mirror of
https://0xacab.org/dCF/deCloudflare.git
synced 2025-01-15 03:37:00 -05:00
This commit is contained in:
Syeef Karim
parent
87a7692325
commit
92752bdde5
@ -1,335 +1,109 @@
|
||||
# 👋 [_Non-English_ versions](../README.md)
|
||||
<br><br><br><br><br>
|
||||
|
||||
|
||||
---
|
||||
|
||||
|
||||
# Ethical Issues
|
||||
|
||||
|
||||
|
||||
|
||||
"_Don't support this company which is void of ethics_"
|
||||
|
||||
"_Your company isn't trustworthy. You claim to enforce DMCA but have many lawsuits for not doing so._"
|
||||
|
||||
"_They only censor those who question their ethics._"
|
||||
|
||||
"_I guess the truth is inconvenient and better hidden from public view._" -- [phyzonloop](https://twitter.com/phyzonloop)
|
||||
|
||||
|
||||
---
|
||||
|
||||
|
||||
<details>
|
||||
<summary>_click me_
|
||||
|
||||
## CloudFlare spams people
|
||||
</summary>
|
||||
|
||||
|
||||
Cloudflare is sending spam emails to non-Cloudflare users.
|
||||
|
||||
- Only send emails to subscribers who’ve opted in
|
||||
- When the user say "stop", then stop sending email
|
||||
|
||||
It's that simple. But Cloudflare doesn't care.
|
||||
Cloudflare said using their service [can stop all spammers or attackers](https://support.cloudflare.com/hc/en-us/articles/200170066-Will-activating-Cloudflare-stop-all-spammers-or-attackers-).
|
||||
How can we stop _Cloudflare spammers_ without activating Cloudflare?
|
||||
|
||||
|
||||
| 🖼 | 🖼 |
|
||||
| --- | --- |
|
||||
|  |  |
|
||||
|  | <br> |
|
||||
|
||||
</details>
|
||||
|
||||
---
|
||||
|
||||
<details>
|
||||
<summary>_click me_
|
||||
|
||||
## Remove user's review
|
||||
</summary>
|
||||
|
||||
|
||||
Cloudflare censor [negative reviews](https://web.archive.org/web/20191116004046/https://www.trustpilot.com/reviews/5aa6ee0ed5a5700a7c8cf853). If you post _anti-Cloudflare_ text on Twitter, you have a chance to get a [reply](https://twitter.com/CloudflareHelp/status/1126051764917145601) from [Cloudflare employee](cloudflare_inc/cloudflare_members.txt) with "_[No, it's not](PEOPLE.md)_" message. If you post a negative review on any review site, they will try to [censor](https://twitter.com/phyzonloop/status/1178836176985366529) [it](https://twitter.com/dxgl_org/status/1178722159432220672).
|
||||
|
||||
|
||||
| 🖼 | 🖼 |
|
||||
| --- | --- |
|
||||
| <br> |  |
|
||||
|
||||
</details>
|
||||
|
||||
---
|
||||
|
||||
<details>
|
||||
<summary>_click me_
|
||||
|
||||
## Share user's private information
|
||||
</summary>
|
||||
|
||||
|
||||
Cloudflare has a massive [harassment problem](https://web.archive.org/web/20171024040313/http://www.businessinsider.com/cloudflare-ceo-suggests-people-who-report-online-abuse-use-fake-names-2017-5).
|
||||
Cloudflare [shares personal information](https://archive.ph/ePdvi) of those [who](https://twitter.com/ZJemptv/status/898299709634248704) [complain](https://twitter.com/TinyPirate/status/554718958176067584) [about](https://twitter.com/remembrancermx/status/1010329041235148802) [hosted](https://twitter.com/Bridaguy/status/915003769280172037) [sites](https://twitter.com/HelloAndrew/status/897260208845500416). They sometimes ask you to provide
|
||||
your true ID. If you don't want to get harassed, [assaulted](https://twitter.com/NiteShade925/status/1158469203420205056), [swatted](https://boingboing.net/2015/01/19/invasion-boards-set-out-to-rui.html) or [killed](https://twitter.com/RusEmbUSA/status/1187363092793040901), you better stay away from Cloudflared websites.
|
||||
|
||||
|
||||
| 🖼 | 🖼 |
|
||||
| --- | --- |
|
||||
|  |  |
|
||||
|  |  |
|
||||
|  | <br> |
|
||||
|
||||
</details>
|
||||
|
||||
---
|
||||
|
||||
<details>
|
||||
<summary>_click me_
|
||||
|
||||
## Corporate solicitation of charitable contributions
|
||||
</summary>
|
||||
|
||||
|
||||
CloudFlare is [asking](https://web.archive.org/web/20191112033605/https://opencollective.com/cloudflarecollective#section-about) for charitable contributions. It’s quite appalling that an American corporation would ask for charity alongside non-profit organizations that have good causes. If you like [blocking people or wasting other people's time](PEOPLE.md), you might want to order some pizzas🍕 for Cloudflare employees.
|
||||
|
||||
|
||||
|
||||
|
||||
</details>
|
||||
|
||||
---
|
||||
|
||||
<details>
|
||||
<summary>_click me_
|
||||
|
||||
## Terminating sites
|
||||
</summary>
|
||||
|
||||
|
||||
What will you do if your site goes down _suddenly_? There are reports that Cloudflare is [deleting](https://twitter.com/stefan_eady/status/1126033791267426304) [user's](https://twitter.com/derivativeburke/status/903755267053117440) [configuration](https://twitter.com/lordscarlet/status/1046785164792205314) or [stopping service without any warning](https://twitter.com/svolentin/status/1227324408475344896), [silently](https://twitter.com/BlnaryMlke/status/1194339461984854018). We suggest you find [better provider](what-to-do.md).
|
||||
|
||||
|
||||
|
||||
</details>
|
||||
|
||||
---
|
||||
|
||||
<details>
|
||||
<summary>_click me_
|
||||
|
||||
## Browser vendor discrimination
|
||||
</summary>
|
||||
|
||||
|
||||
CloudFlare gives preferential treatment to those using Firefox while giving hostile treatment to users of non-Tor-Browser over Tor.
|
||||
Tor users of who rightfully refuse to execute non-free javascript also receive hostile treatment.
|
||||
This access inequality is a network neutrality abuse and an abuse of power.
|
||||
|
||||
|
||||
|
||||
- Left: `Tor Browser` , Right: `Chrome`. Same IP address.
|
||||
|
||||
|
||||
|
||||
- Left: `[Tor Browser] Javascript Disabled, Cookie Enabled`
|
||||
- Right: `[Chrome] Javascript Enabled, Cookie Disabled`
|
||||
|
||||
|
||||
|
||||
- QuteBrowser(minor browser) without Tor (Clearnet IP)
|
||||
|
||||
|
||||
|
||||
- Lynx
|
||||
|
||||
|
||||
| ***Browser*** | ***Access treatment*** |
|
||||
| --- | --- |
|
||||
| Tor Browser (Javascript enabled) | access permitted |
|
||||
| Firefox (Javascript enabled) | access degraded |
|
||||
| Chromium (Javascript enabled) | access degraded (pushes Google reCAPTCHA) |
|
||||
| Chromium or Firefox (Javascript disabled) | access denied (pushes *broken* Google reCAPTCHA) |
|
||||
| Chromium or Firefox (Cookie disabled) | access denied |
|
||||
| QuteBrowser | access denied |
|
||||
| lynx | access denied |
|
||||
| w3m | access denied |
|
||||
| wget | access denied |
|
||||
|
||||
|
||||
"_Why not use Audio button to solve easy challenge?_"
|
||||
|
||||
Yes, there is an audio button, but it _always_ [doesn't work over Tor](https://trac.torproject.org/projects/tor/ticket/23840). You will get this message when you click it:
|
||||
|
||||
```
|
||||
Try again later
|
||||
Your computer or network may be sending automated queries.
|
||||
To protect our users, we can't process your request right now.
|
||||
For more details visit our help page
|
||||
```
|
||||
|
||||
</details>
|
||||
|
||||
---
|
||||
|
||||
<details>
|
||||
<summary>_click me_
|
||||
|
||||
## Voter suppression
|
||||
</summary>
|
||||
|
||||
|
||||
Voters in US states register to vote ultimately through the state secretary's website in the state of their residence.
|
||||
Republican-controlled state secretary offices engage in voter suppression by proxying the state secretary's website through Cloudflare.
|
||||
Cloudflare's hostile treatment of Tor users, its MITM position as a centralized global point of surveillance, and its detrimental role overall
|
||||
makes prospective voters reluctant to register. Liberals in particular tend to embrace privacy. Voter registration forms collect sensitive information about a voter's political leaning, personal physical address, social security number, and date of birth.
|
||||
Most states only make a subset of that information publicly available, but Cloudflare sees ***all*** that information when someone registers to vote.
|
||||
|
||||
Note that paper registration does not circumvent Cloudflare because the secretary of state data entry staff workers will likely use the
|
||||
Cloudflare website to enter the data.
|
||||
|
||||
| 🖼 | 🖼 |
|
||||
| --- | --- |
|
||||
|  |  |
|
||||
|
||||
- Change.org is a famous website for gathering votes and take action. "[people everywhere are starting campaigns, mobilizing supporters, and working with decision makers to drive solutions.](https://web.archive.org/web/20200206120027/https://www.change.org/about)"
|
||||
Unfortunately, many people cannot view change.org at all due to Cloudflare's aggressive filter. They are being blocked from signing the petition, thus excluding them from a democratic process. Using other non-cloudflared platform such as [OpenPetition](https://www.openpetition.eu/content/about_us) helps remedy the problem.
|
||||
|
||||
| 🖼 | 🖼 |
|
||||
| --- | --- |
|
||||
|  |  |
|
||||
|
||||
- Cloudflare's "[Athenian Project](https://www.cloudflare.com/athenian/)" offers free enterprise-level protection to state and local election websites. They said "_their constituents can access election information and voter registration_" but this is a lie because many people just can't browse the site at all.
|
||||
|
||||
</details>
|
||||
|
||||
---
|
||||
|
||||
<details>
|
||||
<summary>_click me_
|
||||
|
||||
## Ignoring user's preference
|
||||
</summary>
|
||||
|
||||
|
||||
If you opt-out something, you expect that you receive no email about it. Cloudflare ignore user's preference and share data with third-party corporations [without customer's consent](https://twitter.com/thexpaw/status/1108424723233419264). If you're using their free plan, they sometimes send email to you asking to buy monthly subscription.
|
||||
|
||||
|
||||
|
||||
</details>
|
||||
|
||||
---
|
||||
|
||||
<details>
|
||||
<summary>_click me_
|
||||
|
||||
## Lying about deleting user's data
|
||||
</summary>
|
||||
|
||||
|
||||
According to this [ex-cloudflare customer's blog](https://shkspr.mobi/blog/2019/11/can-you-trust-cloudflare-with-your-personal-data/), Cloudflare is lying about deleting accounts. Nowadays, many [companies keep your data](https://justdeleteme.xyz/) after you've closed or removed your account. Most of good companies do mention about it in their privacy policy. Cloudflare? No.
|
||||
|
||||
```
|
||||
2019-08-05 CloudFlare sent me confirmation that they'd removed my account.
|
||||
2019-10-02 I received an email from CloudFlare "because I am a customer"
|
||||
```
|
||||
|
||||
Cloudflare didn't know about the word "remove". If it is really _removed_, why this ex-customer got an email? He also mentioned that Cloudflare's privacy policy doesn't mention about it.
|
||||
|
||||
```
|
||||
Their new privacy policy doesn't make any mention of retaining data for a year.
|
||||
```
|
||||
|
||||
|
||||
|
||||
How can you trust Cloudflare if [their privacy policy is a LIE](https://twitter.com/daviddlow/status/1197787135526555648)?
|
||||
|
||||
- [Over a year passed since I cancelled my Cloudflare account](https://shkspr.mobi/blog/2020/09/dont-trust-cloudflare-with-your-personal-data/)
|
||||
|
||||
</details>
|
||||
|
||||
---
|
||||
|
||||
<details>
|
||||
<summary>_click me_
|
||||
|
||||
## Keep your personal information
|
||||
</summary>
|
||||
|
||||
|
||||
Deleting Cloudflare account is [hard level](https://justdeleteme.xyz/).
|
||||
|
||||
```
|
||||
Submit a support ticket using the "Account" category,
|
||||
and request account deletion in the message body.
|
||||
You must have no domains or credit cards attached to your account prior to requesting deletion.
|
||||
```
|
||||
|
||||
You will [receive this confirmation email](https://twitter.com/originalesushi/status/1199041528414527495).
|
||||
|
||||
|
||||
|
||||
"We have begun to process your deletion request" but "We will continue to store your personal information".
|
||||
|
||||
Can you "trust" this?
|
||||
|
||||
|
||||
- How to cancel your Cloudflare account
|
||||
|
||||
1. Login to your [Cloudflare dashboard](https://dash.cloudflare.com/).
|
||||
2. Delete all zones(domains) from your dashboard.
|
||||
3. Click _support_ link.
|
||||
4. Send a new ticket. Tell them that you want to close your account.
|
||||
5. _Wait several days._
|
||||
6. Cloudflare staff will ask for your confirmation and the reason why you have decided to leave Cloudflare.
|
||||
7. Send a reply again.
|
||||
8. _Wait several days._
|
||||
9. You will get a message: "We have successfully deleted your account"
|
||||
|
||||
|
||||
</details>
|
||||
|
||||
---
|
||||
|
||||
<details>
|
||||
<summary>_click me_
|
||||
|
||||
## Cancelled subscription, got barrage of emails
|
||||
</summary>
|
||||
|
||||
|
||||
The user cancelled his stream subscription and now he gets email reminders every day to remind him about cancelled subscription.
|
||||
There is no unsubscribe button. How do you make this stop?
|
||||
|
||||
|
||||
|
||||
Cloudflare told this user to contact support and ask all your contents to be deleted.
|
||||
|
||||
- [t](https://web.archive.org/web/20210412165334/https://twitter.com/JohnHaldson/status/1381651569247088650)
|
||||
|
||||
</details>
|
||||
|
||||
---
|
||||
|
||||
## Other information
|
||||
|
||||
- [Joseph Sullivan (Joe Sullivan)](../cloudflare_inc/cloudflare_members.md) ([Cloudflare CSO](https://twitter.com/eastdakota/status/1296522269313785862))
|
||||
- [Ex-Uber security head charged in connection with the cover-up of a 2016 hack that affected 57 million customers](https://www.businessinsider.com/uber-data-hack-security-head-joe-sullivan-charged-cover-up-2020-8)
|
||||
- [Former Chief Security Officer For Uber Charged With Obstruction Of Justice](https://www.justice.gov/usao-ndca/pr/former-chief-security-officer-uber-charged-obstruction-justice)
|
||||
|
||||
```
|
||||
Sullivan took to allegedly cover it up, including making the $100,000 payout
|
||||
under Uber's "bug bounty" program.
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
|
||||
## Please continue to next page: "[What you can do to resist Cloudflare?](en.action.md)
|
||||
|
||||
|
||||
|
||||
clickme click me
|
||||
ethx0000 Ethical Issues
|
||||
ethx0001 Don't support this company which is void of ethics
|
||||
ethx0002 Your company isn't trustworthy. You claim to enforce DMCA but have many lawsuits for not doing so.
|
||||
ethx0003 They only censor those who question their ethics.
|
||||
ethx0004 I guess the truth is inconvenient and better hidden from public view.
|
||||
ethx1n0000 CloudFlare spams people
|
||||
ethx1n0001 Cloudflare is sending spam emails to non-Cloudflare users.
|
||||
ethx1n0002 Only send emails to subscribers who've opted in
|
||||
ethx1n0003 When the user say "stop", then stop sending email
|
||||
ethx1n0004 It's that simple. But Cloudflare doesn't care.
|
||||
ethx1n0005 Cloudflare said using their service can stop all spammers or attackers.
|
||||
ethx1n0006 How can we stop Cloudflare without activating Cloudflare?
|
||||
ethx2n0000 Remove user's review
|
||||
ethx2n0001 Cloudflare censor negative reviews.
|
||||
ethx2n0002 If you post anti-Cloudflare text on Twitter, you have a chance to get a reply from Cloudflare employee with "No, it's not" message.
|
||||
ethx2n0003 If you post a negative review on any review site, they will try to censor it.
|
||||
ethx3n0000 Share user's private information
|
||||
ethx3n0001 Cloudflare has a massive harassment problem.
|
||||
ethx3n0002 Cloudflare shares personal information of those who complain about hosted sites.
|
||||
ethx3n0003 They sometimes ask you to provide your true ID.
|
||||
ethx3n0004 If you don't want to get harassed, assaulted, swatted or killed, you better stay away from Cloudflared websites.
|
||||
ethx4n0000 Corporate solicitation of charitable contributions
|
||||
ethx4n0001 CloudFlare is asking for charitable contributions.
|
||||
ethx4n0002 It's quite appalling that an American corporation would ask for charity alongside non-profit organizations that have good causes.
|
||||
ethx4n0003 If you like blocking people or wasting other people's time, you might want to order some pizzas for Cloudflare employees.
|
||||
ethx5n0000 Terminating sites
|
||||
ethx5n0001 What will you do if your site goes down suddenly?
|
||||
ethx5n0002 There are reports that Cloudflare is deleting user's configuration or stopping service without any warning, silently.
|
||||
ethx5n0003 We suggest you find better provider.
|
||||
ethx6n0000 Browser vendor discrimination
|
||||
ethx6n0001 CloudFlare gives preferential treatment to those using Firefox while giving hostile treatment to users of non-Tor-Browser over Tor.
|
||||
ethx6n0002 Tor users of who rightfully refuse to execute non-free javascript also receive hostile treatment.
|
||||
ethx6n0003 This access inequality is a network neutrality abuse and an abuse of power.
|
||||
ethx6n0004 Left: Tor Browser , Right: Chrome. Same IP address.
|
||||
ethx6n0005 Left: Tor Browser Javascript Disabled, Cookie Enabled
|
||||
ethx6n0006 Right: Chrome Javascript Enabled, Cookie Disabled
|
||||
ethx6n0007 QuteBrowser(minor browser) without Tor (Clearnet IP)
|
||||
ethx6n0008 Browser
|
||||
ethx6n0009 Access treatment
|
||||
ethx6n0010 Javascript enabled
|
||||
ethx6n0011 Javascript disabled
|
||||
ethx6n0012 Cookie disabled
|
||||
ethx6n0013 access permitted
|
||||
ethx6n0014 access degraded
|
||||
ethx6n0015 access denied
|
||||
ethx6n0016 Why not use Audio button to solve easy challenge?
|
||||
ethx6n0017 Yes, there is an audio button, but it always doesn't work over Tor.
|
||||
ethx6n0018 You will get this message when you click it
|
||||
ethx6n0019 Try again later
|
||||
ethx6n0020 Your computer or network may be sending automated queries.
|
||||
ethx6n0021 To protect our users, we can't process your request right now.
|
||||
ethx6n0022 For more details visit our help page
|
||||
ethx7n0000 Voter suppression
|
||||
ethx7n0001 Voters in US states register to vote ultimately through the state secretary's website in the state of their residence.
|
||||
ethx7n0002 Republican-controlled state secretary offices engage in voter suppression by proxying the state secretary's website through Cloudflare.
|
||||
ethx7n0003 Cloudflare's hostile treatment of Tor users, its MITM position as a centralized global point of surveillance, and its detrimental role overall makes prospective voters reluctant to register.
|
||||
ethx7n0004 Liberals in particular tend to embrace privacy.
|
||||
ethx7n0005 Voter registration forms collect sensitive information about a voter's political leaning, personal physical address, social security number, and date of birth.
|
||||
ethx7n0006 Most states only make a subset of that information publicly available, but Cloudflare sees all that information when someone registers to vote.
|
||||
ethx7n0007 Note that paper registration does not circumvent Cloudflare because the secretary of state data entry staff workers will likely use the Cloudflare website to enter the data.
|
||||
ethx7n0008 Change.org is a famous website for gathering votes and take action.
|
||||
ethx7n0009 people everywhere are starting campaigns, mobilizing supporters, and working with decision makers to drive solutions.
|
||||
ethx7n0010 Unfortunately, many people cannot view change.org at all due to Cloudflare's aggressive filter.
|
||||
ethx7n0011 They are being blocked from signing the petition, thus excluding them from a democratic process.
|
||||
ethx7n0012 Using other non-cloudflared platform such as OpenPetition helps remedy the problem.
|
||||
ethx7n0013 Cloudflare's "Athenian Project" offers free enterprise-level protection to state and local election websites.
|
||||
ethx7n0014 They said "their constituents can access election information and voter registration" but this is a lie because many people just can't browse the site at all.
|
||||
ethx8n0000 Ignoring user's preference
|
||||
ethx8n0001 If you opt-out something, you expect that you receive no email about it.
|
||||
ethx8n0002 Cloudflare ignore user's preference and share data with third-party corporations without customer's consent.
|
||||
ethx8n0003 If you're using their free plan, they sometimes send email to you asking to buy monthly subscription.
|
||||
ethx9n0000 Lying about deleting user's data
|
||||
ethx9n0001 According to this ex-cloudflare customer's blog, Cloudflare is lying about deleting accounts.
|
||||
ethx9n0002 Nowadays, many companies keep your data after you've closed or removed your account.
|
||||
ethx9n0003 Most of good companies do mention about it in their privacy policy.
|
||||
ethx9n0004 Cloudflare? No.
|
||||
ethx9n0005 CloudFlare sent me confirmation that they'd removed my account.
|
||||
ethx9n0006 I received an email from CloudFlare "because I am a customer"
|
||||
ethx9n0007 Cloudflare didn't know about the word "remove".
|
||||
ethx9n0008 If it is really removed, why this ex-customer got an email?
|
||||
ethx9n0009 He also mentioned that Cloudflare's privacy policy doesn't mention about it.
|
||||
ethx9n0010 Their new privacy policy doesn't make any mention of retaining data for a year.
|
||||
ethx9n0011 How can you trust Cloudflare if their privacy policy is a LIE?
|
||||
ethx9n0012 Over a year passed since I cancelled my Cloudflare account
|
||||
ethx10n0000 Keep your personal information
|
||||
ethx10n0001 Deleting Cloudflare account is hard level.
|
||||
ethx10n0002 Submit a support ticket using the "Account" category,
|
||||
ethx10n0003 and request account deletion in the message body.
|
||||
ethx10n0004 You must have no domains or credit cards attached to your account prior to requesting deletion.
|
||||
ethx10n0005 You will receive this confirmation email.
|
||||
ethx10n0006 "We have begun to process your deletion request" but "We will continue to store your personal information".
|
||||
ethx10n0007 Can you "trust" this?
|
||||
ethx10n0008 How to cancel your Cloudflare account
|
||||
ethx10n0009 Login to your Cloudflare dashboard.
|
||||
ethx10n0010 Delete all zones(domains) from your dashboard.
|
||||
ethx10n0011 Click support link.
|
||||
ethx10n0012 Send a new ticket. Tell them that you want to close your account.
|
||||
ethx10n0013 Wait several days.
|
||||
ethx10n0014 Cloudflare staff will ask for your confirmation and the reason why you have decided to leave Cloudflare.
|
||||
ethx10n0015 Send a reply again.
|
||||
ethx10n0016 You will get a message: We have successfully deleted your account
|
||||
ethx11n0000 Cancelled subscription, got barrage of emails
|
||||
ethx11n0001 The user cancelled his stream subscription and now he gets email reminders every day to remind him about cancelled subscription.
|
||||
ethx11n0002 There is no unsubscribe button. How do you make this stop?
|
||||
ethx11n0003 Cloudflare told this user to contact support and ask all your contents to be deleted.
|
||||
other1nfo Other information
|
||||
pleasenext Please continue to next page
|
||||
uactionmd What you can do to resist Cloudflare?
|
||||
Loading…
Reference in New Issue
Block a user