flarn2006/status/1107837140359094273)
"It's pretty bad as half the internet is behind Cloudflare." by @[Skyfusion89](https://twitter.com/Skyfusion89/status/1101600562355859456)
"Cloudflare has me blocked." by @[JacobyDave](https://twitter.com/JacobyDave/status/1095411772851474434)
"People really ought to stop using/trusting cloudflare. it's a disgusting centralized morally compromised CDN." by @[drwdal](https://twitter.com/drwdal/status/1113171715234902018)
"Please stop using Cloudflare's CDN. They blocked my IP" by @[actual_mishaor](https://twitter.com/actual_mishaor/status/1112285872311934976)
"Cloudflare is a threat to the internet, and makes it harder for visitors of your website to protect their right to privacy." by @[Mr. Jeff](https://twitter.com/jeffcliff1/status/1105832648096862208)
"WTF! Just stop! Patreon Cloudflare and many others..." by @[umurgdk](https://twitter.com/umurgdk/status/1113323739221962752)
"I could not access the email because of cloudflare." by @[DouglasLindquis](https://twitter.com/DouglasLindquis/status/1115990146011344896)
"I have tried but API cannot be used because of Cloudflare" by @[miningpoolstats](https://twitter.com/miningpoolstats/status/1113810320710098944)
"Akamai states that 0.2% of Tor exit nodes had malicious requests, yet CloudFlare claims 94%" by @[musalbas](https://twitter.com/musalbas/status/717316725973389313)
"I'm starting to think that #CloudFlare is post-irony with their non-functional or just broken captchas" by @[ioerror](https://twitter.com/ioerror/status/715168927639343109)
"It gets even better. SOLVE ALL THE CAPTCHAS" by @[metabubble](https://twitter.com/metabubble/status/715206027793338368)
"CloudFlare is gathering the web and centralizes it, I don't see any good aspect in this" by @[fuolpit](https://twitter.com/fuolpit/status/715942023564550144)
"At work, a very large client had major issues due to cloudflare misconfig. Don't use CloudFlare." by @[Dr. Roy](https://twitter.com/schestowitz/status/1036861493155962881)
"Fuck me CloudFlare Captchas are just impossibly difficult. Yet to succeed tonight … are you trying to block people as well" by @[badlydrawnrob](https://twitter.com/badlydrawnrob/status/602964063308636160)
"So you intermittently block me from viewing sites on your platform, and refuse to even address my questions about it." by @[2012_04_28](https://twitter.com/2012_04_28/status/314180120518750209)
"Go away cloudflare, don't block me from my own website!" by @[liamgooding](https://twitter.com/liamgooding/status/115736397645746176)
"You successful manage to block me, and fail to display why" by @[kaareal](https://twitter.com/kaareal/status/42885552793595904)
"Requested a refund. You guys refuse to do so. Trying to call goes to voice mail and support by email give me lame excuses." by @[thenitai](https://twitter.com/thenitai/status/1116433441598451712)
"genau von denen bin ich wenig begeistert..." by @[r00tthebox](https://twitter.com/r00tthebox/status/1115627988924751873)
"Ist übrigens die IP-Adresse von Cloudflare für die Homepage der JusoSchweiz, die ihr das blockiert." by @[sacovo](https://twitter.com/sacovo/status/1093541275326910464)
"Dass CloudFlare selbst TOR blockiert, ist denen wohl nicht aufgefallen." by @[kamikazow](https://twitter.com/kamikazow/status/570943630539689984)
"Cloudflare blockiert TOR-Exit-Nodes." by @[schild202](https://twitter.com/schild202/status/557770010450726912)
"Sites on Cloudflare blocked me upon browsing. Please fix." by @[lino_almojuela](https://twitter.com/lino_almojuela/status/742721270861553665)
"Achievement Unlocked! Cloudflare has blocked me. Oh, whatever shall I do???" by @[thisisgab2](https://twitter.com/thisisgab2/status/1062518618087481345)
"It's blocked by Cloudflare for me" by @[motters](https://twitter.com/motters/status/723902453939339264)
"My access to all cloudflare websites seem to be blocked." by @[MrDHat](https://twitter.com/MrDHat/status/980777153116569600)
"CloudFlare doesnt like me… I have been blocked by CloudFlare…" by @[bryanbrake](https://twitter.com/bryanbrake/status/706958626154393601)
"CloudFlare would not and wont let me connect to & open that link." by @[ZEPHYoRUS](https://twitter.com/ZEPHYoRUS/status/1085240244872597504)
"Torをホワイトリストに追加していてもブロックしてくるCloudflare" by @[CheenaBlog](https://twitter.com/CheenaBlog/status/1042413641449005056)
"CloudFlareのCDNをウイルスバスターがブロックしちゃって見れない" by @[_iro](https://twitter.com/_iro/status/734991531724017664)
"Error 520と表示されてページが見れない。" by @[halpas_blog](https://twitter.com/halpas_blog/status/843401976280829953)
"ここ数日ずっとCloudFlareのerror 522で見れない。" by @[usunekoserv_pub](https://twitter.com/usunekoserv_pub/status/689752546991181824)
"IT Cell found a way to secure their website: they banned French IPs" by @[fs0c131y](https://twitter.com/fs0c131y/status/1110989388295467008)
"Cloudflare thinks I'm a robot and is blocking the most annoying preflight requests without letting me do a captcha." by @[enjalot](https://twitter.com/enjalot/status/1107085704591347712)
"Solving captcha puzzles for Google every single time due to your Cloudflare protection just ruins the whole experience." by @[chowdhuryrahul](https://twitter.com/chowdhuryrahul/status/1115132766603972609)
"I am unable to login to android app, tried using credentials, reinstalling app, nothing worked." by @[prasadthombre](https://twitter.com/prasadthombre/status/1112950318537625600)
"Cloudflare has traditionally thrown CAPTCHAs aggressively enough at VPN users to degrade the browsing experience." by @[mbarnath](https://twitter.com/mbarnath/status/1112969137389617152)
"Very few websites aren't using it meaning the majority of warp traffic is easily decrypted." by @[nathanielrsuchy](https://twitter.com/nathanielrsuchy/status/1113120866672525314)
"Cloudflare captcha is annoying af" by @[YourAnonNews](https://twitter.com/YourAnonNews/status/762340768845598720)
"Whats up with the forced #CloudFlare captcha page today?" by @[Aybara](https://twitter.com/Aybara/status/1113462534172946432)
"CAPTCHA protest outside CloudFlare rightscon party!" by @[ageis](https://twitter.com/ageis/status/715353166666027008)
"The truth behind Google Captcha, Analytics, CloudFlare is Covert Espionage and Mass Surveillance." by @[Casey_Comendant](https://twitter.com/Casey_Comendant/status/1116417797007921152)
"Tor CloudFlare Captcha #TellASadStoryin3Words" by @[YrB1rd](https://twitter.com/YrB1rd/status/834539628791209984)
"CloudFlare is such trash, is there anything comparable that DOESN'T suck???" by @[radix42](https://twitter.com/radix42/status/834543824047190016)
"Your blog post wasn't worth the cloudflare captcha i solved to read it" by @[agentdero](https://twitter.com/agentdero/status/707293903418822656)
"Cloudflare's aggressive use of google captcha basically means the trade-off of using a vpn is training google's self-driving cars." by @[frnsys](https://twitter.com/frnsys/status/1072504815152959488)
"cfc;dr = cloudflare captcha; didn't read." by @[mrphs](https://twitter.com/mrphs/status/710867596959227904)
"Each time I fill out a Cloudflare captcha I grow slightly more suspicious that I may in fact be a robot..." by @[projectgus](https://twitter.com/projectgus/status/979152953297715202)
"Select grass, copy-paste text, click "not a robot", select storefronts. Not getting better." by @[shiromarieke](https://twitter.com/shiromarieke/status/785557109962317825)
"Getting the Cloudflare captcha for everything today!" by @[TheHodge](https://twitter.com/TheHodge/status/1009091924639322114)
"Tor user in Iran can't read content behind CloudFlare" by @[attractr](https://twitter.com/attractr/status/717790178786586625)
"I gave up after the text captcha step." by @[jordansissel](https://twitter.com/jordansissel/status/692508531455582209)
"Why don't you just commit to only using Tor Browser for all of next week and see what it's like for yourself?" by @[hdevalence](https://twitter.com/hdevalence/status/698967506057347072)
"Every time I have to do an image Captcha it's a dead giveaway that Cloudflare services are used." by @[StateExempt](https://twitter.com/StateExempt/status/1111613302914908160)
"I just encountered a site with a fake #Cloudfail #CAPTCHA dialog to trick people reflexively clicking on it." by @[Nin_99](https://twitter.com/Nin_99/status/1112174288323383299)
"You're making the use of your site pretty difficult for #TOR users." by @[Sebastian Bürgel](https://twitter.com/SCBuergel/status/1114492792875700225)
"I dislike Cloudflare they always block my VPN which I use to keep ads and trackers at bay" by @[nonesuchzach](https://twitter.com/nonesuchzach/status/782238922009042948)
"Ugh, anoying services. You block me because i use a VPN, WHY?" by @[_ruis_](https://twitter.com/_ruis_/status/827105441264054272)
"You now seemingly have every single IP block for PIA's VPN service in the US at least temporarily blocked via Cloudflare" by @[theonlymattlach](https://twitter.com/theonlymattlach/status/892201755035013121)
"Plz stop using Cloudflare.They block VPN and proxies ment to enhance our privacy." by @[claw137](https://twitter.com/claw137/status/892397825245536257)
"Your cloudflare-hosted site blocks my VPN so I can't even buy your VPN while using a competitor." by @[focusaurus](https://twitter.com/focusaurus/status/942968457909456898)
"Most use Cloudflare+CAPTCHAs to filter." by @[r0h1n](https://twitter.com/r0h1n/status/778788564519845888)
"TorGuard uses CloudFlare They are #antiprivacy and block #VPN users!" by @[SPC_Bitcoin](https://twitter.com/SPC_Bitcoin/status/702699563342106625)
"One large company (CloudFlare) deciding who can visit what." by @[OhNoItsFusl](https://twitter.com/OhNoItsFusl/status/680144362773319681)
"So CloudFlare you block my surf because I'm behind a vpn protection?" by @[manuzful](https://twitter.com/manuzful/status/677474770867351553)
"Never heard of cloudflare until network connectivity denied me" by @[1nzimande](https://twitter.com/1nzimande/status/690223994038030337)
"Access denied. What have you done, the CloudFlare cyberpolice are now out to get me!" by @[nyarth](https://twitter.com/nyarth/status/287603063668228096)
"You differentiate humans from bots." "Well fuck that." by @[magi093](https://twitter.com/magi093/status/1097480616050860032)
"Does anyone know if Saudi Arabia likes to filter Cloudflare?" by @[ralphholz](https://twitter.com/ralphholz/status/859565090395144192)
"Really wish you didn't block my IP with Cloud Flare. I'd join and support if I could." by @[DeborahPeasley](https://twitter.com/DeborahPeasley/status/801186753746903041)
"Link uses Cloud Flare to block IPs of those of us who browse anonymously" by @[DeborahPeasley](https://twitter.com/DeborahPeasley/status/568445705020420096)
"Someone tell me how to bypass cloud flare so I can add..." by @[Shh_Its_Raghav](https://twitter.com/Shh_Its_Raghav/status/967888191201185793)
"Today I learned that Cloudflare is doing more to censor the internet than the Great Firewall of China" by @[pabloduboue](https://twitter.com/pabloduboue/status/682394633641549829)
"If you're a daily Tor user like me, you should get used to contacting the services you use and ask them to #DontBlockTor" by @[yawnbox](https://twitter.com/yawnbox/status/847182068853428225)
------
###### Mastodon
"Cloudflare is among the worst organisations I've seen from a privacy and security standpoint, same as Google, Facebook, et al." by @[amolith](https://masto.nixnet.xyz/@amolith/101919558389894089)
"I liked them until I saw #Cloudflare." by @[amolith](https://masto.nixnet.xyz/@amolith/101588202702599511)
"#Cloudflare #surveillance marketed as "fast"" by @[Dr. Roy](https://pleroma.site/objects/a24125f1-c3c3-4138-ad22-1fb9327b80c8)
"I wonder if the implied subtext is that YOU ARE THE FOOL for using these services. :-) " by @[MateJ](https://social.matej-lach.me/@MatejLach/101851464970639410)
"I dream of blocking #Cloudflare and #ReCaptcha" by @[Chuculate](https://niu.moe/@Chuculate/101834414084670347)

View File

@ -4,11 +4,11 @@
![](image/cloudflaredearuser.png)
It is called this in reference to the [Great Firewall of China](https://www.comparitech.com/privacy-security-tools/blockedinchina/) which does a comparable job of filtering out *some* people from seeing web content(ie everyone in mainland china and some people outside) while at the same time those not affected to see a dratically different web, a web free of censorship of such images as ["tank man"](https://en.wikipedia.org/wiki/Tank_Man).
It is called this in reference to the [Great Firewall of China](https://www.comparitech.com/privacy-security-tools/blockedinchina/) which does a comparable job of filtering out *some* people from seeing web content (ie everyone in mainland China and some people outside) while at the same time those not affected to see a dratically different web, a web free of censorship of such images as ["tank man"](https://en.wikipedia.org/wiki/Tank_Man).
![](image/onemorestep.jpg)
Cloudflare similarly prevents those in southeast asia and elsewhere who have poor internet connectivity from accessing the websites behind it(for example, they could be behind 7+ layers of NAT) unless they solve multiple image CAPTCHAs. Cloudflare also has a massive [harassment problem](https://web.archive.org/web/20171024040313/http://www.businessinsider.com/cloudflare-ceo-suggests-people-who-report-online-abuse-use-fake-names-2017-5). [Tor users](https://www.torproject.org/) and [VPN users](https://airvpn.org/topic/23090-cloudflare-often-bans-my-ip-address/) are a victim.
Cloudflare similarly prevents those in southeast asia and elsewhere who have poor internet connectivity from accessing the websites behind it (for example, they could be behind 7+ layers of NAT) unless they solve multiple image CAPTCHAs. Cloudflare also has a massive [harassment problem](https://web.archive.org/web/20171024040313/http://www.businessinsider.com/cloudflare-ceo-suggests-people-who-report-online-abuse-use-fake-names-2017-5). [Tor users](https://www.torproject.org/) and [VPN users](https://airvpn.org/topic/23090-cloudflare-often-bans-my-ip-address/) are a victim.
![](image/banvpn.jpg)
@ -24,8 +24,21 @@ Do you really want to share your data with Cloudflare, and also 3-letter agency?
![](image/dhssaid.jpg)
Cloudflare also offer _FREE_ VPN service called "[Cloudflare Warp](https://blog.cloudflare.com/1111-warp-better-vpn/)". If you use it, all your smartphone connections are sent to Cloudflare servers. Cloudflare can know which website you've read, what comment you've posted, who you've talked to, etc. You are voluntary giving [all your information](https://github.com/privacytoolsIO/privacytools.io/issues/374#issuecomment-478686469) to Cloudflare. If you think "_Are you joking? Cloudflare is secure._" then you need to learn how [VPN works](https://en.wikipedia.org/wiki/VPN).
![](image/prismattnsa.jpg)
You might already know about the [PRISM](https://en.wikipedia.org/wiki/PRISM_(surveillance_program)) scandal. It is true that AT&T lets NSA to [copy all internet data](https://www.cnet.com/news/at-t-lets-nsa-hide-and-surveil-in-plain-sight-the-intercept-reports/) for surveillance. Let's say you're working at the NSA, and you want _every citizen's internet profile_. You know most of them are blindly trusting Cloudflare and using it to proxy their personal website, chat website, forum website, bank website, insurance website, search engine, secret member-only website, auction website, shopping, video website, NSFW website, and illegal website. You also know they use Cloudflare's DNS service ("1.1.1.1") and VPN service ("Cloudflare Warp") for "_Secure! Faster! Better!_" internet experience. Combining them with user's IP address, browser fingerprint, cookies and RAY-ID will be useful to build target's online profile. You want their data. [What will you do](https://www.reddit.com/r/privacy/comments/1gb0pa/how_prism_actually_works_1520_att_fiber_optic/)?
### Cloudflare is a honeypot. Free honey for everyone. _Some_ strings attached.
### Do not use Cloudflare.
### Decentralize the internet.
!["Cloudflare is not an option."](image/cfisnotanoption.jpg)
---
@ -41,6 +54,9 @@ Information
* [Block Global Active Adversary Cloudflare](https://trac.torproject.org/projects/tor/ticket/24351) by nym-zone
* [Problem with CloudFlare](https://github.com/privacytoolsIO/privacytools.io/issues/374#issuecomment-460077544) by libBletchley
* [Criticism and controversies](https://en.wikipedia.org/wiki/Cloudflare#Criticism_and_controversies) by Wikipedia
* [Cloudflare's Advertisement is just wrong](https://notabug.org/themusicgod1/cloudflare-tor/issues/123)
* [Akamai said 0.2% of Tor exit nodes had malicious requests, yet CloudFlare claims 94%](https://twitter.com/musalbas/status/717316725973389313) ([mirror](https://archive.is/1HkGl))
There are more details of why what they are doing is wrong available [here](cloudflare-philosophy.md).
Also see [Frequently Asked Questions](faq.md).

View File

@ -1,5 +1,6 @@
# Productivity and safety through the CloudFlare!
# Productivity and safety through the CloudFlare!
--------------
## Torblocks Philosophy
1) Have fun!
@ -11,10 +12,13 @@ https://trac.torproject.org/projects/tor/ticket/18361
https://trac.torproject.org/projects/tor/ticket/24351
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831835
one guy, marek apparently from Clownflare, utters unapologetic remarks that should come as no surprise.
One guy, *marek* apparently from Cloudflare, utters unapologetic remarks that should come as no surprise.
```
"I will restrain myself and not comment on the political issues Jacob raised. I'll keep it technical."
hey, in times of mass surveillance, technology is political. money is political. therefore Clownflare's policy is political. so?
discussion is on. with "marek" and "jgrahamc" of Clownflare. last I looked they were unapologetic & attempting to snark Tor developers into building expensive client/Tor/TBB-side functionality to suit them. meanwhile stalling and offering minor workarounds (on the bright side, jgrahamc promised to make tor blocking optional for "free-" tier sites. (opt-out though)).
```
BTW someone quickly wrote a (unhelpful & biased & not in-depth researched, rather "he said this and then the other guy said that" style) article about the discussion on the ticket for "TheRegister", which at first I couldn't read because it was behind ... TADA: a clownflare CAPTCHAwall. Luckily there's archive.is and they don't block that.
@ -214,7 +218,7 @@ https://cryptome.org/2016/07/cloudflare-de-anons-tor.htm
> keystrokes
> click location history tied to user fingerprint
> All these criteria, are stored in the browsers cookie. These criteria are processed by Googles server
> It should be emphasized, that there is a DARPA technology to identify people by mouse movements and typing
> It should be emphasized, that there is a DARPA technology to identify people by mouse movements and typing
https://trac.torproject.org/projects/tor/ticket/18361#comment:147

View File

@ -0,0 +1,6 @@
format: name here | title | URL
Matthew Prince | CEO | https://twitter.com/eastdakota
Michelle Zatlyn | founder | https://twitter.com/zatlyn
Lee Holloway | founder | https://twitter.com/icqheretic

View File

@ -1,101 +1,392 @@
abby.ns.cloudflare.com
ada.ns.cloudflare.com
adam.ns.cloudflare.com
adel.ns.cloudflare.com
adi.ns.cloudflare.com
adrian.ns.cloudflare.com
aida.ns.cloudflare.com
aiden.ns.cloudflare.com
ajay.ns.cloudflare.com
alan.ns.cloudflare.com
albert.ns.cloudflare.com
alec.ns.cloudflare.com
alex.ns.cloudflare.com
alexis.ns.cloudflare.com
algin.ns.cloudflare.com
ali.ns.cloudflare.com
alice.ns.cloudflare.com
alina.ns.cloudflare.com
alla.ns.cloudflare.com
amanda.ns.cloudflare.com
amber.ns.cloudflare.com
amir.ns.cloudflare.com
amit.ns.cloudflare.com
amy.ns.cloudflare.com
andy.ns.cloudflare.com
angela.ns.cloudflare.com
anirban.ns.cloudflare.com
anna.ns.cloudflare.com
anuj.ns.cloudflare.com
apollo.ns.cloudflare.com
april.ns.cloudflare.com
ara.ns.cloudflare.com
aragorn.ns.cloudflare.com
arch.ns.cloudflare.com
aria.ns.cloudflare.com
arnold.ns.cloudflare.com
aron.ns.cloudflare.com
art.ns.cloudflare.com
arya.ns.cloudflare.com
asa.ns.cloudflare.com
ashley.ns.cloudflare.com
athena.ns.cloudflare.com
austin.ns.cloudflare.com
barbara.ns.cloudflare.com
bart.ns.cloudflare.com
bayan.ns.cloudflare.com
beau.ns.cloudflare.com
becky.ns.cloudflare.com
bella.ns.cloudflare.com
ben.ns.cloudflare.com
beth.ns.cloudflare.com
betty.ns.cloudflare.com
bill.ns.cloudflare.com
bob.ns.cloudflare.com
bonnie.ns.cloudflare.com
boyd.ns.cloudflare.com
brad.ns.cloudflare.com
brenda.ns.cloudflare.com
brett.ns.cloudflare.com
brianna.ns.cloudflare.com
brit.ns.cloudflare.com
bruce.ns.cloudflare.com
buck.ns.cloudflare.com
burt.ns.cloudflare.com
candy.ns.cloudflare.com
carl.ns.cloudflare.com
carol.ns.cloudflare.com
carter.ns.cloudflare.com
cash.ns.cloudflare.com
cass.ns.cloudflare.com
chad.ns.cloudflare.com
chan.ns.cloudflare.com
charles.ns.cloudflare.com
cheryl.ns.cloudflare.com
chin.ns.cloudflare.com
chip.ns.cloudflare.com
chloe.ns.cloudflare.com
chris.ns.cloudflare.com
chuck.ns.cloudflare.com
clark.ns.cloudflare.com
clay.ns.cloudflare.com
cleo.ns.cloudflare.com
clint.ns.cloudflare.com
cloe.ns.cloudflare.com
clyde.ns.cloudflare.com
coby.ns.cloudflare.com
coco.ns.cloudflare.com
cody.ns.cloudflare.com
connie.ns.cloudflare.com
cortney.ns.cloudflare.com
cory.ns.cloudflare.com
cruz.ns.cloudflare.com
curt.ns.cloudflare.com
dahlia.ns.cloudflare.com
daisy.ns.cloudflare.com
dale.ns.cloudflare.com
damon.ns.cloudflare.com
dan.ns.cloudflare.com
dana.ns.cloudflare.com
dane.ns.cloudflare.com
dara.ns.cloudflare.com
darl.ns.cloudflare.com
darwin.ns.cloudflare.com
dave.ns.cloudflare.com
david.ns.cloudflare.com
dawn.ns.cloudflare.com
dean.ns.cloudflare.com
deb.ns.cloudflare.com
dee.ns.cloudflare.com
dell.ns.cloudflare.com
demi.ns.cloudflare.com
derek.ns.cloudflare.com
desi.ns.cloudflare.com
dilbert.ns.cloudflare.com
dina.ns.cloudflare.com
dion.ns.cloudflare.com
diva.ns.cloudflare.com
dolly.ns.cloudflare.com
dom.ns.cloudflare.com
donald.ns.cloudflare.com
donna.ns.cloudflare.com
dora.ns.cloudflare.com
dorthy.ns.cloudflare.com
doug.ns.cloudflare.com
drew.ns.cloudflare.com
duke.ns.cloudflare.com
earl.ns.cloudflare.com
ed.ns.cloudflare.com
edna.ns.cloudflare.com
elaine.ns.cloudflare.com
elinore.ns.cloudflare.com
elle.ns.cloudflare.com
elliot.ns.cloudflare.com
elma.ns.cloudflare.com
elmo.ns.cloudflare.com
elsa.ns.cloudflare.com
emily.ns.cloudflare.com
emma.ns.cloudflare.com
eric.ns.cloudflare.com
erin.ns.cloudflare.com
ernest.ns.cloudflare.com
etta.ns.cloudflare.com
eva.ns.cloudflare.com
evan.ns.cloudflare.com
fay.ns.cloudflare.com
fiona.ns.cloudflare.com
foo.ns.cloudflare.com
frank.ns.cloudflare.com
fred.ns.cloudflare.com
gabe.ns.cloudflare.com
gail.ns.cloudflare.com
gene.ns.cloudflare.com
george.ns.cloudflare.com
gerald.ns.cloudflare.com
gina.ns.cloudflare.com
glen.ns.cloudflare.com
gordon.ns.cloudflare.com
grace.ns.cloudflare.com
graham.ns.cloudflare.com
greg.ns.cloudflare.com
guss.ns.cloudflare.com
guy.ns.cloudflare.com
gwen.ns.cloudflare.com
hal.ns.cloudflare.com
hank.ns.cloudflare.com
hans.ns.cloudflare.com
heather.ns.cloudflare.com
henry.ns.cloudflare.com
hera.ns.cloudflare.com
hope.ns.cloudflare.com
hugh.ns.cloudflare.com
ian.ns.cloudflare.com
igor.ns.cloudflare.com
ines.ns.cloudflare.com
ingrid.ns.cloudflare.com
iris.ns.cloudflare.com
irma.ns.cloudflare.com
isaac.ns.cloudflare.com
isla.ns.cloudflare.com
ivan.ns.cloudflare.com
ivy.ns.cloudflare.com
jack.ns.cloudflare.com
jade.ns.cloudflare.com
jake.ns.cloudflare.com
james.ns.cloudflare.com
jamie.ns.cloudflare.com
janet.ns.cloudflare.com
jasmine.ns.cloudflare.com
jason.ns.cloudflare.com
jay.ns.cloudflare.com
jean.ns.cloudflare.com
jeff.ns.cloudflare.com
jeremy.ns.cloudflare.com
jerome.ns.cloudflare.com
jerry.ns.cloudflare.com
jessica.ns.cloudflare.com
jill.ns.cloudflare.com
jim.ns.cloudflare.com
jo.ns.cloudflare.com
joan.ns.cloudflare.com
jobs.ns.cloudflare.com
jocelyn.ns.cloudflare.com
joel.ns.cloudflare.com
john.ns.cloudflare.com
jonah.ns.cloudflare.com
josh.ns.cloudflare.com
jule.ns.cloudflare.com
june.ns.cloudflare.com
justin.ns.cloudflare.com
kai.ns.cloudflare.com
kami.ns.cloudflare.com
kanye.ns.cloudflare.com
kara.ns.cloudflare.com
karina.ns.cloudflare.com
karl.ns.cloudflare.com
kate.ns.cloudflare.com
kay.ns.cloudflare.com
ken.ns.cloudflare.com
kevin.ns.cloudflare.com
kia.ns.cloudflare.com
kiki.ns.cloudflare.com
kim.ns.cloudflare.com
kip.ns.cloudflare.com
kirk.ns.cloudflare.com
kristin.ns.cloudflare.com
kurt.ns.cloudflare.com
lady.ns.cloudflare.com
lakas.ns.cloudflare.com
lana.ns.cloudflare.com
lara.ns.cloudflare.com
lars.ns.cloudflare.com
laura.ns.cloudflare.com
leah.ns.cloudflare.com
lee.ns.cloudflare.com
leia.ns.cloudflare.com
lex.ns.cloudflare.com
lia.ns.cloudflare.com
lila.ns.cloudflare.com
lily.ns.cloudflare.com
lina.ns.cloudflare.com
linda.ns.cloudflare.com
lisa.ns.cloudflare.com
liv.ns.cloudflare.com
liz.ns.cloudflare.com
lloyd.ns.cloudflare.com
logan.ns.cloudflare.com
lola.ns.cloudflare.com
lorna.ns.cloudflare.com
lou.ns.cloudflare.com
lucy.ns.cloudflare.com
luke.ns.cloudflare.com
lynn.ns.cloudflare.com
major.ns.cloudflare.com
marek.ns.cloudflare.com
marge.ns.cloudflare.com
maria.ns.cloudflare.com
mario.ns.cloudflare.com
marjory.ns.cloudflare.com
mark.ns.cloudflare.com
marty.ns.cloudflare.com
mary.ns.cloudflare.com
matt.ns.cloudflare.com
max.ns.cloudflare.com
may.ns.cloudflare.com
maya.ns.cloudflare.com
meera.ns.cloudflare.com
meg.ns.cloudflare.com
megan.ns.cloudflare.com
melinda.ns.cloudflare.com
melissa.ns.cloudflare.com
merlin.ns.cloudflare.com
mia.ns.cloudflare.com
micah.ns.cloudflare.com
michelle.ns.cloudflare.com
miki.ns.cloudflare.com
miles.ns.cloudflare.com
mimi.ns.cloudflare.com
mira.ns.cloudflare.com
mitch.ns.cloudflare.com
molly.ns.cloudflare.com
mona.ns.cloudflare.com
nadia.ns.cloudflare.com
naomi.ns.cloudflare.com
nash.ns.cloudflare.com
ned.ns.cloudflare.com
neil.ns.cloudflare.com
nelly.ns.cloudflare.com
newt.ns.cloudflare.com
nia.ns.cloudflare.com
nick.ns.cloudflare.com
nicole.ns.cloudflare.com
nile.ns.cloudflare.com
nina.ns.cloudflare.com
nitin.ns.cloudflare.com
noah.ns.cloudflare.com
noel.ns.cloudflare.com
nola.ns.cloudflare.com
nora.ns.cloudflare.com
norm.ns.cloudflare.com
norman.ns.cloudflare.com
olga.ns.cloudflare.com
oswald.ns.cloudflare.com
owen.ns.cloudflare.com
pablo.ns.cloudflare.com
pam.ns.cloudflare.com
pat.ns.cloudflare.com
paul.ns.cloudflare.com
pete.ns.cloudflare.com
peyton.ns.cloudflare.com
phil.ns.cloudflare.com
piotr.ns.cloudflare.com
plato.ns.cloudflare.com
pola.ns.cloudflare.com
rachel.ns.cloudflare.com
rafe.ns.cloudflare.com
rajeev.ns.cloudflare.com
ram.ns.cloudflare.com
ray.ns.cloudflare.com
reza.ns.cloudflare.com
rick.ns.cloudflare.com
rihana.ns.cloudflare.com
rita.ns.cloudflare.com
roan.ns.cloudflare.com
rob.ns.cloudflare.com
robin.ns.cloudflare.com
rocky.ns.cloudflare.com
rodney.ns.cloudflare.com
rosa.ns.cloudflare.com
rose.ns.cloudflare.com
roxy.ns.cloudflare.com
rudy.ns.cloudflare.com
ruth.ns.cloudflare.com
sam.ns.cloudflare.com
sandy.ns.cloudflare.com
sara.ns.cloudflare.com
scott.ns.cloudflare.com
sean.ns.cloudflare.com
serena.ns.cloudflare.com
seth.ns.cloudflare.com
sharon.ns.cloudflare.com
sid.ns.cloudflare.com
sima.ns.cloudflare.com
simon.ns.cloudflare.com
skip.ns.cloudflare.com
sofia.ns.cloudflare.com
sri.ns.cloudflare.com
stan.ns.cloudflare.com
sue.ns.cloudflare.com
tani.ns.cloudflare.com
tara.ns.cloudflare.com
tegan.ns.cloudflare.com
terin.ns.cloudflare.com
terry.ns.cloudflare.com
tess.ns.cloudflare.com
theo.ns.cloudflare.com
thomas.ns.cloudflare.com
tia.ns.cloudflare.com
tim.ns.cloudflare.com
tina.ns.cloudflare.com
toby.ns.cloudflare.com
todd.ns.cloudflare.com
tom.ns.cloudflare.com
tony.ns.cloudflare.com
tori.ns.cloudflare.com
trey.ns.cloudflare.com
tricia.ns.cloudflare.com
ulla.ns.cloudflare.com
uma.ns.cloudflare.com
val.ns.cloudflare.com
venus.ns.cloudflare.com
vera.ns.cloudflare.com
vern.ns.cloudflare.com
vick.ns.cloudflare.com
vida.ns.cloudflare.com
vin.ns.cloudflare.com
violet.ns.cloudflare.com
vita.ns.cloudflare.com
wally.ns.cloudflare.com
walt.ns.cloudflare.com
wanda.ns.cloudflare.com
wesley.ns.cloudflare.com
west.ns.cloudflare.com
will.ns.cloudflare.com
woz.ns.cloudflare.com
yichun.ns.cloudflare.com
yolanda.ns.cloudflare.com
zara.ns.cloudflare.com
zelda.ns.cloudflare.com
zeus.ns.cloudflare.com
zita.ns.cloudflare.com
zod.ns.cloudflare.com
zoe.ns.cloudflare.com

View File

@ -1,3 +1,4 @@
betterinternet.com
brokendnssec.net
cloudflare-dns.com
cloudflare-free.com
@ -6,16 +7,20 @@ cloudflare-quic.com
cloudflare.com
cloudflare.com.ve
cloudflare.net
workers.dev
cloudflareaccess.com
cloudflareapi.com
cloudflareapps.com
cloudflarechallenge.com
cloudflareclient.com
cloudflareenterprise.com
cloudflarepreview.com
cloudflarepreviews.com
cloudflareresolve.com
cloudflarespeedtest.com
cloudflaressl.com
cloudflarestatus.com
cloudflaresupport.com
cloudflarewarp.com
encryptedsni.com
mycloudflare.com
mycloudflare.com
workers.dev

BIN
image/prismattnsa.jpg Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 52 KiB

BIN
image/siteground.jpg Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 42 KiB

View File

@ -22,6 +22,7 @@ There are many ways to detect it:
- [These add-ons](what-to-do.md) will help your Cloudflare collection.
- Visit a website via Tor or VPN, and you will be greeted by "Attention Required! Cloudflare" webpage.
- Use "[Is MITM?](https://searxes.danwin1210.me/collab/sxes/tool_ismitm.php)" webpage.
- Dig "[NS record](https://www.digwebinterface.com/?hostnames=emsisoft.com&type=NS&ns=resolver&useresolver=8.8.4.4&nameservers=)" of the domain.
```
@ -39,7 +40,10 @@ Organization Cloudflare, Inc.
Route 104.18.224.0/20
```
2) How to add your data
2) How to add your data (A or B)
Type A: Push to NotABug.org
1. Log in to *notabug.org*.
2. Click "*Fork*" button. (top-left corner)
@ -61,6 +65,11 @@ IMPORTANT: Please add only "Base Domain"
... to /split/cloudflare_e.txt
```
Type B: Just search about it on Searxes
Search the domain on Searxes, and it'll appear as "[MITM!] link name".
3) If the website *no longer using Cloudflare*, *remove* it from /split/ list and *add* to "[ex_cloudflare_users.txt](https://notabug.org/themusicgod1/cloudflare-tor/src/master/ex_cloudflare_users.txt)".
@ -76,6 +85,8 @@ IMPORTANT: Please add only "Base Domain"
| list_siteground.txt | siteground.com is a Tor-hostile hosting service that indiscriminately DoSes all Tor users with the collective judgement: "our system thinks you might be a robot!" Sometimes the site functions, and sometimes it times out, but the robot accusation is very common. |
| list_formerly_tor-hostile.txt | was previously on one of the above tor-hostile lists |
![](image/siteground.jpg)
```
IMPORTANT: Please add only "Base Domain" or "(base domain)[space](comment here)"
@ -95,4 +106,4 @@ Add them to [/not_cloudflare/](not_cloudflare/) (formerly "*TorBlocker Hall of S
This is a collection of websites that ban Tor exits, other than through Cloudflare(e.g. showing access denied pages, systematic timing out connections, ...).
[This add-ons](https://addons.mozilla.org/en-US/firefox/addon/which-website-rejected-me/) will help your list_error403 collection.
[This add-on](https://addons.mozilla.org/en-US/firefox/addon/which-website-rejected-me/) will help your list_error403 collection.

View File

@ -2,4 +2,4 @@
Don't block us!
See [instructions.md](file://../instructions.md) for file purpose and format specifications.
See [instructions.md](../instructions.md) for file purpose and format specifications.

View File

@ -72,11 +72,9 @@ If Cloudflare leak your information, it's not our fault. [*]
| [Block Cloudflare MITM Attack](https://trac.torproject.org/projects/tor/attachment/ticket/24351/block_cloudflare_mitm_attack-1.0.14.1-an%2Bfx.xpi) | nullius | [Link](https://github.com/nym-zone/block_cloudflare_mitm_fx) | **Yes** | **Yes** |
| [Are links vulnerable to MITM?](https://addons.mozilla.org/en-US/firefox/addon/are-links-vulnerable-to-mitm/) | Maslin Bossé | [Link](https://notabug.org/themusicgod1/cloudflare-tor/src/master/ismitmlink) | No | **Yes** |
| [Third-party Request Blocker (AMO)](https://addons.mozilla.org/en-US/firefox/addon/tprb/) | Searxes #Addon | [Link](https://searxes.danwin1210.me/) | **Yes** | **Yes** |
| [TPRB](https://sw.skusklxqaqnrmszytky4vfyrg625erw4hqhiokyc2ufnokd2aitb47yd.onion/) | Sw | [Link](https://sw.skusklxqaqnrmszytky4vfyrg625erw4hqhiokyc2ufnokd2aitb47yd.onion/) | **Yes** | **Yes** |
| [TPRB](https://searxes.danwin1210.me/collab/tprb0/get_tprb0.php) | Sw | [Link](https://sw.skusklxqaqnrmszytky4vfyrg625erw4hqhiokyc2ufnokd2aitb47yd.onion/) | **Yes** | **Yes** |
| [Detect Cloudflare](https://addons.mozilla.org/en-US/firefox/addon/detect-cloudflare/) | Frank Otto | [Link](https://github.com/traktofon/cf-detect) | No | **Yes** |
| [Cloud Firewall](https://addons.mozilla.org/en-US/firefox/addon/cloud-firewall/) [*] | Gokulakrishna Sudharsan | [Link](https://gitlab.com/gkrishnaks/cloud-firewall/) | **Yes** | No |
[*] Do not use it if you're using proxy/VPN/Tor because it has "[DNS leak](https://en.wikipedia.org/wiki/DNS_leak)".
- Convince your friends to use [Tor Browser](https://www.torproject.org/) on the daily basis. Anonymity should be the standard of the open internet!
@ -106,6 +104,90 @@ If Cloudflare leak your information, it's not our fault. [*]
- Install Web Application Firewall (such as OWASP) and Fail2Ban on _your_ server and configure it _properly_.
- If you want to know more alternative solutions, take a look at [this blog's "Alternative solutions" section](http://www.unixsheikh.com/articles/stay-away-from-cloudflare.html).
- Redirect or block "_Cloudflare Warp_" users from accessing your website. And provide a reason if you can.
> IP list is from "[Cloudflares current IP ranges](https://www.cloudflare.com/ips/)" webpage. They might lie, so check your server logs too.
> Method A: Just block
```
server {
...
deny 173.245.48.0/20;
deny 103.21.244.0/22;
deny 103.22.200.0/22;
deny 103.31.4.0/22;
deny 141.101.64.0/18;
deny 108.162.192.0/18;
deny 190.93.240.0/20;
deny 188.114.96.0/20;
deny 197.234.240.0/22;
deny 198.41.128.0/17;
deny 162.158.0.0/15;
deny 104.16.0.0/12;
deny 172.64.0.0/13;
deny 131.0.72.0/22;
deny 2400:cb00::/32;
deny 2606:4700::/32;
deny 2803:f800::/32;
deny 2405:b500::/32;
deny 2405:8100::/32;
deny 2a06:98c0::/29;
deny 2c0f:f248::/32;
...
}
```
> Method B: Redirect to warning page
```
http {
...
geo $iscf {
default 0;
173.245.48.0/20 1;
103.21.244.0/22 1;
103.22.200.0/22 1;
103.31.4.0/22 1;
141.101.64.0/18 1;
108.162.192.0/18 1;
190.93.240.0/20 1;
188.114.96.0/20 1;
197.234.240.0/22 1;
198.41.128.0/17 1;
162.158.0.0/15 1;
104.16.0.0/12 1;
172.64.0.0/13 1;
131.0.72.0/22 1;
2400:cb00::/32 1;
2606:4700::/32 1;
2803:f800::/32 1;
2405:b500::/32 1;
2405:8100::/32 1;
2a06:98c0::/29 1;
2c0f:f248::/32 1;
}
...
}
server {
...
if ($iscf) {rewrite ^ https://example.com/cfwsorry.php;}
...
}
<?php
header('HTTP/1.1 406 Not Acceptable');
echo <<<CLOUDFLARED
Thank you for visiting ourwebsite.com!<br />
We are sorry, but we can't serve you because your connection is being intercepted by Cloudflare.<br />
Please read https://notabug.org/themusicgod1/cloudflare-tor/ for more information.<br />
CLOUDFLARED;
die();
```
- Set up [Tor Onion Service](https://www.torproject.org/docs/onion-services.html.en) or I2P insite if you believe in freedom and welcome anonymous users.
- Ask for advice from other [Clearnet/Tor dual website operators](https://trac.torproject.org/projects/tor/wiki/org/projects/WeSupportTor) and make anonymous friends! :)
@ -132,7 +214,7 @@ If Cloudflare leak your information, it's not our fault. [*]
Let's talk about _other software's privacy_...
- If you really need to use Firefox, pick "[Firefox ESR](https://www.mozilla.org/en-US/firefox/organizations/)". ESR is developed for company and organizations, thus _some_ spyware code is disabled by default. Portable version is [here](https://portableapps.com/apps/internet/firefox-portable-esr).
- If you really need to use Firefox, pick "[Firefox ESR](https://www.mozilla.org/en-US/firefox/organizations/)". ESR is developed for company and organizations, thus _some_ spyware code is disabled by default. Portable version is [here](https://portableapps.com/apps/internet/firefox-portable-esr). But we tell you, Firefox is [horrible for privacy](https://www.reddit.com/r/privacytoolsIO/comments/81om92/what_are_the_differences_between_privacytoolsio/dv4orve/) in [many ways](https://spyware.neocities.org/articles/firefox.html).
- Remember, Mozilla is [using Cloudflare service](https://www.robtex.com/dns-lookup/www.mozilla.org). They're also using [Cloudflare's DNS service on their product](https://www.theregister.co.uk/2018/03/21/mozilla_testing_dns_encryption/) D'oh!
@ -228,6 +310,8 @@ Therefore we recommend "Tor Browser" only. Nothing else.
- The [ITU](https://www.itu.int/en/ITU-T/Workshops-and-Seminars/20181218/Documents/Geoff_Huston_Presentation.pdf) suggest in the US context that Cloudflare is starting to get big enough that antitrust law might be brought down upon them.
- It's conceivable that the GNU GPL v4 could include a provision against storing source code behind such a service, requiring for all GPLv4 and later programs that at least the source code is accessible via a medium that does not discriminate against tor users (or any other class of users or something?)
------------
### Now, what did you do today?