diff --git a/README.md b/README.md index 0ab1486ea..a62f87865 100644 --- a/README.md +++ b/README.md @@ -2,20 +2,22 @@ "The Great Cloudwall" is [CloudFlare](https://www.cloudflare.com/), the world's largest MITM proxy([reverse proxy](https://en.wikipedia.org/wiki/Reverse_proxy)). -![We are reverse proxy, said Cloudflare](image/cloudflaredearuser.png) +![](image/cloudflaredearuser.png) It is called this in reference to the [Great Firewall of China](https://www.comparitech.com/privacy-security-tools/blockedinchina/) which does a comparable job of filtering out *some* people from seeing web content(ie everyone in mainland china and some people outside) while at the same time those not affected to see a dratically different web, a web free of censorship of such images as ["tank man"](https://en.wikipedia.org/wiki/Tank_Man). -![One more step to prove you are not a robot or anonymous](image/onemorestep.jpg) +![](image/onemorestep.jpg) -Cloudflare similarly prevents those in southeast asia and elsewhere who have poor internet connectivity from accessing the websites behind it(for example, they could be behind 7+ layers of NAT) unless they solve multiple image CAPTCHAs. Cloudflare also has a massive harassment problem. [Tor users](https://www.torproject.org/) and VPN users are a victim. +Cloudflare similarly prevents those in southeast asia and elsewhere who have poor internet connectivity from accessing the websites behind it(for example, they could be behind 7+ layers of NAT) unless they solve multiple image CAPTCHAs. Cloudflare also has a massive [harassment problem](https://web.archive.org/web/20171024040313/http://www.businessinsider.com/cloudflare-ceo-suggests-people-who-report-online-abuse-use-fake-names-2017-5). [Tor users](https://www.torproject.org/) and [VPN users](https://airvpn.org/topic/23090-cloudflare-often-bans-my-ip-address/) are a victim. -![example: Cloudflare ban VPN](image/banvpn.jpg) +![](image/banvpn.jpg) This repository is a list of websites that are behind The Great Cloudwall, and also actively blocking Tor users. -* [Domains using Cloudflare](splits/) -* [Non-Cloudflare but filtering/blocking tor users](https://notabug.org/themusicgod1/non-cloudflare-tor-hostile) +* List: [Domains using Cloudflare](splits/) +* List: [Non-Cloudflare but filtering/blocking tor users](https://notabug.org/themusicgod1/non-cloudflare-tor-hostile) +* Info: [Block Global Active Adversary Cloudflare](https://trac.torproject.org/projects/tor/ticket/24351) +* Info: [Problem with CloudFlare](https://github.com/privacytoolsIO/privacytools.io/issues/374#issuecomment-460077544) There are more details of why what they are doing is wrong available [here](cloudflare-philosophy.md). Also see [Frequently Asked Questions](faq.md). diff --git a/image/matthew_prince.jpg b/image/matthew_prince.jpg new file mode 100644 index 000000000..5bd8e3c2d Binary files /dev/null and b/image/matthew_prince.jpg differ diff --git a/what-to-do.md b/what-to-do.md index 7e66f3abc..828df01ef 100644 --- a/what-to-do.md +++ b/what-to-do.md @@ -1,14 +1,29 @@ -##### What you can do to resist Cloudflare? +# What you can do to resist Cloudflare? + +![](image/matthew_prince.jpg) + ###### Website consumer -- If the website you like is using Cloudflare, tell them not to use Cloudflare. +- If the website you like is using Cloudflare, tell them not to use Cloudflare. Example below. -> You are just helping corporate censorship and mass surveillance. -> -> https://trac.torproject.org/projects/tor/ticket/24351 +``` +You are just helping corporate censorship and mass surveillance. +https://trac.torproject.org/projects/tor/ticket/24351 +``` + +``` +Your web page is in the privacy-abusing private walled-garden of CloudFlare. +See https://github.com/privacytoolsIO/privacytools.io/issues/374#issuecomment-460077544 +``` + +``` +I've read your privacy policy and I cannot find the word "Cloudflare". +I refuse to share data with you if you continue to feed my data to Cloudflare. +See https://notabug.org/themusicgod1/cloudflare-tor/src/master/README.md +``` - Try not to use their service. Remember you are being watched by Cloudflare. @@ -48,6 +63,17 @@ - Always recommend [Tor Browser](https://www.torproject.org/) for desktop and [Tor Browser for Android](https://play.google.com/store/apps/details?id=org.torproject.torbrowser_alpha)~~, [Orfox](https://guardianproject.info/apps/orfox/)~~ for smartphone. Other software's privacy is imperfect. This doesn't mean Tor browser is "perfect". There is no 100% secure nor 100% private on the internet and technology. +- Don't want to use "Tor"? You can use Tor Browser without Tor, and this is the best option for you. + +> **How?** +> 1. Download [Tor Browser](https://www.torproject.org/) and launch it. +> 2. Open Add-ons Manager (about:addons) and *disable* EVERYTHING but "*Torbutton*". **Do NOT *remove* them**. +> 3. Open about:config and search "*extensions.torbutton.use_nontor_proxy*". Set it to "*false*". +> 4. Go to Options, scroll down to "*Network Proxy*". Click "*Settings*" and select "*No proxy*". +> 5. Close Tor Browser. +> +> Other guide is [here](https://www.whonix.org/wiki/Tor_Browser_without_Tor#Disabling_Tor). + Let's talk about _other software's privacy_... @@ -64,16 +90,16 @@ Let's talk about _other software's privacy_... - Brave Browser [whitelist Facebook/Twitter trackers](https://www.bleepingcomputer.com/news/security/facebook-twitter-trackers-whitelisted-by-brave-browser/). +- Microsoft Edge lets Facebook [run Flash code behind users' backs](https://www.zdnet.com/article/microsoft-edge-lets-facebook-run-flash-code-behind-users-backs/). + ###### "Mozilla Firefox" user - Don't use Firefox Nightly. It will send debug-level information to Mozilla servers without opt-out method. Mozilla servers are [behing Cloudflare](https://www.digwebinterface.com/?hostnames=www.mozilla.org%0D%0Amozilla.cloudflare-dns.com&type=&ns=resolver&useresolver=8.8.4.4&nameservers=). -- It is possible to prohibit Firefox to connect to Mozilla servers. Create a file "/distribution/policies.json". Mozilla's [policy-templates guide](https://github.com/mozilla/policy-templates/blob/master/README.md). +- It is possible to prohibit Firefox to connect to Mozilla servers. Create a file "/distribution/policies.json". Mozilla's [policy-templates guide](https://github.com/mozilla/policy-templates/blob/master/README.md). Keep in mind this trick might stop working in later version because Mozilla likes to whitelist themselves. Use firewall and DNS filter to block them completely. -> { -> "policies": { > "WebsiteFilter": { > "Block": [ > "*://*.mozilla.com/*", @@ -84,8 +110,7 @@ Let's talk about _other software's privacy_... > "*://*.cloudflare.com/*" > ] > }, -> ... -> } + - ~~Report a bug on mozilla's tracker, telling them not to use Cloudflare/TRR.~~ There was a bug report on bugzilla. Many people were posted their concern, however the bug was hidden by the admin last year.