diff --git a/PEOPLE.md b/PEOPLE.md index 58827e61b..14fce83b5 100644 --- a/PEOPLE.md +++ b/PEOPLE.md @@ -375,6 +375,20 @@ Table of contents > Too many to list here. It is IMPOSSIBLE to list them all! [See for yourself](https://twitter.com/search?q=Cloudflare). +" I just got 3 friends here in Germany to try - and NONE of them can gain access - they get blocked by the same captcha. I'm thinking Cloudflare has Deutsche Telekom blacklisted, or some such." by @[GrayanOne](https://twitter.com/GrayanOne/status/1200057914842587136) + +"Just a friendly reminder that if your Black Friday sales page requires someone to: check a Cloudflare “I’m not a robot” check box solve a CAPTCHA image it’s probably not worth the discount." by @[CoryJaccino](https://twitter.com/CoryJaccino/status/1199946959110443008) + +"the site seems to use Cloudflare which blocks a lot of users from the start, so a large crowd can't open the site even if it's online" by @[adlerweb](https://twitter.com/adlerweb/status/1199966079126310912) + +"Day 2 of trying to get my Cloudflare account deleted. They sure don't make it easy, or logic." by @[originalesushi](https://twitter.com/originalesushi/status/1199041528414527495) + +"Just don't make me discover my PII in some future breach or I'll dig up my Cloudflare exodus logs and I'll step on the biggest soapbox I can find to cast hell upon you." by @[originalesushi](https://twitter.com/originalesushi/status/1199063754740314115) + +"Hi there ! Your cdnjs is blocked by Stormshield firewall IPS." by @[nivuniconu_](https://twitter.com/nivuniconu_/status/1199988064589950977) + +"So many people are hoping for word of an actually decisive move from the Not-Board that cloudflare thinks arseblog's under DDoS attack." by @[fuckmedoris](https://twitter.com/fuckmedoris/status/1200180923649732608) + "Whole thing happened again when I started from the beginning to reset my password, then again when it told me to reactivate my account." by @[JayNBoston](https://twitter.com/JayNBoston/status/1199829882131427333) "You also send all the traffic to the NSA though Cloudflare — thanks but no thanks!" by @[Mcnst](https://twitter.com/Mcnst/status/1199096502968299520) diff --git a/README.md b/README.md index 0ae092de3..0d8019802 100644 --- a/README.md +++ b/README.md @@ -23,6 +23,7 @@ The origin webserver administrator allowed the agent to decide [who can access]( --- +![](image/cfmarketshare.jpg) ![](image/cloudflaredearuser.jpg) ![](image/usershoulddecide.jpg) diff --git a/README_ethics.md b/README_ethics.md index be647392d..fb2c200da 100644 --- a/README_ethics.md +++ b/README_ethics.md @@ -18,6 +18,7 @@ Table of contents - [Voter suppression](README_ethics.md#voter-suppression) - [Ignoring user's preference](README_ethics.md#ignoring-user-s-preference) - [Lying about deleting user's data](README_ethics.md#lying-about-deleting-users-data) +- [Keep your personal information](README_ethics.md#keep-your-personal-information) --- @@ -166,6 +167,25 @@ Their new privacy policy doesn't make any mention of retaining data for a year. How can you trust Cloudflare if [their privacy policy is a LIE](https://twitter.com/daviddlow/status/1197787135526555648)? +--- + +### Keep your personal information + +Deleting Cloudflare account is [hard level](https://justdeleteme.xyz/). + +``` +Submit a support ticket using the "Account" category, +and request account deletion in the message body. +You must have no domains or credit cards attached to your account prior to requesting deletion. +``` + +You will [receive this confirmation email](https://twitter.com/originalesushi/status/1199041528414527495). + +![](image/cf_deleteandkeep.jpg) + +"We have begun to process your deletion request" but "We will continue to store your personal information". + +Can you "trust" this? --- diff --git a/image/cf_deleteandkeep.jpg b/image/cf_deleteandkeep.jpg new file mode 100644 index 000000000..a332754bb Binary files /dev/null and b/image/cf_deleteandkeep.jpg differ diff --git a/image/cfmarketshare.jpg b/image/cfmarketshare.jpg new file mode 100644 index 000000000..8c2f4bf34 Binary files /dev/null and b/image/cfmarketshare.jpg differ diff --git a/subfiles/add-ons.md b/subfiles/add-ons.md index 25dd47e52..093b21ada 100644 --- a/subfiles/add-ons.md +++ b/subfiles/add-ons.md @@ -1,9 +1,15 @@ # CrimeFlarE -***Why you should say no to Cloudflare*** +***Why you should say "NO" to Cloudflare*** ## Solutions - Add-ons + | Name | Developer | Support | Can Block | Can Notify | | -------- | -------- | -------- | -------- | -------- | +| **[Bloku Cloudflaron MITM-Atakon](addon/about.bcma.md)** | Searxes | [Link](https://searxes.eu.org/) | **Yes** | **Yes** | +| **[Ĉu ligoj estas vundeblaj al MITM-atako?](addon/about.ismm.md)** | Searxes | [Link](https://searxes.eu.org/) | No | **Yes** | | [Block Cloudflare MITM Attack](https://trac.torproject.org/projects/tor/attachment/ticket/24351/block_cloudflare_mitm_attack-1.0.14.1-an%2Bfx.xpi) | nullius | [Link](https://github.com/nym-zone/block_cloudflare_mitm_fx) | **Yes** | **Yes** | +| [TPRB](https://sw.skusklxqaqnrmszytky4vfyrg625erw4hqhiokyc2ufnokd2aitb47yd.onion/) | Sw | [Link](https://sw.skusklxqaqnrmszytky4vfyrg625erw4hqhiokyc2ufnokd2aitb47yd.onion/) | **Yes** | **Yes** | | [Detect Cloudflare](https://addons.mozilla.org/en-US/firefox/addon/detect-cloudflare/) | Frank Otto | [Link](https://github.com/traktofon/cf-detect) | No | **Yes** | -| [Cloud Firewall](https://addons.mozilla.org/en-US/firefox/addon/cloud-firewall/) | Niklas Poslovski, Gokulakrishna Sudharsan | [Link](https://web.archive.org/web/https://gitlab.com/gkrishnaks/cloud-firewall/) | **Yes** | No | +| [Cloud Firewall](https://addons.mozilla.org/en-US/firefox/addon/cloud-firewall/) | Niklas Poslovski | [Link](https://gitlab.com/gkrishnaks/cloud-firewall/) | **Yes** | No | + +See "[What you can do to resist Cloudflare?](../what-to-do.md)" for more information. \ No newline at end of file diff --git a/subfiles/change-firefox-dns.md b/subfiles/change-firefox-dns.md index 435e00232..5a01f87ae 100644 --- a/subfiles/change-firefox-dns.md +++ b/subfiles/change-firefox-dns.md @@ -1,14 +1,28 @@ # CrimeFlarE -***Why you should say no to Cloudflare*** +***Why you should say "NO" to Cloudflare*** ## Solutions - Change default DNS provider of firefox -Mozilla (Firefox) has partnered up with Cloudflare and will resolve the -domain names from the application itself via a DNS server from Cloudflare. + +Mozilla (Firefox) has partnered up with Cloudflare and will resolve the domain names from the application itself via a DNS server from Cloudflare. Cloudflare will then be able to read everyone’s DNS requests. -You can disable it in “about:config". The string value of "network.trr.uri" -should be empty. Some other settings can also contain Cloudflare URLs. It -is recommended to search for "cloudflare". GNU Icecat and older Firefox -versions are not affected *yet*. +> You can disable it in “about:config" + +- The string value of "`network.trr.uri`" should be empty. +- The string value of "`network.trr.resolvers`" should be set to `[]`. + +> Or in /distribution/policies.json` (Firefox ESR) + +``` +... + "DNSOverHTTPS": { + "Enabled": false, + "ProviderURL": "https://0.0.0.0/" + }, +... +``` + +Some other settings can also contain Cloudflare URLs. It is recommended to search for "`cloudflare`". +GNU Icecat and older Firefox versions(<68) are not affected *yet*. ![The about:config page which shows the Cloudflare DNS address in the network.trr.uri string.](../image/firefox-cloudflare-dns-settings.jpg) diff --git a/subfiles/cloudflare-alternatives.md b/subfiles/cloudflare-alternatives.md index 7b4b78042..6c7449b84 100644 --- a/subfiles/cloudflare-alternatives.md +++ b/subfiles/cloudflare-alternatives.md @@ -13,13 +13,11 @@ more aimed at technical people. We might create a guide for some self-hosting basics which don't require Cloudflare. -`to consider: Is user---incapsula---origin really okay?` ## Alternatives | Alternative | Drawback | Price | Link | | ----------------- | --------------------------------- | ------ | ---- | | PerimeterX | not gratis | ? | - | -| Impurva incapsula | not gratis | Paid | - | | Github pages | uses Microsoft servers | Free | https://pages.github.com/ (WARNING: Tor/VPN users will get their [account blocked automatically](https://github.com/crimeflare/cloudflare-tor) by Github) | | Gitlab pages | uses Google servers | Free | https://gitlab.com/pages/ (WARNING: Some area of Gitlab is Cloudflare) | diff --git a/what-to-do.md b/what-to-do.md index feb4d75d2..b7f9b20d5 100644 --- a/what-to-do.md +++ b/what-to-do.md @@ -89,7 +89,7 @@ If Cloudflare leak your information or won't let you to connect to our servers, | [Block Cloudflare MITM Attack](https://trac.torproject.org/projects/tor/attachment/ticket/24351/block_cloudflare_mitm_attack-1.0.14.1-an%2Bfx.xpi) | nullius | [Link](https://github.com/nym-zone/block_cloudflare_mitm_fx) | **Yes** | **Yes** | | [TPRB](https://sw.skusklxqaqnrmszytky4vfyrg625erw4hqhiokyc2ufnokd2aitb47yd.onion/) | Sw | [Link](https://sw.skusklxqaqnrmszytky4vfyrg625erw4hqhiokyc2ufnokd2aitb47yd.onion/) | **Yes** | **Yes** | | [Detect Cloudflare](https://addons.mozilla.org/en-US/firefox/addon/detect-cloudflare/) | Frank Otto | [Link](https://github.com/traktofon/cf-detect) | No | **Yes** | -| [Cloud Firewall](https://addons.mozilla.org/en-US/firefox/addon/cloud-firewall/) | Gokulakrishna Sudharsan | [Link](https://web.archive.org/web/https://gitlab.com/gkrishnaks/cloud-firewall/) | **Yes** | No | +| [Cloud Firewall](https://addons.mozilla.org/en-US/firefox/addon/cloud-firewall/) | Niklas Poslovski | [Link](https://gitlab.com/gkrishnaks/cloud-firewall/) | **Yes** | No | - Convince your friends to use [Tor](https://www.torproject.org/download/tor/) on the daily basis. Anonymity should be the standard of the open internet!