Compare commits
16 Commits
00492177ac
...
c40af0c53b
| Author | SHA1 | Date |
|---|---|---|
Sophie Yao
|
c40af0c53b | |
Andrew Li
|
0c582e4b6b | |
Gaurav Malik
|
fa9b186998 | |
Faiz Azhar
|
7ee456cd36 | |
|
Timothy Polich
|
b4889d3d6e | |
|
Thomas Dubrawski
|
153127c27d | |
|
Andria Jones
|
7fc40bbed0 | |
Blake Mattos
|
16f89889f5 | |
Corona
|
05b02f7c99 | |
remedy
|
d45ddfee1e | |
|
remedy
|
afeb65e2f3 | |
|
remedy
|
1b5795095f | |
|
remedy
|
ded2f63bc1 | |
|
remedy
|
75e71e687d | |
|
remedy
|
bcd1aa56d7 | |
|
remedy
|
dc5c07ec14 |
|
|
@ -2988,6 +2988,9 @@ Found many things that I use regularly wouldn't work anymore like they were bloc
|
|||
|
||||
|
||||
|
||||
"I did a search for "mango salsa recipe" on Runaroo.com, and the 1st four hits were all CloudFlare sites. That's really despicable. Each result takes enough screen space that 4 results fill the screen for some ppl." by [aktivismoestasmialuo](https://activism.openworlds.info/@aktivismoEstasMiaLuo/104512251495121238)
|
||||
|
||||
|
||||
"SenSherrodBrown's bill is a noble, but he should focus on getting the government's own house in order. There are hundreds of US government operated websites in the privacy abusing walledgarden of CloudFlare or hosted on Amazon AWS. We can boycott private companies but we can't boycott the government. The gov. needs to get public resources out of the hands of privacy-abusers." by [aktivismoestasmialuo](https://activism.openworlds.info/@aktivismoEstasMiaLuo/104501490167589216)
|
||||
|
||||
|
||||
|
|
|
|||
171
README.md
171
README.md
|
|
@ -9,134 +9,53 @@
|
|||
## Stop Cloudflare
|
||||
|
||||
|
||||
"The Great Cloudwall" is [Cloudflare Inc.](https://www.cloudflare.com/), the [U.S. company](https://en.wikipedia.org/wiki/Cloudflare).
|
||||
It is the [world's](https://almanac.httparchive.org/en/2019/cdn) [largest](https://w3techs.com/technologies/history_overview/proxy) MITM proxy([reverse proxy](https://en.wikipedia.org/wiki/Reverse_proxy)).
|
||||
It sits between you and origin webserver, acting like a [border patrol agent](https://www.cbp.gov/careers/bpa).
|
||||
The origin webserver administrator allowed the agent to decide [who can access](https://web.archive.org/web/https://gitlab.com/iblech/tor-appeal/issues/1) to their "_web property_" and define "_restricted area_".
|
||||
| Text | Image |
|
||||
| --- | --- |
|
||||
| "The Great Cloudwall" is [Cloudflare Inc.](https://www.cloudflare.com/), the [U.S. company](https://en.wikipedia.org/wiki/Cloudflare). |  |
|
||||
| It is the [world's](https://almanac.httparchive.org/en/2019/cdn) [largest](https://w3techs.com/technologies/history_overview/proxy) MITM proxy([reverse proxy](https://en.wikipedia.org/wiki/Reverse_proxy)). |  |
|
||||
| It sits between you and origin webserver, acting like a [border patrol agent](https://www.cbp.gov/careers/bpa). |  |
|
||||
| The origin webserver administrator allowed the agent to decide [who can access](https://web.archive.org/web/https://gitlab.com/iblech/tor-appeal/issues/1) to their "_web property_" and define "_restricted area_". |  |
|
||||
| Take a look at the right image. You will think Cloudflare block _only_ attackers. You will think _Cloudflare is always online(never go [down](https://twitter.com/bengoldacre/status/1146058200887648258))_. |  |
|
||||
| However [it is not true](PEOPLE.md). |  |
|
||||
| Just like any hosting service, Cloudflare is not perfect. |  |
|
||||
| This also happened in the year 2020. |  |
|
||||
| It is called this in reference to the [Great Firewall of China](https://www.comparitech.com/privacy-security-tools/blockedinchina/) which does a comparable job of [filtering out many humans](PEOPLE.md) from seeing web content (ie everyone in mainland China and people outside) while at the same time those not affected to see a dratically different web, a web free of censorship such as an image of ["tank man"](https://en.wikipedia.org/wiki/Tank_Man) and the history of ["Tiananmen Square protests"](https://en.wikipedia.org/wiki/1989_Tiananmen_Square_protests#Censorship_in_China). |  |
|
||||
| Cloudflare possesses [great power](http://digdeep4orxw6psc33yxa2dgmuycj74zi6334xhxjlgppw6odvkzkiad.onion/ghost/mozilla.html). In a sense, they control what the end user ultimately sees. |  |
|
||||
| |  |
|
||||
| |  |
|
||||
| |  |
|
||||
| Cloudflare also [automatically](https://twitter.com/itsybitsydots/status/1212691131508477952) [block](PEOPLE.md) legit robots/crawlers such as Google, Yandex, Yacy, and [API clients](PEOPLE.md). |  |
|
||||
| Cloudflare similarly prevents many people who have poor internet connectivity from accessing the websites behind it (for example, they could be behind 7+ layers of NAT or sharing same IP) unless they solve multiple image CAPTCHAs. In some cases, [this will take 10 to 30 minutes to satisfy Google](https://trac.torproject.org/projects/tor/ticket/23840). |  |
|
||||
| Many humans and software are being blocked by Cloudflare [every day](PEOPLE.md). |  |
|
||||
| Cloudflare [annoys many people](PEOPLE.md) around the world. |  |
|
||||
| |  |
|
||||
| |  |
|
||||
| There is no way to solve the captcha without enabling Javascript and Cookies. Cloudflare is [using them](PEOPLE.md) to make a browser signature to [identify](https://cryptome.org/2016/07/cloudflare-de-anons-tor.htm) [you](PEOPLE.md). |  |
|
||||
| [Tor users](https://www.torproject.org/) and [VPN users](https://airvpn.org/topic/23090-cloudflare-often-bans-my-ip-address/) are also a [victim](https://blog.torproject.org/trouble-cloudflare) of Cloudflare. |  |
|
||||
| If you didn't try Tor until this moment, we encourage you to [download Tor Browser](https://www.torproject.org/) and visit your favorite websites. (advice: _Do not login to your bank website or government webpage or they will flag your account. [Use VPN](https://www.vpngate.net/en/) for those websites._) |  |
|
||||
| You might want to say "_Tor is illegal! Tor is criminal's browser! Tor is bad!_". No. |  |
|
||||
| Tor _was_ [developed by US Army](https://www.nrl.navy.mil/itd/chacs/dingledine-tor-second-generation-onion-router), but current Tor is developed by the [Tor project](https://www.torproject.org/). There are many people and organizations [who use Tor](https://blog.torproject.org/tor-misused-criminals) including your future friends. So, if you are using Cloudflare on your website you are blocking _real_ humans. You will lose potential friendship and business deal. |  |
|
||||
| And their DNS service, [1.1.1.1](https://1.1.1.1/), is also filtering out users from visiting the website by returning [fake](https://trac.torproject.org/projects/tor/ticket/32915) IP address [owned by Cloudflare](https://www.reddit.com/r/CloudFlare/comments/hiqm4u/no_cloudflare_website_is_loading/), localhost IP such as "127.0.0.x", or just return nothing. |  |
|
||||
| |  |
|
||||
| Cloudflare DNS also [break](https://twitter.com/bowranger/status/1213031783576428550) [online](https://twitter.com/jb510/status/1212521533907668992) [software](https://twitter.com/No_Style/status/1201525422795710466) [from](https://twitter.com/daemuth/status/1187758306535903233) [smartphone](https://twitter.com/gregortorrence/status/1183102089439805441) [app](https://www.reddit.com/r/CloudFlare/comments/gmfm4i/us_bank_website_is_not_in_cloudflare_dns/) [to computer game because of their fake DNS answer](PEOPLE.md). |  |
|
||||
| |  |
|
||||
| And here you might think,<br>"_I am not using Tor or VPN, why should I care?_"<br>"_I trust marketing, why should I care_" |  |
|
||||
| If you visit website which use Cloudflare, you are sharing your information not only to website owner _but also Cloudflare_. |  |
|
||||
| It is impossible to [analyze](https://blog.cloudflare.com/the-csam-scanning-tool/) without [decrypting TLS traffic](https://github.com/nym-zone/block_cloudflare_mitm_fx/issues/15#issuecomment-354773389). |  |
|
||||
| Cloudflare knows all your data such as raw password. |  |
|
||||
| [Cloudbeed](https://en.wikipedia.org/wiki/Cloudbleed) can happen anytime. |  |
|
||||
| Cloudflare's HTTPS is never end-to-end. |  |
|
||||
| Do you really want to share your data with Cloudflare, and also 3-letter agency? |  |
|
||||
| Internet user's online profile is a "product" that the government and big tech companies wants to buy. |  |
|
||||
| U.S. [Department of Homeland Security](https://www.dhs.gov/) said:<br><br>"Do you have any idea how valuable the data you have is? Is there any way you would sell us that data?" |  |
|
||||
| Cloudflare also offer _FREE_ VPN service called "[Cloudflare Warp](https://blog.cloudflare.com/1111-warp-better-vpn/)". | |
|
||||
| If you use it, all your smartphone ([or your computer](https://techniapps.com/2019/09/26/download-cloudflare-warp-vpn-for-pc-windows-10-mac/)) connections are sent to Cloudflare servers. Cloudflare can know which website you've read, what comment you've posted, who you've talked to, etc. You are voluntary giving [all your information](https://github.com/privacytoolsIO/privacytools.io/issues/374#issuecomment-478686469) to Cloudflare. If you think "_Are you joking? Cloudflare is secure._" then you need to learn how [VPN works](https://en.wikipedia.org/wiki/VPN). |  |
|
||||
| Cloudflare said their VPN service make your internet [fast](https://www.wired.com/story/cloudflare-says-new-vpn-service-wont-slow-you-down/). But VPN make your internet connection _slower_ than [your](https://twitter.com/ExYakuza/status/1182317536089526273) [existing](https://twitter.com/waddling/status/1177615384616325120) [connection](https://techcrunch.com/2019/04/01/cloudflares-warp-is-a-vpn-that-might-actually-make-your-mobile-connection-better/). |  |
|
||||
| You might already know about the [PRISM](https://en.wikipedia.org/wiki/PRISM_(surveillance_program)) scandal. It is true that AT&T lets NSA to [copy all internet data](https://www.cnet.com/news/at-t-lets-nsa-hide-and-surveil-in-plain-sight-the-intercept-reports/) for surveillance. |  |
|
||||
| Let's say you're working at the NSA, and you want _every citizen's internet profile_. You know most of them are [blindly trusting Cloudflare](https://twitter.com/search?q=Cloudflare&f=live) and using it - only one centralized gateway - to proxy their company server connection([SSH](https://blog.cloudflare.com/public-keys-are-not-enough-for-ssh-security/)/[RDP](https://blog.cloudflare.com/cloudflare-access-now-supports-rdp/)), personal website, chat website, forum website, bank website, insurance website, search engine, secret member-only website, auction website, [shopping](https://www.cloudflare.com/case-studies/shopify-powering-the-biggest-shopping-weekend-of-the-year/), video website, NSFW website, and illegal website. You also know they use Cloudflare's DNS service ("_1.1.1.1_") and VPN service ("_Cloudflare Warp_") for "_Secure! Faster! Better!_" internet experience. Combining them with user's IP address, browser [fingerprint](https://github.com/VeNoMouS/cloudscraper/issues/209#issuecomment-624853689), cookies and RAY-ID will be useful to build target's online profile. |  |
|
||||
| You want their data. [What will you do](https://www.reddit.com/r/privacy/comments/1gb0pa/how_prism_actually_works_1520_att_fiber_optic/)? |  |
|
||||
|
||||
---
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
---
|
||||
|
||||
Take a look at the first image posted below. You will think Cloudflare block _only_ attackers. You will think _Cloudflare is always online(never go [down](https://twitter.com/bengoldacre/status/1146058200887648258))_. However [it is not true](PEOPLE.md).
|
||||
|
||||
---
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
---
|
||||
|
||||
It is called this in reference to the [Great Firewall of China](https://www.comparitech.com/privacy-security-tools/blockedinchina/) which does a comparable job of [filtering out many humans](PEOPLE.md) from seeing web content (ie everyone in mainland China and people outside) while at the same time those not affected to see a dratically different web, a web free of censorship such as an image of ["tank man"](https://en.wikipedia.org/wiki/Tank_Man) and the history of ["Tiananmen Square protests"](https://en.wikipedia.org/wiki/1989_Tiananmen_Square_protests#Censorship_in_China). Cloudflare possesses [great power](http://digdeep4orxw6psc33yxa2dgmuycj74zi6334xhxjlgppw6odvkzkiad.onion/ghost/mozilla.html). In a sense, they control what the end user ultimately sees.
|
||||
|
||||
Cloudflare also [automatically](https://twitter.com/itsybitsydots/status/1212691131508477952) [block](PEOPLE.md) legit robots/crawlers such as Google, Yandex, Yacy, and API clients.
|
||||
|
||||
---
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
---
|
||||
|
||||
Cloudflare similarly prevents many people who have poor internet connectivity from accessing the websites behind it (for example, they could be behind 7+ layers of NAT or sharing same IP) unless they solve multiple image CAPTCHAs. In some cases, [this will take 10 to 30 minutes to satisfy Google](https://trac.torproject.org/projects/tor/ticket/23840). Many humans and software are being blocked by Cloudflare [every day](PEOPLE.md). There is no way to solve the captcha without enabling Javascript and Cookies. Cloudflare is [using them](PEOPLE.md) to make a browser signature to [identify](https://cryptome.org/2016/07/cloudflare-de-anons-tor.htm) [you](PEOPLE.md).
|
||||
|
||||
---
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
---
|
||||
|
||||
[Tor users](https://www.torproject.org/) and [VPN users](https://airvpn.org/topic/23090-cloudflare-often-bans-my-ip-address/) are also a [victim](https://blog.torproject.org/trouble-cloudflare) of Cloudflare. If you didn't try Tor until this moment, we encourage you to [download Tor Browser](https://www.torproject.org/) and visit your favorite websites. (advice: _Do not login to your bank website or government webpage or they will flag your account. [Use VPN](https://www.vpngate.net/en/) for those websites._)
|
||||
|
||||
You might want to say "_Tor is illegal! Tor is criminal's browser! Tor is bad!_". No.
|
||||
Tor _was_ [developed by US Army](https://www.nrl.navy.mil/itd/chacs/dingledine-tor-second-generation-onion-router), but current Tor is developed by the [Tor project](https://www.torproject.org/). There are many people and organizations [who use Tor](https://blog.torproject.org/tor-misused-criminals) including your future friends. So, if you are using Cloudflare on your website you are blocking _real_ humans. You will lose potential friendship and business deal.
|
||||
|
||||
---
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
---
|
||||
|
||||
And their DNS service, [1.1.1.1](https://1.1.1.1/), is also filtering out users from visiting the website by returning [fake](https://trac.torproject.org/projects/tor/ticket/32915) IP address [owned by Cloudflare](https://www.reddit.com/r/CloudFlare/comments/hiqm4u/no_cloudflare_website_is_loading/), localhost IP such as "127.0.0.x", or just return nothing. Cloudflare DNS also [break](https://twitter.com/bowranger/status/1213031783576428550) [online](https://twitter.com/jb510/status/1212521533907668992) [software](https://twitter.com/No_Style/status/1201525422795710466) [from](https://twitter.com/daemuth/status/1187758306535903233) [smartphone](https://twitter.com/gregortorrence/status/1183102089439805441) [app](https://www.reddit.com/r/CloudFlare/comments/gmfm4i/us_bank_website_is_not_in_cloudflare_dns/) [to computer game because of their fake DNS answer](PEOPLE.md).
|
||||
|
||||
---
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
---
|
||||
|
||||
And here you might think, "_I am not using Tor or VPN, why should I care?_".
|
||||
If you visit website which use Cloudflare, you are sharing your information not only to website owner _but also Cloudflare_.
|
||||
It is impossible to [analyze](https://blog.cloudflare.com/the-csam-scanning-tool/) without [decrypting TLS traffic](https://github.com/nym-zone/block_cloudflare_mitm_fx/issues/15#issuecomment-354773389). Cloudflare knows all your data such as raw password.
|
||||
[Cloudbeed](https://en.wikipedia.org/wiki/Cloudbleed) can happen anytime.
|
||||
|
||||
---
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
---
|
||||
|
||||
Do you really want to share your data with Cloudflare, and also 3-letter agency?
|
||||
Internet user's online profile is a "product" that the government and big tech companies wants to buy.
|
||||
|
||||
U.S. [Department of Homeland Security](https://www.dhs.gov/) said:
|
||||
```
|
||||
Do you have any idea how valuable the data you have is?
|
||||
Is there any way you would sell us that data?
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
---
|
||||
|
||||
Cloudflare also offer _FREE_ VPN service called "[Cloudflare Warp](https://blog.cloudflare.com/1111-warp-better-vpn/)". If you use it, all your smartphone ([or your computer](https://techniapps.com/2019/09/26/download-cloudflare-warp-vpn-for-pc-windows-10-mac/)) connections are sent to Cloudflare servers. Cloudflare can know which website you've read, what comment you've posted, who you've talked to, etc. You are voluntary giving [all your information](https://github.com/privacytoolsIO/privacytools.io/issues/374#issuecomment-478686469) to Cloudflare. If you think "_Are you joking? Cloudflare is secure._" then you need to learn how [VPN works](https://en.wikipedia.org/wiki/VPN).
|
||||
|
||||
Cloudflare said their VPN service make your internet [fast](https://www.wired.com/story/cloudflare-says-new-vpn-service-wont-slow-you-down/). But VPN make your internet connection _slower_ than [your](https://twitter.com/ExYakuza/status/1182317536089526273) [existing](https://twitter.com/waddling/status/1177615384616325120) [connection](https://techcrunch.com/2019/04/01/cloudflares-warp-is-a-vpn-that-might-actually-make-your-mobile-connection-better/).
|
||||
|
||||
---
|
||||
|
||||
|
||||
|
||||
|
||||
---
|
||||
|
||||
You might already know about the [PRISM](https://en.wikipedia.org/wiki/PRISM_(surveillance_program)) scandal. It is true that AT&T lets NSA to [copy all internet data](https://www.cnet.com/news/at-t-lets-nsa-hide-and-surveil-in-plain-sight-the-intercept-reports/) for surveillance. Let's say you're working at the NSA, and you want _every citizen's internet profile_. You know most of them are [blindly trusting Cloudflare](https://twitter.com/search?q=Cloudflare&f=live) and using it - only one centralized gateway - to proxy their company server connection([SSH](https://blog.cloudflare.com/public-keys-are-not-enough-for-ssh-security/)/[RDP](https://blog.cloudflare.com/cloudflare-access-now-supports-rdp/)), personal website, chat website, forum website, bank website, insurance website, search engine, secret member-only website, auction website, [shopping](https://www.cloudflare.com/case-studies/shopify-powering-the-biggest-shopping-weekend-of-the-year/), video website, NSFW website, and illegal website. You also know they use Cloudflare's DNS service ("_1.1.1.1_") and VPN service ("_Cloudflare Warp_") for "_Secure! Faster! Better!_" internet experience. Combining them with user's IP address, browser [fingerprint](https://github.com/VeNoMouS/cloudscraper/issues/209#issuecomment-624853689), cookies and RAY-ID will be useful to build target's online profile. You want their data. [What will you do](https://www.reddit.com/r/privacy/comments/1gb0pa/how_prism_actually_works_1520_att_fiber_optic/)?
|
||||
|
||||
---
|
||||
|
||||
|
||||
|
||||
|
||||
---
|
||||
|
||||
### Cloudflare is a honeypot.
|
||||
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@
|
|||
|
||||
[//]: # (do not edit me; start)
|
||||
|
||||
## *174,067* FQDN
|
||||
## *176,328* FQDN
|
||||
|
||||
[//]: # (do not edit me; end)
|
||||
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@
|
|||
|
||||
[//]: # (do not edit me; start)
|
||||
|
||||
## *6,017,074* domains
|
||||
## *6,024,640* domains
|
||||
|
||||
[//]: # (do not edit me; end)
|
||||
|
||||
|
|
|
|||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
Binary file not shown.
|
After Width: | Height: | Size: 155 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 37 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 45 KiB |
|
|
@ -3,7 +3,7 @@
|
|||
|
||||
[//]: # (do not edit me; start)
|
||||
|
||||
## *2,286,310* FQDN
|
||||
## *2,331,218* FQDN
|
||||
|
||||
[//]: # (do not edit me; end)
|
||||
|
||||
|
|
@ -23,13 +23,13 @@
|
|||
|
||||
| CDN Code | Name | % of base domains blocked |
|
||||
| -------- | -------- | -------- |
|
||||
| Z2 | Akamai | 37.915 % |
|
||||
| Z3 | Cloudflare | 1.436 % |
|
||||
| Z4 | Imperva | 3.976 % |
|
||||
| Z6 | Microsoft | 2.686 % |
|
||||
| Z7 | INAP | 1.125 % |
|
||||
| Z8 | Sucuri | 3.965 % |
|
||||
| Z9 | Fastly | 3.704 % |
|
||||
| Z2 | Akamai | 38.177 % |
|
||||
| Z3 | Cloudflare | 1.450 % |
|
||||
| Z4 | Imperva | 3.963 % |
|
||||
| Z6 | Microsoft | 2.700 % |
|
||||
| Z7 | INAP | 1.142 % |
|
||||
| Z8 | Sucuri | 3.983 % |
|
||||
| Z9 | Fastly | 3.697 % |
|
||||
|
||||
[//]: # (end; table)
|
||||
|
||||
|
|
|
|||
Loading…
Reference in New Issue