0
0
mirror of https://codeberg.org/crimeflare/cloudflare-tor synced 2025-06-15 11:06:05 +00:00

Merge remote-tracking branch 'oldrep/master'

This commit is contained in:
tor
2020-11-24 05:59:18 +00:00
255 changed files with 40967 additions and 0 deletions

View File

@ -0,0 +1,20 @@
### Block Cloudflare MITM Attack
`Take action against Cloudflare`
![](../image/goodorbad.jpg)
```
This add-on will block, notify, or redirect your request if the target website is using Cloudflare.
Submit to global surveillance or resist. The choice is yours.
This add-on never send any data.
Your cloudflare-domain collection is yours.
```
Download add-on
- [Firefox ESR / Chromium](https://api.searxes.eu.org/_/addon.php?give&for=bcma)

View File

@ -0,0 +1,22 @@
### Will these links block Tor user?
`Scan FQDN using Searxes API`
![](../image/isatpreview.jpg)
```
Youve found something on the internet.
Are these links blocking Tor users or not?
This add-on is using Searxes Public API to scan FQDN.
e.g. https://ekzemplo.com/page.html → "ekzemplo.com"
This add-on never send other information.
```
Download add-on
- [Firefox ESR / Chromium](https://api.searxes.eu.org/_/addon.php?give&for=isattlink)

View File

@ -0,0 +1,24 @@
### Are links vulnerable to MITM attack?
`Scan FQDN using Searxes API`
![](../image/ismmpreview.jpg)
```
Youve found something on the internet.
Are these links or images vulnerable to MITM attack or not?
This add-on is using Searxes Public API to scan FQDN.
e.g. https://ekzemplo.com/page.html → "ekzemplo.com"
This add-on never send other information.
```
- Information: [About Cloudflare domain list](../instructions.md#about-cloudflare-base-domain-list)
Download add-on
- [Firefox ESR / Chromium](https://api.searxes.eu.org/_/addon.php?give&for=ismitmlink)

View File

@ -0,0 +1,22 @@
### Which website rejected me?
`Your website rejected me, but I know I'm going to be okay.`
![](../image/aonurjm.jpg)
```
1. Your website reject me.
2. This add-on will log the FQDN, URL, Status code and current time.
3. You can review it from Option menu.
4. Yell at website owner with this proof. (optional)
This add-on never send any data.
Your domain collection is yours.
```
Download add-on
- [Firefox ESR / Chromium](https://api.searxes.eu.org/_/addon.php?give&for=ureject)

View File

@ -0,0 +1,9 @@
[Home](../README_short.md)
---
# CrimeFlarE
***Why you should say "No" to Cloudflare***
## Solutions - Add-ons

View File

@ -0,0 +1,28 @@
# CrimeFlarE
***Why you should say "NO" to Cloudflare***
## Solutions - Change default DNS provider of firefox
Mozilla (Firefox) has partnered up with Cloudflare and will resolve the domain names from the application itself via a DNS server from Cloudflare.
Cloudflare will then be able to read everyones DNS requests.
> You can disable it in “about:config"
- The string value of "`network.trr.uri`" should be empty.
- The string value of "`network.trr.resolvers`" should be set to `[]`.
> Or in /distribution/policies.json` (Firefox ESR)
```
...
"DNSOverHTTPS": {
"Enabled": false,
"ProviderURL": "https://0.0.0.0/"
},
...
```
Some other settings can also contain Cloudflare URLs. It is recommended to search for "`cloudflare`".
GNU Icecat and older Firefox versions(<68) are not affected *yet*.
![The about:config page which shows the Cloudflare DNS address in the network.trr.uri string.](../image/firefox-cloudflare-dns-settings.jpg)

View File

@ -0,0 +1,34 @@
[Home](../README_short.md)
---
# CrimeFlarE
***Why you should say "No" to Cloudflare***
## Self-hosting
Self-hosting often works great, but it requires some effort to setup. It is
more aimed at technical people.
We might create a guide for some self-hosting basics which don't require
Cloudflare.
## Alternatives
| Alternative | Drawback | Price | Link |
| ----------------- | --------------------------------- | ------ | ---- |
| PerimeterX | not gratis | ? | - |
| Github pages | uses Microsoft servers | Free | https://pages.github.com/ (WARNING: Tor/VPN users will get their [account blocked automatically](https://github.com/crimeflare/cloudflare-tor) by Github) |
| Gitlab pages | uses Google servers | Free | https://gitlab.com/pages/ (WARNING: Some area of Gitlab is Cloudflare) |
| Surge.sh | uses custom servers | Free | https://surge.sh/ |
## Not researched yet
### CDNJS
CDNJS is sponsored by Cloudflare. It might use it in the background.
## Why X is not included
| X | Reason |
| ------- | ------ |
| Netlify | Uses Amazon AWS which is also a content delivery network. It would be hypocritical to include it. |
| Siteground | Tor-hostile people. |
|jsDelivr | Uses Cloudflare, see their [network page](https://www.jsdelivr.com/network) |

View File

@ -0,0 +1,9 @@
[Home](../README_short.md)
---
# CrimeFlarE
***Why you should say "No" to Cloudflare***
## More Cloudflare problems

View File

@ -0,0 +1 @@
/recaptcha-problem.md

View File

@ -0,0 +1,19 @@
[Home](../README_short.md)
---
# CrimeFlarE
***Why you should say "No" to Cloudflare***
## Single point of failure problem
A single point of failure is a point which will stop the entire system from
working if it fails.
Sites or other things which use Cloudflare go down if Cloudflare goes down.
### Examples
### Image collection
### More things about this problem

View File

@ -0,0 +1,17 @@
[Home](../README_short.md)
---
# CrimeFlarE
***Why you should say "No" to Cloudflare***
## Why Tor matters.
### Your users matter
Every visitor helps. Think about their experience. Cloudflare lets them wait.
Even users who don't use Tor get the "wait several seconds" messages. Users
often leave sites when they have to wait too long.
## Articles
- [7 thing you should know about Tor - EFF](https://www.eff.org/deeplinks/2014/07/7-things-you-should-know-about-tor)
- [Who uses Tor - Tor Project](https://www.torproject.org/about/torusers.html.en)