Compare commits
19 Commits
260650673e
...
f82e65a5f4
| Author | SHA1 | Date |
|---|---|---|
resistance
|
f82e65a5f4 | |
asis
|
3d48da22db | |
|
asis
|
377940d805 | |
|
asis
|
2f486da9db | |
|
asis
|
d5a4e2368b | |
|
asis
|
3ac2c59144 | |
|
asis
|
aff3b67500 | |
|
asis
|
74868f3600 | |
|
asis
|
604c47f845 | |
|
asis
|
a408806664 | |
|
asis
|
e36c978e65 | |
|
asis
|
b6396741ff | |
|
asis
|
736a5534bf | |
|
asis
|
c9dd4639c3 | |
|
resistance
|
f7784667b8 | |
|
asis
|
ef0c2ed7bd | |
|
asis
|
beca1a4f55 | |
|
asis
|
394490002c | |
|
asis
|
a10670e421 |
|
|
@ -1,6 +1,7 @@
|
|||
- _zz_.md
|
||||
- _zz_.ethics.md
|
||||
- _zz_.short.md
|
||||
- TEMPLATE.md
|
||||
- _zz_.md
|
||||
- _zz_.ethics.md
|
||||
- _zz_.short.md
|
||||
|
||||
|
||||
---
|
||||
|
|
|
|||
36
readme/en.md
36
readme/en.md
|
|
@ -91,7 +91,7 @@
|
|||
</summary>
|
||||
|
||||
|
||||
This repository is a list of websites that are behind "_The Great Cloudwall_", blocking Tor users and other CDNs.
|
||||
This repository is a list of websites that are behind "The Great Cloudwall", blocking Tor users and other CDNs.
|
||||
|
||||
|
||||
**Data**
|
||||
|
|
@ -107,19 +107,19 @@ This repository is a list of websites that are behind "_The Great Cloudwall_", b
|
|||
|
||||
**More Information**
|
||||
* [Myth Catalog](../subfiles/myth_catalog.md)
|
||||
* [The Great Cloudwall](../pdf/2019-Jeff_Cliff_Book1.txt) by [Mr. Jeff Cliff](https://shitposter.club/users/jeffcliff)
|
||||
* Download as: PDF [here](../pdf/2019-The_Great_Cloudwall.pdf), ePUB [here](../pdf/2019-Jeff_Cliff_The_Great_Cloudwall.epub)
|
||||
* The original eBook(ePUB) was deleted by `BookRix GmbH` due to `copyright infringement of CC0 material`
|
||||
* [Padlock icon indicates a secure SSL connection established w MITM-ed](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831835) by Anonymous
|
||||
* [Block Global Active Adversary Cloudflare](https://trac.torproject.org/projects/tor/ticket/24351) by nym-zone
|
||||
* [The Great Cloudwall](../pdf/2019-Jeff_Cliff_Book1.txt), [Mr. Jeff Cliff](https://shitposter.club/users/jeffcliff)
|
||||
* Download: [PDF](../pdf/2019-The_Great_Cloudwall.pdf), [ePUB](../pdf/2019-Jeff_Cliff_The_Great_Cloudwall.epub)
|
||||
* The original eBook(ePUB) was deleted by BookRix GmbH due to copyright infringement of CC0 material
|
||||
* [Padlock icon indicates a secure SSL connection established w MITM-ed](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831835), Anonymous
|
||||
* [Block Global Active Adversary Cloudflare](https://trac.torproject.org/projects/tor/ticket/24351), nym-zone
|
||||
* The ticket was vandalized so many times.
|
||||
* Deleted by the [Tor Project](https://lists.torproject.org/pipermail/anti-censorship-team/2020-May/000098.html). See ticket [34175](https://trac.torproject.org/projects/tor/ticket/34175).
|
||||
* Last archive ticket [24351](https://web.archive.org/web/20200301013104/https://trac.torproject.org/projects/tor/ticket/24351)
|
||||
* [Problem with Cloudflare](https://github.com/privacytoolsIO/privacytools.io/issues/374#issuecomment-460077544) by libBletchley
|
||||
* They had used Cloudflare in the past. [Added](https://github.com/privacytools/privacytools.io/pull/1205) CF-tor but [removed it](https://github.com/privacytools/privacytools.io/pull/1804).
|
||||
* [Deleted by the Tor Project.](https://lists.torproject.org/pipermail/anti-censorship-team/2020-May/000098.html) [See ticket 34175.](https://trac.torproject.org/projects/tor/ticket/34175)
|
||||
* [Last archive ticket 24351](https://web.archive.org/web/20200301013104/https://trac.torproject.org/projects/tor/ticket/24351)
|
||||
* [Problem with Cloudflare](https://github.com/privacytoolsIO/privacytools.io/issues/374#issuecomment-460077544), libBletchley
|
||||
* They had used Cloudflare in the past. [CF-tor was removed.](https://github.com/privacytools/privacytools.io/pull/1804)
|
||||
* [Cloudflare Watch](http://www.crimeflare.org:82/)
|
||||
* [Criticism and controversies](https://en.wikipedia.org/wiki/Cloudflare#Criticism_and_controversies) by Wikipedia
|
||||
* [Another landmark day in the war to control, centralize and censor the internet.](https://www.reddit.com/r/privacy/comments/b8dptl/another_landmark_day_in_the_war_to_control/) by TheGoldenGoose8888
|
||||
* [Criticism and controversies](https://en.wikipedia.org/wiki/Cloudflare#Criticism_and_controversies), Wikipedia
|
||||
* [Another landmark day in the war to control, centralize and censor the internet.](https://www.reddit.com/r/privacy/comments/b8dptl/another_landmark_day_in_the_war_to_control/), TheGoldenGoose8888
|
||||
* [Disadvantage of relying on only one service](https://twitter.com/w3Nicolas/status/1134529316904153089) ([DO is CF](https://www.digwebinterface.com/?hostnames=ns1.digitalocean.com%0D%0Ans2.digitalocean.com%0D%0Ans3.digitalocean.com%0D%0Awww.digitalocean.com&type=A&ns=resolver&useresolver=8.8.4.4&nameservers=))
|
||||
|
||||
|
||||
|
|
@ -135,19 +135,19 @@ This repository is a list of websites that are behind "_The Great Cloudwall_", b
|
|||
## What can you do?
|
||||
</summary>
|
||||
|
||||
* Read [our list of recommended actions](../ACTION.md) and share it with your friends.
|
||||
* [Read our list of recommended actions and share it with your friends.](../ACTION.md)
|
||||
|
||||
* Read [other user's voice](../PEOPLE.md) and write your thoughts.
|
||||
* [Read other user's voice and write your thoughts.](../PEOPLE.md)
|
||||
|
||||
* Search something on [Ansero](https://ansero.wodferndripvpe6ib4uz4rtngrnzichnirgn7t5x64gxcyroopbhsuqd.onion/) ([clearnet](https://ansero.eu.org/)) or [Crimeflare \#Search](https://crimeflare.wodferndripvpe6ib4uz4rtngrnzichnirgn7t5x64gxcyroopbhsuqd.onion/) ([clearnet](https://crimeflare.eu.org/)).
|
||||
* Search something: [Ansero](https://ansero.wodferndripvpe6ib4uz4rtngrnzichnirgn7t5x64gxcyroopbhsuqd.onion/) ([clearnet](https://ansero.eu.org/)), [Crimeflare \#Search](https://crimeflare.wodferndripvpe6ib4uz4rtngrnzichnirgn7t5x64gxcyroopbhsuqd.onion/) ([clearnet](https://crimeflare.eu.org/))
|
||||
|
||||
* Update the domain list: [List instructions](../INSTRUCTION.md).
|
||||
|
||||
* Add Cloudflare or project related event to [history](../HISTORY.md).
|
||||
* [Add Cloudflare or project related event to history.](../HISTORY.md)
|
||||
|
||||
* Try & write new [Tool/Script](../tool/).
|
||||
* [Try & write new Tool/Script.](../tool/)
|
||||
|
||||
* Here's some [PDF/ePUB](../pdf/) to read.
|
||||
* [Here's some PDF/ePUB to read.](../pdf/)
|
||||
|
||||
|
||||
---
|
||||
|
|
|
|||
|
|
@ -0,0 +1 @@
|
|||
TEMPLATE(MD) + TEMPLATE(JSON) + ASIS --- generate() ---> xy.md, xy.ethics.md
|
||||
|
|
@ -0,0 +1 @@
|
|||
{}
|
||||
|
|
@ -0,0 +1,273 @@
|
|||
# Ethical Issues
|
||||
|
||||
|
||||
|
||||
|
||||
"_Don't support this company which is void of ethics_"
|
||||
|
||||
"_Your company isn't trustworthy. You claim to enforce DMCA but have many lawsuits for not doing so._"
|
||||
|
||||
"_They only censor those who question their ethics._"
|
||||
|
||||
"_I guess the truth is inconvenient and better hidden from public view._" -- [phyzonloop](https://twitter.com/phyzonloop)
|
||||
|
||||
|
||||
---
|
||||
|
||||
|
||||
<details>
|
||||
<summary>_click me_
|
||||
|
||||
## CloudFlare spams people
|
||||
</summary>
|
||||
|
||||
|
||||
Cloudflare is sending spam emails to non-Cloudflare users.
|
||||
|
||||
- Only send emails to subscribers who’ve opted in
|
||||
- When the user say "stop", then stop sending email
|
||||
|
||||
It's that simple. But Cloudflare doesn't care.
|
||||
Cloudflare said using their service [can stop all spammers or attackers](https://support.cloudflare.com/hc/en-us/articles/200170066-Will-activating-Cloudflare-stop-all-spammers-or-attackers-).
|
||||
How can we stop _Cloudflare spammers_ without activating Cloudflare?
|
||||
|
||||
|
||||
| 🖼 | 🖼 |
|
||||
| --- | --- |
|
||||
|  |  |
|
||||
|  | <br> |
|
||||
|
||||
</details>
|
||||
|
||||
---
|
||||
|
||||
<details>
|
||||
<summary>_click me_
|
||||
|
||||
## Remove user's review
|
||||
</summary>
|
||||
|
||||
|
||||
Cloudflare censor [negative reviews](https://web.archive.org/web/20191116004046/https://www.trustpilot.com/reviews/5aa6ee0ed5a5700a7c8cf853). If you post _anti-Cloudflare_ text on Twitter, you have a chance to get a [reply](https://twitter.com/CloudflareHelp/status/1126051764917145601) from [Cloudflare employee](cloudflare_inc/cloudflare_members.txt) with "_[No, it's not](PEOPLE.md)_" message. If you post a negative review on any review site, they will try to [censor](https://twitter.com/phyzonloop/status/1178836176985366529) [it](https://twitter.com/dxgl_org/status/1178722159432220672).
|
||||
|
||||
|
||||
| 🖼 | 🖼 |
|
||||
| --- | --- |
|
||||
| <br> |  |
|
||||
|
||||
</details>
|
||||
|
||||
---
|
||||
|
||||
<details>
|
||||
<summary>_click me_
|
||||
|
||||
## Share user's private information
|
||||
</summary>
|
||||
|
||||
|
||||
Cloudflare has a massive [harassment problem](https://web.archive.org/web/20171024040313/http://www.businessinsider.com/cloudflare-ceo-suggests-people-who-report-online-abuse-use-fake-names-2017-5).
|
||||
Cloudflare [shares personal information](https://archive.ph/ePdvi) of those [who](https://twitter.com/ZJemptv/status/898299709634248704) [complain](https://twitter.com/TinyPirate/status/554718958176067584) [about](https://twitter.com/remembrancermx/status/1010329041235148802) [hosted](https://twitter.com/Bridaguy/status/915003769280172037) [sites](https://twitter.com/HelloAndrew/status/897260208845500416). They sometimes ask you to provide
|
||||
your true ID. If you don't want to get harassed, [assaulted](https://twitter.com/NiteShade925/status/1158469203420205056), [swatted](https://boingboing.net/2015/01/19/invasion-boards-set-out-to-rui.html) or [killed](https://twitter.com/RusEmbUSA/status/1187363092793040901), you better stay away from Cloudflared websites.
|
||||
|
||||
|
||||
| 🖼 | 🖼 |
|
||||
| --- | --- |
|
||||
|  |  |
|
||||
|  |  |
|
||||
|  | <br> |
|
||||
|
||||
</details>
|
||||
|
||||
---
|
||||
|
||||
<details>
|
||||
<summary>_click me_
|
||||
|
||||
## Corporate solicitation of charitable contributions
|
||||
</summary>
|
||||
|
||||
|
||||
CloudFlare is [asking](https://web.archive.org/web/20191112033605/https://opencollective.com/cloudflarecollective#section-about) for charitable contributions. It’s quite appalling that an American corporation would ask for charity alongside non-profit organizations that have good causes. If you like [blocking people or wasting other people's time](PEOPLE.md), you might want to order some pizzas🍕 for Cloudflare employees.
|
||||
|
||||
|
||||
|
||||
|
||||
</details>
|
||||
|
||||
---
|
||||
|
||||
<details>
|
||||
<summary>_click me_
|
||||
|
||||
## Terminating sites
|
||||
</summary>
|
||||
|
||||
|
||||
What will you do if your site goes down _suddenly_? There are reports that Cloudflare is [deleting](https://twitter.com/stefan_eady/status/1126033791267426304) [user's](https://twitter.com/derivativeburke/status/903755267053117440) [configuration](https://twitter.com/lordscarlet/status/1046785164792205314) or [stopping service without any warning](https://twitter.com/svolentin/status/1227324408475344896), [silently](https://twitter.com/BlnaryMlke/status/1194339461984854018). We suggest you find [better provider](what-to-do.md).
|
||||
|
||||
|
||||
|
||||
</details>
|
||||
|
||||
---
|
||||
|
||||
<details>
|
||||
<summary>_click me_
|
||||
|
||||
## Browser vendor discrimination
|
||||
</summary>
|
||||
|
||||
|
||||
CloudFlare gives preferential treatment to those using Firefox while giving hostile treatment to users of non-Tor-Browser over Tor.
|
||||
Tor users of who rightfully refuse to execute non-free javascript also receive hostile treatment.
|
||||
This access inequality is a network neutrality abuse and an abuse of power.
|
||||
|
||||
|
||||
|
||||
- Left: `Tor Browser` , Right: `Chrome`. Same IP address.
|
||||
|
||||
|
||||
|
||||
- Left: `[Tor Browser] Javascript Disabled, Cookie Enabled`
|
||||
- Right: `[Chrome] Javascript Enabled, Cookie Disabled`
|
||||
|
||||
|
||||
|
||||
- QuteBrowser(minor browser) without Tor (Clearnet IP)
|
||||
|
||||
| ***Browser*** | ***Access treatment*** |
|
||||
| --- | --- |
|
||||
| Tor Browser (Javascript enabled) | access permitted |
|
||||
| Firefox (Javascript enabled) | access degraded |
|
||||
| Chromium (Javascript enabled) | access degraded (pushes Google reCAPTCHA) |
|
||||
| Chromium or Firefox (Javascript disabled) | access denied (pushes *broken* Google reCAPTCHA) |
|
||||
| Chromium or Firefox (Cookie disabled) | access denied |
|
||||
| QuteBrowser | access denied |
|
||||
| lynx | access denied |
|
||||
| w3m | access denied |
|
||||
| wget | access denied |
|
||||
|
||||
|
||||
"_Why not use Audio button to solve easy challenge?_"
|
||||
|
||||
Yes, there is an audio button, but it _always_ [doesn't work over Tor](https://trac.torproject.org/projects/tor/ticket/23840). You will get this message when you click it:
|
||||
|
||||
```
|
||||
Try again later
|
||||
Your computer or network may be sending automated queries.
|
||||
To protect our users, we can't process your request right now.
|
||||
For more details visit our help page
|
||||
```
|
||||
|
||||
</details>
|
||||
|
||||
---
|
||||
|
||||
<details>
|
||||
<summary>_click me_
|
||||
|
||||
## Voter suppression
|
||||
</summary>
|
||||
|
||||
|
||||
Voters in US states register to vote ultimately through the state secretary's website in the state of their residence.
|
||||
Republican-controlled state secretary offices engage in voter suppression by proxying the state secretary's website through Cloudflare.
|
||||
Cloudflare's hostile treatment of Tor users, its MITM position as a centralized global point of surveillance, and its detrimental role overall
|
||||
makes prospective voters reluctant to register. Liberals in particular tend to embrace privacy. Voter registration forms collect sensitive information about a voter's political leaning, personal physical address, social security number, and date of birth.
|
||||
Most states only make a subset of that information publicly available, but Cloudflare sees ***all*** that information when someone registers to vote.
|
||||
|
||||
Note that paper registration does not circumvent Cloudflare because the secretary of state data entry staff workers will likely use the
|
||||
Cloudflare website to enter the data.
|
||||
|
||||
| 🖼 | 🖼 |
|
||||
| --- | --- |
|
||||
|  |  |
|
||||
|
||||
- Change.org is a famous website for gathering votes and take action. "[people everywhere are starting campaigns, mobilizing supporters, and working with decision makers to drive solutions.](https://web.archive.org/web/20200206120027/https://www.change.org/about)"
|
||||
Unfortunately, many people cannot view change.org at all due to Cloudflare's aggressive filter. They are being blocked from signing the petition, thus excluding them from a democratic process. Using other non-cloudflared platform such as [OpenPetition](https://www.openpetition.eu/content/about_us) helps remedy the problem.
|
||||
|
||||
| 🖼 | 🖼 |
|
||||
| --- | --- |
|
||||
|  |  |
|
||||
|
||||
- Cloudflare's "[Athenian Project](https://www.cloudflare.com/athenian/)" offers free enterprise-level protection to state and local election websites. They said "_their constituents can access election information and voter registration_" but this is a lie because many people just can't browse the site at all.
|
||||
|
||||
</details>
|
||||
|
||||
---
|
||||
|
||||
<details>
|
||||
<summary>_click me_
|
||||
|
||||
## Ignoring user's preference
|
||||
</summary>
|
||||
|
||||
|
||||
If you opt-out something, you expect that you receive no email about it. Cloudflare ignore user's preference and share data with third-party corporations [without customer's consent](https://twitter.com/thexpaw/status/1108424723233419264). If you're using their free plan, they sometimes send email to you asking to buy monthly subscription.
|
||||
|
||||
|
||||
|
||||
</details>
|
||||
|
||||
---
|
||||
|
||||
<details>
|
||||
<summary>_click me_
|
||||
|
||||
## Lying about deleting user's data
|
||||
</summary>
|
||||
|
||||
|
||||
According to this [ex-cloudflare customer's blog](https://shkspr.mobi/blog/2019/11/can-you-trust-cloudflare-with-your-personal-data/), Cloudflare is lying about deleting accounts. Nowadays, many [companies keep your data](https://justdeleteme.xyz/) after you've closed or removed your account. Most of good companies do mention about it in their privacy policy. Cloudflare? No.
|
||||
|
||||
```
|
||||
2019-08-05 CloudFlare sent me confirmation that they'd removed my account.
|
||||
2019-10-02 I received an email from CloudFlare "because I am a customer"
|
||||
```
|
||||
|
||||
Cloudflare didn't know about the word "remove". If it is really _removed_, why this ex-customer got an email? He also mentioned that Cloudflare's privacy policy doesn't mention about it.
|
||||
|
||||
```
|
||||
Their new privacy policy doesn't make any mention of retaining data for a year.
|
||||
```
|
||||
|
||||
|
||||
|
||||
How can you trust Cloudflare if [their privacy policy is a LIE](https://twitter.com/daviddlow/status/1197787135526555648)?
|
||||
|
||||
</details>
|
||||
|
||||
---
|
||||
|
||||
<details>
|
||||
<summary>_click me_
|
||||
|
||||
## Keep your personal information
|
||||
</summary>
|
||||
|
||||
|
||||
Deleting Cloudflare account is [hard level](https://justdeleteme.xyz/).
|
||||
|
||||
```
|
||||
Submit a support ticket using the "Account" category,
|
||||
and request account deletion in the message body.
|
||||
You must have no domains or credit cards attached to your account prior to requesting deletion.
|
||||
```
|
||||
|
||||
You will [receive this confirmation email](https://twitter.com/originalesushi/status/1199041528414527495).
|
||||
|
||||
|
||||
|
||||
"We have begun to process your deletion request" but "We will continue to store your personal information".
|
||||
|
||||
Can you "trust" this?
|
||||
|
||||
</details>
|
||||
|
||||
---
|
||||
|
||||
## Please continue to next page: "[Cloudflare Voices](../PEOPLE.md)"
|
||||
|
||||
|
||||
|
||||
|
|
@ -0,0 +1 @@
|
|||
{}
|
||||
|
|
@ -0,0 +1,192 @@
|
|||
# The Great Cloudwall
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
---
|
||||
|
||||
|
||||
## Stop Cloudflare
|
||||
|
||||
|
||||
| 🖹 | 🖼 |
|
||||
| --- | --- |
|
||||
| "The Great Cloudwall" is [Cloudflare Inc.](https://www.cloudflare.com/), the [U.S. company](https://en.wikipedia.org/wiki/Cloudflare). It is providing [CDN](https://en.wikipedia.org/wiki/Content_delivery_network)(content delivery network) services, [DDoS mitigation](https://en.wikipedia.org/wiki/DDoS_mitigation), [Internet security](https://en.wikipedia.org/wiki/Internet_security), and distributed [DNS](https://en.wikipedia.org/wiki/Domain_Name_System)(domain name server) services. |  |
|
||||
| Cloudflare is the [world's](https://almanac.httparchive.org/en/2019/cdn) [largest](https://w3techs.com/technologies/history_overview/proxy) MITM proxy([reverse proxy](https://en.wikipedia.org/wiki/Reverse_proxy)). Cloudflare owns [more than 80% of CDN market](https://w3techs.com/technologies/history_overview/proxy) share and the number of [cloudflare users](../cloudflare_users/) are growing each day. They have expanded their network to more than [100 countries](https://blog.cloudflare.com/cloudflare-network-expands-to-more-than-100-countries/). Cloudflare serves [more web traffic](https://wp-rocket.me/blog/cloudflare-use-not/) than [Twitter](https://en.wikipedia.org/wiki/Twitter), [Amazon](https://en.wikipedia.org/wiki/Amazon_(company)), [Apple](https://en.wikipedia.org/wiki/Apple_Inc.), [Instagram](https://en.wikipedia.org/wiki/Instagram), [Bing](https://en.wikipedia.org/wiki/Bing_(search_engine)) & [Wikipedia](https://en.wikipedia.org/wiki/Wikipedia) combined. Cloudflare is offering [free plan](https://www.cloudflare.com/plans/) and many people are using it instead of configuring their servers properly. They traded [privacy](https://en.wikipedia.org/wiki/Privacy) over convenience. |  |
|
||||
| Cloudflare sits between you and origin webserver, acting like a [border patrol agent](https://www.cbp.gov/careers/bpa). You are not able to connect to your chosen destination. You are connecting to Cloudflare and all your information is being decrypted and handed over on the fly. |  |
|
||||
| The origin webserver administrator allowed the agent - Cloudflare - to decide [who can access](https://web.archive.org/web/https://gitlab.com/iblech/tor-appeal/issues/1) to their "_web property_" and define "_restricted area_". |  |
|
||||
| Take a look at the right image. You will think Cloudflare block _only_ [bad guys](https://en.wikipedia.org/wiki/Black_hat_(computer_security)). You will think _Cloudflare is always online(never go [down](https://twitter.com/bengoldacre/status/1146058200887648258))_. You will think _legit bots and [crawlers](https://en.wikipedia.org/wiki/Web_crawler) can index your website_. |  |
|
||||
| However [those are not true](../PEOPLE.md) at all. Cloudflare is blocking innocent people with no reason. Cloudflare can go down. Cloudflare blocks legit bots. |  |
|
||||
| Just like any [hosting service](https://en.wikipedia.org/wiki/Web_hosting_service), Cloudflare is not perfect. You will see this screen [even if the origin server is working well](../PEOPLE.md). |  |
|
||||
| Do you really think Cloudflare has 100% [uptime](https://en.wikipedia.org/wiki/Uptime)? [You have no idea](../PEOPLE.md) how many times Cloudflare [goes down](https://www.zerohedge.com/markets/major-part-web-offline-cloudflare-suffers-outage). If Cloudflare goes down your customer cannot access your website. | <br> |
|
||||
| It is called this in reference to the [Great Firewall of China](https://www.comparitech.com/privacy-security-tools/blockedinchina/) which does a comparable job of [filtering out many humans](../PEOPLE.md) from seeing web content (ie everyone in [mainland China](https://en.wikipedia.org/wiki/China) and people outside) while at the same time those not affected to see a dratically different web, a web free of [censorship](https://en.wikipedia.org/wiki/Internet_censorship) such as an image of ["tank man"](https://en.wikipedia.org/wiki/Tank_Man) and the history of ["Tiananmen Square protests"](https://en.wikipedia.org/wiki/1989_Tiananmen_Square_protests#Censorship_in_China). |  |
|
||||
| Cloudflare possesses [great power](http://digdeep4orxw6psc33yxa2dgmuycj74zi6334xhxjlgppw6odvkzkiad.onion/ghost/mozilla.html). In a sense, they control what the end user ultimately sees. You are prevented from browsing the website because of Cloudflare. |  |
|
||||
| Cloudflare can be used for censorship. |  |
|
||||
| You cannot view cloudflared website if you are using minor browser which Cloudflare may think it is a bot(because not many people use it). |  |
|
||||
| You cannot pass this invasive "browser check" without enabling Javascript. This is a waste of five(or more) seconds of your valuable life. |  |
|
||||
| Cloudflare also [automatically](https://twitter.com/itsybitsydots/status/1212691131508477952) [block](../PEOPLE.md) legit robots/crawlers such as Google, Yandex, Yacy, and [API clients](../PEOPLE.md). Cloudflare is actively [monitoring](../PEOPLE.md) "bypass cloudflare" community with an intent to break legit research bots. | <br> |
|
||||
| Cloudflare similarly prevents many people who have poor internet connectivity from accessing the websites behind it (for example, they could be behind 7+ layers of NAT or sharing same IP, for example public Wifi) unless they solve multiple image CAPTCHAs. In some cases, [this will take 10 to 30 minutes to satisfy Google](https://trac.torproject.org/projects/tor/ticket/23840). |  |
|
||||
| In the year 2020 Cloudflare switched from [Google's Recaptcha](https://en.wikipedia.org/wiki/Recaptcha) to [hCaptcha](https://en.wikipedia.org/wiki/HCaptcha) as Google [intends to charge](https://professionalhackers.in/cloudflare-dumps-recaptcha-as-google-intends-to-charge-for-its-use/) for its use. Cloudflare told you they care your privacy(["it helps address a privacy concern"](https://blog.cloudflare.com/moving-from-recaptcha-to-hcaptcha/)) but this is obviously a lie. It is all about money. "[hCaptcha](https://www.hcaptcha.com/) allows websites to make money serving this demand while blocking bots and other forms of abuse" |  |
|
||||
| From user's perspective, this doesn't change much. You are being forced to solve it. | <br> |
|
||||
| Many humans and software are being blocked by Cloudflare [every day](../PEOPLE.md). |  |
|
||||
| Cloudflare [annoys many people](../PEOPLE.md) around the world. Take a look at the list and think whether adopting Cloudflare on your site is good for user experience. |  |
|
||||
| What is the purpose of the internet if you cannot do what you want? Most people who visit your website will just look for other pages if they can't load a webpage. You may be not blocking any visitors, but Cloudflare's default firewall is strict enough to block many people. | <br> |
|
||||
| There is no way to solve the captcha without enabling Javascript and Cookies. Cloudflare is [using them](../PEOPLE.md) to make a browser signature to [identify](https://cryptome.org/2016/07/cloudflare-de-anons-tor.htm) [you](../PEOPLE.md). Cloudflare needs to know your identity to decide whether you are eligeble to continue browsing the site. |  |
|
||||
| [Tor users](https://www.torproject.org/) and [VPN users](https://airvpn.org/topic/23090-cloudflare-often-bans-my-ip-address/) are also a [victim](https://blog.torproject.org/trouble-cloudflare) of Cloudflare. Both solutions are being used by many people who cannot afford uncensored internet due to their country/corporation/network policy or who wants to add extra layer to protect their privacy. Cloudflare is shamelessly attacking those people, forcing them to turn off their proxy solution. |  |
|
||||
| If you didn't try Tor until this moment, we encourage you to [download Tor Browser](https://www.torproject.org/) and visit your favorite websites. (advice: _Do not login to your bank website or government webpage or they will flag your account. [Use VPN](https://www.vpngate.net/en/) for those websites._) |  |
|
||||
| You might want to say "_Tor is illegal! Tor users are criminal! Tor is bad!_". No. You might learned about Tor from television, saying Tor can be used to browse [darknet](https://en.wikipedia.org/wiki/Darknet) and trade guns, drugs or [chid porn](https://en.wikipedia.org/wiki/Child_sexual_abuse_material). While above statement is true that there are many market website where you can buy such items, those sites are often appear on clearnet too. |  |
|
||||
| Tor _was_ [developed by US Army](https://www.nrl.navy.mil/itd/chacs/dingledine-tor-second-generation-onion-router), but current Tor is developed by the [Tor project](https://www.torproject.org/). There are many people and organizations [who use Tor](https://blog.torproject.org/tor-misused-criminals) including your future friends. So, if you are using Cloudflare on your website you are blocking _real_ humans. You will lose potential friendship and business deal. |  |
|
||||
| And their DNS service, [1.1.1.1](https://1.1.1.1/), is also filtering out users from visiting the website by returning [fake](https://trac.torproject.org/projects/tor/ticket/32915) IP address [owned by Cloudflare](https://www.reddit.com/r/CloudFlare/comments/hiqm4u/no_cloudflare_website_is_loading/), localhost IP such as "127.0.0.x", or just return nothing. | <br> |
|
||||
| Cloudflare DNS also [break](https://twitter.com/bowranger/status/1213031783576428550) [online](https://twitter.com/jb510/status/1212521533907668992) [software](https://twitter.com/No_Style/status/1201525422795710466) [from](https://twitter.com/daemuth/status/1187758306535903233) [smartphone](https://twitter.com/gregortorrence/status/1183102089439805441) [app](https://www.reddit.com/r/CloudFlare/comments/gmfm4i/us_bank_website_is_not_in_cloudflare_dns/) [to computer game because of their fake DNS answer](../PEOPLE.md). Cloudflare DNS [cannot query](../PEOPLE.md) some bank websites. | <br> |
|
||||
| And here you might think,<br>"_I am not using Tor or VPN, why should I care?_"<br>"_I trust Cloudflare marketing, why should I care_"<br>"_My website is https why should I care_" |  |
|
||||
| If you visit website which use Cloudflare, you are sharing your information not only to website owner _but also Cloudflare_. This is how the [reverse proxy](https://en.wikipedia.org/wiki/Reverse_proxy) works. |  |
|
||||
| It is impossible to [analyze](https://blog.cloudflare.com/the-csam-scanning-tool/) without [decrypting TLS traffic](https://github.com/nym-zone/block_cloudflare_mitm_fx/issues/15#issuecomment-354773389). |  |
|
||||
| Cloudflare knows all your data such as raw password. |  |
|
||||
| [Cloudbeed](https://en.wikipedia.org/wiki/Cloudbleed) can happen anytime. |  |
|
||||
| Cloudflare's https is never end-to-end. |  |
|
||||
| Do you really want to share your data with Cloudflare, and also 3-letter agency? |  |
|
||||
| Internet user's online profile is a "product" that the government and big tech companies wants to buy. |  |
|
||||
| U.S. [Department of Homeland Security](https://www.dhs.gov/) said:<br><br>"Do you have any idea how valuable the data you have is? Is there any way you would sell us that data?" |  |
|
||||
| Cloudflare also offer _FREE_ VPN service called "[Cloudflare Warp](https://blog.cloudflare.com/1111-warp-better-vpn/)". If you use it, all your smartphone ([or your computer](https://techniapps.com/2019/09/26/download-cloudflare-warp-vpn-for-pc-windows-10-mac/)) connections are sent to Cloudflare servers. Cloudflare can know which website you've read, what comment you've posted, who you've talked to, etc. You are voluntary giving [all your information](https://github.com/privacytoolsIO/privacytools.io/issues/374#issuecomment-478686469) to Cloudflare. If you think "_Are you joking? Cloudflare is secure._" then you need to learn how [VPN works](https://en.wikipedia.org/wiki/VPN). |  |
|
||||
| Cloudflare said their VPN service make your internet [fast](https://www.wired.com/story/cloudflare-says-new-vpn-service-wont-slow-you-down/). But VPN make your internet connection _slower_ than [your](https://twitter.com/ExYakuza/status/1182317536089526273) [existing](https://twitter.com/waddling/status/1177615384616325120) [connection](https://techcrunch.com/2019/04/01/cloudflares-warp-is-a-vpn-that-might-actually-make-your-mobile-connection-better/). |  |
|
||||
| You might already know about the [PRISM](https://en.wikipedia.org/wiki/PRISM_(surveillance_program)) scandal. It is true that [AT&T](https://en.wikipedia.org/wiki/AT%26T) lets [NSA](https://en.wikipedia.org/wiki/National_Security_Agency) to [copy all internet data](https://www.cnet.com/news/at-t-lets-nsa-hide-and-surveil-in-plain-sight-the-intercept-reports/) for surveillance. |  |
|
||||
| Let's say you're working at the NSA, and you want _every citizen's internet profile_. You know most of them are [blindly trusting Cloudflare](https://twitter.com/search?q=Cloudflare&f=live) and using it - only one centralized gateway - to proxy their company server connection([SSH](https://blog.cloudflare.com/public-keys-are-not-enough-for-ssh-security/)/[RDP](https://blog.cloudflare.com/cloudflare-access-now-supports-rdp/)), personal website, chat website, forum website, bank website, insurance website, search engine, secret member-only website, auction website, [shopping](https://www.cloudflare.com/case-studies/shopify-powering-the-biggest-shopping-weekend-of-the-year/), video website, NSFW website, and illegal website. You also know they use Cloudflare's DNS service ("_1.1.1.1_") and VPN service ("_Cloudflare Warp_") for "_Secure! Faster! Better!_" internet experience. Combining them with user's IP address, browser [fingerprint](https://github.com/VeNoMouS/cloudscraper/issues/209#issuecomment-624853689), cookies and RAY-ID will be useful to build target's online profile. |  |
|
||||
| You want their data. [What will you do](https://www.reddit.com/r/privacy/comments/1gb0pa/how_prism_actually_works_1520_att_fiber_optic/)? |  |
|
||||
|
||||
|
||||
|
||||
### Cloudflare is a honeypot.
|
||||
|
||||
|
||||
|
||||
### Free honey for everyone. _Some_ strings attached.
|
||||
|
||||
|
||||
|
||||
### Do not use Cloudflare.
|
||||
|
||||
|
||||
|
||||
### Decentralize the internet.
|
||||
|
||||
|
||||
|
||||
---
|
||||
|
||||
|
||||
## Please continue to next page: "[Cloudflare Ethics](en.ethics.md)"
|
||||
|
||||
---
|
||||
|
||||
<details>
|
||||
<summary>_click me_
|
||||
|
||||
## Data & More Information
|
||||
</summary>
|
||||
|
||||
|
||||
This repository is a list of websites that are behind "The Great Cloudwall", blocking Tor users and other CDNs.
|
||||
|
||||
|
||||
**Data**
|
||||
* [Cloudflare Inc.](../cloudflare_inc/)
|
||||
* [Cloudflare Users](../cloudflare_users/)
|
||||
* [Cloudflare Domains](../cloudflare_users/domains/)
|
||||
* [Non-Cloudflare CDN users](../not_cloudflare/)
|
||||
* [Anti-Tor users](../anti-tor_users/)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
**More Information**
|
||||
* [Myth Catalog](../subfiles/myth_catalog.md)
|
||||
* [The Great Cloudwall](../pdf/2019-Jeff_Cliff_Book1.txt), [Mr. Jeff Cliff](https://shitposter.club/users/jeffcliff)
|
||||
* Download: [PDF](../pdf/2019-The_Great_Cloudwall.pdf), [ePUB](../pdf/2019-Jeff_Cliff_The_Great_Cloudwall.epub)
|
||||
* The original eBook(ePUB) was deleted by BookRix GmbH due to copyright infringement of CC0 material
|
||||
* [Padlock icon indicates a secure SSL connection established w MITM-ed](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831835), Anonymous
|
||||
* [Block Global Active Adversary Cloudflare](https://trac.torproject.org/projects/tor/ticket/24351), nym-zone
|
||||
* The ticket was vandalized so many times.
|
||||
* [Deleted by the Tor Project.](https://lists.torproject.org/pipermail/anti-censorship-team/2020-May/000098.html) [See ticket 34175.](https://trac.torproject.org/projects/tor/ticket/34175)
|
||||
* [Last archive ticket 24351](https://web.archive.org/web/20200301013104/https://trac.torproject.org/projects/tor/ticket/24351)
|
||||
* [Problem with Cloudflare](https://github.com/privacytoolsIO/privacytools.io/issues/374#issuecomment-460077544), libBletchley
|
||||
* They had used Cloudflare in the past. [CF-tor was removed.](https://github.com/privacytools/privacytools.io/pull/1804)
|
||||
* [Cloudflare Watch](http://www.crimeflare.org:82/)
|
||||
* [Criticism and controversies](https://en.wikipedia.org/wiki/Cloudflare#Criticism_and_controversies), Wikipedia
|
||||
* [Another landmark day in the war to control, centralize and censor the internet.](https://www.reddit.com/r/privacy/comments/b8dptl/another_landmark_day_in_the_war_to_control/), TheGoldenGoose8888
|
||||
* [Disadvantage of relying on only one service](https://twitter.com/w3Nicolas/status/1134529316904153089) ([DO is CF](https://www.digwebinterface.com/?hostnames=ns1.digitalocean.com%0D%0Ans2.digitalocean.com%0D%0Ans3.digitalocean.com%0D%0Awww.digitalocean.com&type=A&ns=resolver&useresolver=8.8.4.4&nameservers=))
|
||||
|
||||
|
||||
|
||||
|
||||
</details>
|
||||
|
||||
---
|
||||
|
||||
<details>
|
||||
<summary>_click me_
|
||||
|
||||
## What can you do?
|
||||
</summary>
|
||||
|
||||
* [Read our list of recommended actions and share it with your friends.](../ACTION.md)
|
||||
|
||||
* [Read other user's voice and write your thoughts.](../PEOPLE.md)
|
||||
|
||||
* Search something: [Ansero](https://ansero.wodferndripvpe6ib4uz4rtngrnzichnirgn7t5x64gxcyroopbhsuqd.onion/) ([clearnet](https://ansero.eu.org/)), [Crimeflare \#Search](https://crimeflare.wodferndripvpe6ib4uz4rtngrnzichnirgn7t5x64gxcyroopbhsuqd.onion/) ([clearnet](https://crimeflare.eu.org/))
|
||||
|
||||
* Update the domain list: [List instructions](../INSTRUCTION.md).
|
||||
|
||||
* [Add Cloudflare or project related event to history.](../HISTORY.md)
|
||||
|
||||
* [Try & write new Tool/Script.](../tool/)
|
||||
|
||||
* [Here's some PDF/ePUB to read.](../pdf/)
|
||||
|
||||
|
||||
---
|
||||
|
||||
### About fake accounts
|
||||
|
||||
Crimeflare know about the existence of fake accounts impersonating our official channels, be it Twitter, Facebook, Patreon, OpenCollective, Villages etc.
|
||||
**We never ask your email.
|
||||
We never ask your name.
|
||||
We never ask your identity.
|
||||
We never ask your location.
|
||||
We never ask your donation.
|
||||
We never ask your review.
|
||||
We never ask you to follow on social media.
|
||||
We never ask your social media.**
|
||||
|
||||
# DO NOT TRUST FAKE ACCOUNTS.
|
||||
|
||||
|
||||
---
|
||||
|
||||
| 🖼 | 🖼 |
|
||||
| --- | --- |
|
||||
|  |  |
|
||||
|  |  |
|
||||
|  |  |
|
||||
|
||||
</details>
|
||||
|
||||
---
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
|
@ -0,0 +1 @@
|
|||
{}
|
||||
Loading…
Reference in New Issue