0
0
mirror of https://codeberg.org/crimeflare/cloudflare-tor synced 2024-11-08 02:12:43 +00:00
This commit is contained in:
watchdog 2019-11-29 00:28:05 +01:00 committed by Gitea
commit e43e506495
9 changed files with 65 additions and 12 deletions

View File

@ -375,6 +375,20 @@ Table of contents
> Too many to list here. It is IMPOSSIBLE to list them all! [See for yourself](https://twitter.com/search?q=Cloudflare). > Too many to list here. It is IMPOSSIBLE to list them all! [See for yourself](https://twitter.com/search?q=Cloudflare).
" I just got 3 friends here in Germany to try - and NONE of them can gain access - they get blocked by the same captcha. I'm thinking Cloudflare has Deutsche Telekom blacklisted, or some such." by @[GrayanOne](https://twitter.com/GrayanOne/status/1200057914842587136)
"Just a friendly reminder that if your Black Friday sales page requires someone to: check a Cloudflare “Im not a robot” check box solve a CAPTCHA image its probably not worth the discount." by @[CoryJaccino](https://twitter.com/CoryJaccino/status/1199946959110443008)
"the site seems to use Cloudflare which blocks a lot of users from the start, so a large crowd can't open the site even if it's online" by @[adlerweb](https://twitter.com/adlerweb/status/1199966079126310912)
"Day 2 of trying to get my Cloudflare account deleted. They sure don't make it easy, or logic." by @[originalesushi](https://twitter.com/originalesushi/status/1199041528414527495)
"Just don't make me discover my PII in some future breach or I'll dig up my Cloudflare exodus logs and I'll step on the biggest soapbox I can find to cast hell upon you." by @[originalesushi](https://twitter.com/originalesushi/status/1199063754740314115)
"Hi there ! Your cdnjs is blocked by Stormshield firewall IPS." by @[nivuniconu_](https://twitter.com/nivuniconu_/status/1199988064589950977)
"So many people are hoping for word of an actually decisive move from the Not-Board that cloudflare thinks arseblog's under DDoS attack." by @[fuckmedoris](https://twitter.com/fuckmedoris/status/1200180923649732608)
"Whole thing happened again when I started from the beginning to reset my password, then again when it told me to reactivate my account." by @[JayNBoston](https://twitter.com/JayNBoston/status/1199829882131427333) "Whole thing happened again when I started from the beginning to reset my password, then again when it told me to reactivate my account." by @[JayNBoston](https://twitter.com/JayNBoston/status/1199829882131427333)
"You also send all the traffic to the NSA though Cloudflare — thanks but no thanks!" by @[Mcnst](https://twitter.com/Mcnst/status/1199096502968299520) "You also send all the traffic to the NSA though Cloudflare — thanks but no thanks!" by @[Mcnst](https://twitter.com/Mcnst/status/1199096502968299520)

View File

@ -23,6 +23,7 @@ The origin webserver administrator allowed the agent to decide [who can access](
--- ---
![](image/cfmarketshare.jpg)
![](image/cloudflaredearuser.jpg) ![](image/cloudflaredearuser.jpg)
![](image/usershoulddecide.jpg) ![](image/usershoulddecide.jpg)

View File

@ -18,6 +18,7 @@ Table of contents
- [Voter suppression](README_ethics.md#voter-suppression) - [Voter suppression](README_ethics.md#voter-suppression)
- [Ignoring user's preference](README_ethics.md#ignoring-user-s-preference) - [Ignoring user's preference](README_ethics.md#ignoring-user-s-preference)
- [Lying about deleting user's data](README_ethics.md#lying-about-deleting-users-data) - [Lying about deleting user's data](README_ethics.md#lying-about-deleting-users-data)
- [Keep your personal information](README_ethics.md#keep-your-personal-information)
--- ---
@ -166,6 +167,25 @@ Their new privacy policy doesn't make any mention of retaining data for a year.
How can you trust Cloudflare if [their privacy policy is a LIE](https://twitter.com/daviddlow/status/1197787135526555648)? How can you trust Cloudflare if [their privacy policy is a LIE](https://twitter.com/daviddlow/status/1197787135526555648)?
---
### Keep your personal information
Deleting Cloudflare account is [hard level](https://justdeleteme.xyz/).
```
Submit a support ticket using the "Account" category,
and request account deletion in the message body.
You must have no domains or credit cards attached to your account prior to requesting deletion.
```
You will [receive this confirmation email](https://twitter.com/originalesushi/status/1199041528414527495).
![](image/cf_deleteandkeep.jpg)
"We have begun to process your deletion request" but "We will continue to store your personal information".
Can you "trust" this?
--- ---

BIN
image/cf_deleteandkeep.jpg Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 51 KiB

BIN
image/cfmarketshare.jpg Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 75 KiB

View File

@ -1,9 +1,15 @@
# CrimeFlarE # CrimeFlarE
***Why you should say no to Cloudflare*** ***Why you should say "NO" to Cloudflare***
## Solutions - Add-ons ## Solutions - Add-ons
| Name | Developer | Support | Can Block | Can Notify | | Name | Developer | Support | Can Block | Can Notify |
| -------- | -------- | -------- | -------- | -------- | | -------- | -------- | -------- | -------- | -------- |
| **[Bloku Cloudflaron MITM-Atakon](addon/about.bcma.md)** | Searxes | [Link](https://searxes.eu.org/) | **Yes** | **Yes** |
| **[Ĉu ligoj estas vundeblaj al MITM-atako?](addon/about.ismm.md)** | Searxes | [Link](https://searxes.eu.org/) | No | **Yes** |
| [Block Cloudflare MITM Attack](https://trac.torproject.org/projects/tor/attachment/ticket/24351/block_cloudflare_mitm_attack-1.0.14.1-an%2Bfx.xpi) | nullius | [Link](https://github.com/nym-zone/block_cloudflare_mitm_fx) | **Yes** | **Yes** | | [Block Cloudflare MITM Attack](https://trac.torproject.org/projects/tor/attachment/ticket/24351/block_cloudflare_mitm_attack-1.0.14.1-an%2Bfx.xpi) | nullius | [Link](https://github.com/nym-zone/block_cloudflare_mitm_fx) | **Yes** | **Yes** |
| [TPRB](https://sw.skusklxqaqnrmszytky4vfyrg625erw4hqhiokyc2ufnokd2aitb47yd.onion/) | Sw | [Link](https://sw.skusklxqaqnrmszytky4vfyrg625erw4hqhiokyc2ufnokd2aitb47yd.onion/) | **Yes** | **Yes** |
| [Detect Cloudflare](https://addons.mozilla.org/en-US/firefox/addon/detect-cloudflare/) | Frank Otto | [Link](https://github.com/traktofon/cf-detect) | No | **Yes** | | [Detect Cloudflare](https://addons.mozilla.org/en-US/firefox/addon/detect-cloudflare/) | Frank Otto | [Link](https://github.com/traktofon/cf-detect) | No | **Yes** |
| [Cloud Firewall](https://addons.mozilla.org/en-US/firefox/addon/cloud-firewall/) | Niklas Poslovski, Gokulakrishna Sudharsan | [Link](https://web.archive.org/web/https://gitlab.com/gkrishnaks/cloud-firewall/) | **Yes** | No | | [Cloud Firewall](https://addons.mozilla.org/en-US/firefox/addon/cloud-firewall/) | Niklas Poslovski | [Link](https://gitlab.com/gkrishnaks/cloud-firewall/) | **Yes** | No |
See "[What you can do to resist Cloudflare?](../what-to-do.md)" for more information.

View File

@ -1,14 +1,28 @@
# CrimeFlarE # CrimeFlarE
***Why you should say no to Cloudflare*** ***Why you should say "NO" to Cloudflare***
## Solutions - Change default DNS provider of firefox ## Solutions - Change default DNS provider of firefox
Mozilla (Firefox) has partnered up with Cloudflare and will resolve the
domain names from the application itself via a DNS server from Cloudflare. Mozilla (Firefox) has partnered up with Cloudflare and will resolve the domain names from the application itself via a DNS server from Cloudflare.
Cloudflare will then be able to read everyones DNS requests. Cloudflare will then be able to read everyones DNS requests.
You can disable it in “about:config". The string value of "network.trr.uri" > You can disable it in “about:config"
should be empty. Some other settings can also contain Cloudflare URLs. It
is recommended to search for "cloudflare". GNU Icecat and older Firefox - The string value of "`network.trr.uri`" should be empty.
versions are not affected *yet*. - The string value of "`network.trr.resolvers`" should be set to `[]`.
> Or in /distribution/policies.json` (Firefox ESR)
```
...
"DNSOverHTTPS": {
"Enabled": false,
"ProviderURL": "https://0.0.0.0/"
},
...
```
Some other settings can also contain Cloudflare URLs. It is recommended to search for "`cloudflare`".
GNU Icecat and older Firefox versions(<68) are not affected *yet*.
![The about:config page which shows the Cloudflare DNS address in the network.trr.uri string.](../image/firefox-cloudflare-dns-settings.jpg) ![The about:config page which shows the Cloudflare DNS address in the network.trr.uri string.](../image/firefox-cloudflare-dns-settings.jpg)

View File

@ -13,13 +13,11 @@ more aimed at technical people.
We might create a guide for some self-hosting basics which don't require We might create a guide for some self-hosting basics which don't require
Cloudflare. Cloudflare.
`to consider: Is user---incapsula---origin really okay?`
## Alternatives ## Alternatives
| Alternative | Drawback | Price | Link | | Alternative | Drawback | Price | Link |
| ----------------- | --------------------------------- | ------ | ---- | | ----------------- | --------------------------------- | ------ | ---- |
| PerimeterX | not gratis | ? | - | | PerimeterX | not gratis | ? | - |
| Impurva incapsula | not gratis | Paid | - |
| Github pages | uses Microsoft servers | Free | https://pages.github.com/ (WARNING: Tor/VPN users will get their [account blocked automatically](https://github.com/crimeflare/cloudflare-tor) by Github) | | Github pages | uses Microsoft servers | Free | https://pages.github.com/ (WARNING: Tor/VPN users will get their [account blocked automatically](https://github.com/crimeflare/cloudflare-tor) by Github) |
| Gitlab pages | uses Google servers | Free | https://gitlab.com/pages/ (WARNING: Some area of Gitlab is Cloudflare) | | Gitlab pages | uses Google servers | Free | https://gitlab.com/pages/ (WARNING: Some area of Gitlab is Cloudflare) |

View File

@ -89,7 +89,7 @@ If Cloudflare leak your information or won't let you to connect to our servers,
| [Block Cloudflare MITM Attack](https://trac.torproject.org/projects/tor/attachment/ticket/24351/block_cloudflare_mitm_attack-1.0.14.1-an%2Bfx.xpi) | nullius | [Link](https://github.com/nym-zone/block_cloudflare_mitm_fx) | **Yes** | **Yes** | | [Block Cloudflare MITM Attack](https://trac.torproject.org/projects/tor/attachment/ticket/24351/block_cloudflare_mitm_attack-1.0.14.1-an%2Bfx.xpi) | nullius | [Link](https://github.com/nym-zone/block_cloudflare_mitm_fx) | **Yes** | **Yes** |
| [TPRB](https://sw.skusklxqaqnrmszytky4vfyrg625erw4hqhiokyc2ufnokd2aitb47yd.onion/) | Sw | [Link](https://sw.skusklxqaqnrmszytky4vfyrg625erw4hqhiokyc2ufnokd2aitb47yd.onion/) | **Yes** | **Yes** | | [TPRB](https://sw.skusklxqaqnrmszytky4vfyrg625erw4hqhiokyc2ufnokd2aitb47yd.onion/) | Sw | [Link](https://sw.skusklxqaqnrmszytky4vfyrg625erw4hqhiokyc2ufnokd2aitb47yd.onion/) | **Yes** | **Yes** |
| [Detect Cloudflare](https://addons.mozilla.org/en-US/firefox/addon/detect-cloudflare/) | Frank Otto | [Link](https://github.com/traktofon/cf-detect) | No | **Yes** | | [Detect Cloudflare](https://addons.mozilla.org/en-US/firefox/addon/detect-cloudflare/) | Frank Otto | [Link](https://github.com/traktofon/cf-detect) | No | **Yes** |
| [Cloud Firewall](https://addons.mozilla.org/en-US/firefox/addon/cloud-firewall/) | Gokulakrishna Sudharsan | [Link](https://web.archive.org/web/https://gitlab.com/gkrishnaks/cloud-firewall/) | **Yes** | No | | [Cloud Firewall](https://addons.mozilla.org/en-US/firefox/addon/cloud-firewall/) | Niklas Poslovski | [Link](https://gitlab.com/gkrishnaks/cloud-firewall/) | **Yes** | No |
- Convince your friends to use [Tor](https://www.torproject.org/download/tor/) on the daily basis. Anonymity should be the standard of the open internet! - Convince your friends to use [Tor](https://www.torproject.org/download/tor/) on the daily basis. Anonymity should be the standard of the open internet!