mirror of
https://codeberg.org/crimeflare/cloudflare-tor
synced 2024-12-22 23:50:31 +00:00
Compare commits
24 Commits
daa87ca2e4
...
f82e65a5f4
| Author | SHA1 | Date | |
|---|---|---|---|
|
f82e65a5f4 | ||
|
3d48da22db | ||
|
|
377940d805 | ||
|
|
2f486da9db | ||
|
|
d5a4e2368b | ||
|
|
3ac2c59144 | ||
|
|
aff3b67500 | ||
|
|
74868f3600 | ||
|
|
604c47f845 | ||
|
|
a408806664 | ||
|
|
e36c978e65 | ||
|
|
b6396741ff | ||
|
|
736a5534bf | ||
|
|
c9dd4639c3 | ||
|
|
f7784667b8 | ||
|
|
ef0c2ed7bd | ||
|
|
beca1a4f55 | ||
|
|
394490002c | ||
|
|
a10670e421 | ||
|
|
260650673e | ||
|
8a0c7f60df | ||
|
c6cc76ec74 | ||
|
|
55eb6e08f9 | ||
|
f83584083e |
@ -1,3 +1,4 @@
|
|||||||
|
- TEMPLATE.md
|
||||||
- _zz_.md
|
- _zz_.md
|
||||||
- _zz_.ethics.md
|
- _zz_.ethics.md
|
||||||
- _zz_.short.md
|
- _zz_.short.md
|
||||||
|
|||||||
@ -28,6 +28,7 @@
|
|||||||
| Cloudflare blockiert auch automatisch legitime Roboter/Crawler wie Google-, Yandex-, Yacy- und API-Clients. Cloudflare überwacht aktiv die "Bypass Cloudflare" -Community mit der Absicht, legitime Forschungsbots zu brechen. |  |
|
| Cloudflare blockiert auch automatisch legitime Roboter/Crawler wie Google-, Yandex-, Yacy- und API-Clients. Cloudflare überwacht aktiv die "Bypass Cloudflare" -Community mit der Absicht, legitime Forschungsbots zu brechen. |  |
|
||||||
| Cloudflare verhindert in ähnlicher Weise, dass viele Personen mit schlechter Internetverbindung auf die dahinter stehenden Websites zugreifen können (z. B. könnten sie sich hinter mehr als 7 NAT-Schichten befinden oder dieselbe IP-Adresse verwenden, z. B. öffentliches WLAN), es sei denn, sie lösen CAPTCHAs mit mehreren Bildern. In einigen Fällen dauert es 10 bis 30 Minuten, bis Google zufrieden ist. |  |
|
| Cloudflare verhindert in ähnlicher Weise, dass viele Personen mit schlechter Internetverbindung auf die dahinter stehenden Websites zugreifen können (z. B. könnten sie sich hinter mehr als 7 NAT-Schichten befinden oder dieselbe IP-Adresse verwenden, z. B. öffentliches WLAN), es sei denn, sie lösen CAPTCHAs mit mehreren Bildern. In einigen Fällen dauert es 10 bis 30 Minuten, bis Google zufrieden ist. |  |
|
||||||
| Im Jahr 2020 wechselte Cloudflare von Google Recaptcha zu hCaptcha, da Google beabsichtigt, die Nutzung in Rechnung zu stellen. Cloudflare hat Ihnen gesagt, dass sie sich um Ihre Privatsphäre kümmern ("es hilft, ein Datenschutzproblem anzugehen"), aber dies ist offensichtlich eine Lüge. Es geht nur um Geld. "Mit hCaptcha können Websites Geld verdienen, um diese Nachfrage zu befriedigen und gleichzeitig Bots und andere Formen des Missbrauchs zu blockieren." |  |
|
| Im Jahr 2020 wechselte Cloudflare von Google Recaptcha zu hCaptcha, da Google beabsichtigt, die Nutzung in Rechnung zu stellen. Cloudflare hat Ihnen gesagt, dass sie sich um Ihre Privatsphäre kümmern ("es hilft, ein Datenschutzproblem anzugehen"), aber dies ist offensichtlich eine Lüge. Es geht nur um Geld. "Mit hCaptcha können Websites Geld verdienen, um diese Nachfrage zu befriedigen und gleichzeitig Bots und andere Formen des Missbrauchs zu blockieren." |  |
|
||||||
|
| Aus Anwendersicht ändert sich daran nicht viel. Sie sind gezwungen, es zu lösen. | <br> |
|
||||||
| Viele Menschen und Software werden täglich von Cloudflare blockiert. |  |
|
| Viele Menschen und Software werden täglich von Cloudflare blockiert. |  |
|
||||||
| Cloudflare nervt viele Menschen auf der ganzen Welt. Schauen Sie sich die Liste an und überlegen Sie, ob die Übernahme von Cloudflare auf Ihrer Website für die Benutzererfahrung gut ist. |  |
|
| Cloudflare nervt viele Menschen auf der ganzen Welt. Schauen Sie sich die Liste an und überlegen Sie, ob die Übernahme von Cloudflare auf Ihrer Website für die Benutzererfahrung gut ist. |  |
|
||||||
| Was ist der Zweck des Internets, wenn Sie nicht tun können, was Sie wollen? Die meisten Leute, die Ihre Website besuchen, suchen nur nach anderen Seiten, wenn sie keine Webseite laden können. Möglicherweise blockieren Sie keine Besucher, aber die Standard-Firewall von Cloudflare ist streng genug, um viele Personen zu blockieren. | <br> |
|
| Was ist der Zweck des Internets, wenn Sie nicht tun können, was Sie wollen? Die meisten Leute, die Ihre Website besuchen, suchen nur nach anderen Seiten, wenn sie keine Webseite laden können. Möglicherweise blockieren Sie keine Besucher, aber die Standard-Firewall von Cloudflare ist streng genug, um viele Personen zu blockieren. | <br> |
|
||||||
@ -106,8 +107,8 @@ Dieses Repository ist eine Liste von Websites, die sich hinter "The Great Cloudw
|
|||||||
* Das ursprüngliche eBook (ePUB) wurde von der BookRix GmbH aufgrund einer Urheberrechtsverletzung von CC0-Material gelöscht
|
* Das ursprüngliche eBook (ePUB) wurde von der BookRix GmbH aufgrund einer Urheberrechtsverletzung von CC0-Material gelöscht
|
||||||
* [Das Vorhängeschlosssymbol zeigt eine sichere SSL-Verbindung an, die mit MITM](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831835) von Anonymous
|
* [Das Vorhängeschlosssymbol zeigt eine sichere SSL-Verbindung an, die mit MITM](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831835) von Anonymous
|
||||||
* [Blockieren Sie Global Active Adversary Cloudflare](https://trac.torproject.org/projects/tor/ticket/24351) von nym-zone
|
* [Blockieren Sie Global Active Adversary Cloudflare](https://trac.torproject.org/projects/tor/ticket/24351) von nym-zone
|
||||||
* The ticket was vandalized so many times.
|
* Das Ticket wurde so oft zerstört.
|
||||||
* Deleted by the [Tor Project](https://lists.torproject.org/pipermail/anti-censorship-team/2020-May/000098.html). See [ticket 34175](https://trac.torproject.org/projects/tor/ticket/34175).
|
* Von der [Tor Project](https://lists.torproject.org/pipermail/anti-censorship-team/2020-May/000098.html) gelöscht. Sehen [ticket 34175](https://trac.torproject.org/projects/tor/ticket/34175).
|
||||||
* Last [archive ticket 24351](https://web.archive.org/web/20200301013104/https://trac.torproject.org/projects/tor/ticket/24351)
|
* Last [archive ticket 24351](https://web.archive.org/web/20200301013104/https://trac.torproject.org/projects/tor/ticket/24351)
|
||||||
* [Problem mit Cloudflare](https://github.com/privacytoolsIO/privacytools.io/issues/374#issuecomment-460077544) von libBletchley
|
* [Problem mit Cloudflare](https://github.com/privacytoolsIO/privacytools.io/issues/374#issuecomment-460077544) von libBletchley
|
||||||
* Sie hatten in der Vergangenheit Cloudflare verwendet. [Hinzugefügt](https://github.com/privacytools/privacytools.io/pull/1205) CF-tor aber [entfernt](https://github.com/privacytools/privacytools.io/pull/1804).
|
* Sie hatten in der Vergangenheit Cloudflare verwendet. [Hinzugefügt](https://github.com/privacytools/privacytools.io/pull/1205) CF-tor aber [entfernt](https://github.com/privacytools/privacytools.io/pull/1804).
|
||||||
|
|||||||
275
readme/en.md
275
readme/en.md
@ -1,78 +1,197 @@
|
|||||||
One thing, I don't know why<br>
|
# 👋 [_Non-English_ versions](../README.md)
|
||||||
It doesn't even matter how hard you try<br>
|
|
||||||
<br>
|
---
|
||||||
Keep that in mind, I designed this rhyme<br>
|
|
||||||
To explain in due time all I know<br>
|
|
||||||
<br>
|
# The Great Cloudwall
|
||||||
Time is a valuable thing<br>
|
|
||||||
<br>
|
|
||||||
Watch it fly by as the pendulum swings<br>
|
|
||||||
Watch it count down to the end of the day<br>
|
|
||||||
The clock ticks life away, it's so unreal<br>
|
|
||||||
<br>
|
---
|
||||||
Didn't look out below<br>
|
|
||||||
Watch the time go right out the window<br>
|
|
||||||
Tryin' to hold on, didn't even know<br>
|
## Stop Cloudflare
|
||||||
I wasted it all just to watch you go<br>
|
|
||||||
<br>
|
|
||||||
I kept everything inside<br>
|
| 🖹 | 🖼 |
|
||||||
And even though I tried, it all fell apart<br>
|
| --- | --- |
|
||||||
What it meant to me will eventually be<br>
|
| "The Great Cloudwall" is [Cloudflare Inc.](https://www.cloudflare.com/), the [U.S. company](https://en.wikipedia.org/wiki/Cloudflare). It is providing [CDN](https://en.wikipedia.org/wiki/Content_delivery_network)(content delivery network) services, [DDoS mitigation](https://en.wikipedia.org/wiki/DDoS_mitigation), [Internet security](https://en.wikipedia.org/wiki/Internet_security), and distributed [DNS](https://en.wikipedia.org/wiki/Domain_Name_System)(domain name server) services. |  |
|
||||||
A memory of a time when I tried so hard<br>
|
| Cloudflare is the [world's](https://almanac.httparchive.org/en/2019/cdn) [largest](https://w3techs.com/technologies/history_overview/proxy) MITM proxy([reverse proxy](https://en.wikipedia.org/wiki/Reverse_proxy)). Cloudflare owns [more than 80% of CDN market](https://w3techs.com/technologies/history_overview/proxy) share and the number of [cloudflare users](../cloudflare_users/) are growing each day. They have expanded their network to more than [100 countries](https://blog.cloudflare.com/cloudflare-network-expands-to-more-than-100-countries/). Cloudflare serves [more web traffic](https://wp-rocket.me/blog/cloudflare-use-not/) than [Twitter](https://en.wikipedia.org/wiki/Twitter), [Amazon](https://en.wikipedia.org/wiki/Amazon_(company)), [Apple](https://en.wikipedia.org/wiki/Apple_Inc.), [Instagram](https://en.wikipedia.org/wiki/Instagram), [Bing](https://en.wikipedia.org/wiki/Bing_(search_engine)) & [Wikipedia](https://en.wikipedia.org/wiki/Wikipedia) combined. Cloudflare is offering [free plan](https://www.cloudflare.com/plans/) and many people are using it instead of configuring their servers properly. They traded [privacy](https://en.wikipedia.org/wiki/Privacy) over convenience. |  |
|
||||||
<br>
|
| Cloudflare sits between you and origin webserver, acting like a [border patrol agent](https://www.cbp.gov/careers/bpa). You are not able to connect to your chosen destination. You are connecting to Cloudflare and all your information is being decrypted and handed over on the fly. |  |
|
||||||
I tried so hard and got so far<br>
|
| The origin webserver administrator allowed the agent - Cloudflare - to decide [who can access](https://web.archive.org/web/https://gitlab.com/iblech/tor-appeal/issues/1) to their "_web property_" and define "_restricted area_". |  |
|
||||||
But in the end it doesn't even matter<br>
|
| Take a look at the right image. You will think Cloudflare block _only_ [bad guys](https://en.wikipedia.org/wiki/Black_hat_(computer_security)). You will think _Cloudflare is always online(never go [down](https://twitter.com/bengoldacre/status/1146058200887648258))_. You will think _legit bots and [crawlers](https://en.wikipedia.org/wiki/Web_crawler) can index your website_. |  |
|
||||||
I had to fall to lose it all<br>
|
| However [those are not true](../PEOPLE.md) at all. Cloudflare is blocking innocent people with no reason. Cloudflare can go down. Cloudflare blocks legit bots. |  |
|
||||||
But in the end it doesn't even matter<br>
|
| Just like any [hosting service](https://en.wikipedia.org/wiki/Web_hosting_service), Cloudflare is not perfect. You will see this screen [even if the origin server is working well](../PEOPLE.md). |  |
|
||||||
<br>
|
| Do you really think Cloudflare has 100% [uptime](https://en.wikipedia.org/wiki/Uptime)? [You have no idea](../PEOPLE.md) how many times Cloudflare [goes down](https://www.zerohedge.com/markets/major-part-web-offline-cloudflare-suffers-outage). If Cloudflare goes down your customer cannot access your website. | <br> |
|
||||||
One thing, I don't know why<br>
|
| It is called this in reference to the [Great Firewall of China](https://www.comparitech.com/privacy-security-tools/blockedinchina/) which does a comparable job of [filtering out many humans](../PEOPLE.md) from seeing web content (ie everyone in [mainland China](https://en.wikipedia.org/wiki/China) and people outside) while at the same time those not affected to see a dratically different web, a web free of [censorship](https://en.wikipedia.org/wiki/Internet_censorship) such as an image of ["tank man"](https://en.wikipedia.org/wiki/Tank_Man) and the history of ["Tiananmen Square protests"](https://en.wikipedia.org/wiki/1989_Tiananmen_Square_protests#Censorship_in_China). |  |
|
||||||
It doesn't even matter how hard you try<br>
|
| Cloudflare possesses [great power](http://digdeep4orxw6psc33yxa2dgmuycj74zi6334xhxjlgppw6odvkzkiad.onion/ghost/mozilla.html). In a sense, they control what the end user ultimately sees. You are prevented from browsing the website because of Cloudflare. |  |
|
||||||
<br>
|
| Cloudflare can be used for censorship. |  |
|
||||||
Keep that in mind, I designed this rhyme<br>
|
| You cannot view cloudflared website if you are using minor browser which Cloudflare may think it is a bot(because not many people use it). |  |
|
||||||
To remind myself how I tried so hard<br>
|
| You cannot pass this invasive "browser check" without enabling Javascript. This is a waste of five(or more) seconds of your valuable life. |  |
|
||||||
<br>
|
| Cloudflare also [automatically](https://twitter.com/itsybitsydots/status/1212691131508477952) [block](../PEOPLE.md) legit robots/crawlers such as Google, Yandex, Yacy, and [API clients](../PEOPLE.md). Cloudflare is actively [monitoring](../PEOPLE.md) "bypass cloudflare" community with an intent to break legit research bots. | <br> |
|
||||||
In spite of the way you were mockin' me<br>
|
| Cloudflare similarly prevents many people who have poor internet connectivity from accessing the websites behind it (for example, they could be behind 7+ layers of NAT or sharing same IP, for example public Wifi) unless they solve multiple image CAPTCHAs. In some cases, [this will take 10 to 30 minutes to satisfy Google](https://trac.torproject.org/projects/tor/ticket/23840). |  |
|
||||||
Actin' like I was part of your property<br>
|
| In the year 2020 Cloudflare switched from [Google's Recaptcha](https://en.wikipedia.org/wiki/Recaptcha) to [hCaptcha](https://en.wikipedia.org/wiki/HCaptcha) as Google [intends to charge](https://professionalhackers.in/cloudflare-dumps-recaptcha-as-google-intends-to-charge-for-its-use/) for its use. Cloudflare told you they care your privacy(["it helps address a privacy concern"](https://blog.cloudflare.com/moving-from-recaptcha-to-hcaptcha/)) but this is obviously a lie. It is all about money. "[hCaptcha](https://www.hcaptcha.com/) allows websites to make money serving this demand while blocking bots and other forms of abuse" |  |
|
||||||
<br>
|
| From user's perspective, this doesn't change much. You are being forced to solve it. | <br> |
|
||||||
Rememberin' all the times you fought with me<br>
|
| Many humans and software are being blocked by Cloudflare [every day](../PEOPLE.md). |  |
|
||||||
I'm surprised it got so far<br>
|
| Cloudflare [annoys many people](../PEOPLE.md) around the world. Take a look at the list and think whether adopting Cloudflare on your site is good for user experience. |  |
|
||||||
<br>
|
| What is the purpose of the internet if you cannot do what you want? Most people who visit your website will just look for other pages if they can't load a webpage. You may be not blocking any visitors, but Cloudflare's default firewall is strict enough to block many people. | <br> |
|
||||||
Things aren't the way they were before<br>
|
| There is no way to solve the captcha without enabling Javascript and Cookies. Cloudflare is [using them](../PEOPLE.md) to make a browser signature to [identify](https://cryptome.org/2016/07/cloudflare-de-anons-tor.htm) [you](../PEOPLE.md). Cloudflare needs to know your identity to decide whether you are eligeble to continue browsing the site. |  |
|
||||||
You wouldn't even recognize me anymore<br>
|
| [Tor users](https://www.torproject.org/) and [VPN users](https://airvpn.org/topic/23090-cloudflare-often-bans-my-ip-address/) are also a [victim](https://blog.torproject.org/trouble-cloudflare) of Cloudflare. Both solutions are being used by many people who cannot afford uncensored internet due to their country/corporation/network policy or who wants to add extra layer to protect their privacy. Cloudflare is shamelessly attacking those people, forcing them to turn off their proxy solution. |  |
|
||||||
<br>
|
| If you didn't try Tor until this moment, we encourage you to [download Tor Browser](https://www.torproject.org/) and visit your favorite websites. (advice: _Do not login to your bank website or government webpage or they will flag your account. [Use VPN](https://www.vpngate.net/en/) for those websites._) |  |
|
||||||
Not that you knew me back then<br>
|
| You might want to say "_Tor is illegal! Tor users are criminal! Tor is bad!_". No. You might learned about Tor from television, saying Tor can be used to browse [darknet](https://en.wikipedia.org/wiki/Darknet) and trade guns, drugs or [chid porn](https://en.wikipedia.org/wiki/Child_sexual_abuse_material). While above statement is true that there are many market website where you can buy such items, those sites are often appear on clearnet too. |  |
|
||||||
But it all comes back to me in the end<br>
|
| Tor _was_ [developed by US Army](https://www.nrl.navy.mil/itd/chacs/dingledine-tor-second-generation-onion-router), but current Tor is developed by the [Tor project](https://www.torproject.org/). There are many people and organizations [who use Tor](https://blog.torproject.org/tor-misused-criminals) including your future friends. So, if you are using Cloudflare on your website you are blocking _real_ humans. You will lose potential friendship and business deal. |  |
|
||||||
<br>
|
| And their DNS service, [1.1.1.1](https://1.1.1.1/), is also filtering out users from visiting the website by returning [fake](https://trac.torproject.org/projects/tor/ticket/32915) IP address [owned by Cloudflare](https://www.reddit.com/r/CloudFlare/comments/hiqm4u/no_cloudflare_website_is_loading/), localhost IP such as "127.0.0.x", or just return nothing. | <br> |
|
||||||
You kept everything inside<br>
|
| Cloudflare DNS also [break](https://twitter.com/bowranger/status/1213031783576428550) [online](https://twitter.com/jb510/status/1212521533907668992) [software](https://twitter.com/No_Style/status/1201525422795710466) [from](https://twitter.com/daemuth/status/1187758306535903233) [smartphone](https://twitter.com/gregortorrence/status/1183102089439805441) [app](https://www.reddit.com/r/CloudFlare/comments/gmfm4i/us_bank_website_is_not_in_cloudflare_dns/) [to computer game because of their fake DNS answer](../PEOPLE.md). Cloudflare DNS [cannot query](../PEOPLE.md) some bank websites. | <br> |
|
||||||
And even though I tried, it all fell apart<br>
|
| And here you might think,<br>"_I am not using Tor or VPN, why should I care?_"<br>"_I trust Cloudflare marketing, why should I care_"<br>"_My website is https why should I care_" |  |
|
||||||
<br>
|
| If you visit website which use Cloudflare, you are sharing your information not only to website owner _but also Cloudflare_. This is how the [reverse proxy](https://en.wikipedia.org/wiki/Reverse_proxy) works. |  |
|
||||||
What it meant to me will eventually be<br>
|
| It is impossible to [analyze](https://blog.cloudflare.com/the-csam-scanning-tool/) without [decrypting TLS traffic](https://github.com/nym-zone/block_cloudflare_mitm_fx/issues/15#issuecomment-354773389). |  |
|
||||||
A memory of a time when I tried so hard<br>
|
| Cloudflare knows all your data such as raw password. |  |
|
||||||
<br>
|
| [Cloudbeed](https://en.wikipedia.org/wiki/Cloudbleed) can happen anytime. |  |
|
||||||
I tried so hard and got so far<br>
|
| Cloudflare's https is never end-to-end. |  |
|
||||||
But in the end it doesn't even matter<br>
|
| Do you really want to share your data with Cloudflare, and also 3-letter agency? |  |
|
||||||
I had to fall to lose it all<br>
|
| Internet user's online profile is a "product" that the government and big tech companies wants to buy. |  |
|
||||||
But in the end it doesn't even matter<br>
|
| U.S. [Department of Homeland Security](https://www.dhs.gov/) said:<br><br>"Do you have any idea how valuable the data you have is? Is there any way you would sell us that data?" |  |
|
||||||
<br>
|
| Cloudflare also offer _FREE_ VPN service called "[Cloudflare Warp](https://blog.cloudflare.com/1111-warp-better-vpn/)". If you use it, all your smartphone ([or your computer](https://techniapps.com/2019/09/26/download-cloudflare-warp-vpn-for-pc-windows-10-mac/)) connections are sent to Cloudflare servers. Cloudflare can know which website you've read, what comment you've posted, who you've talked to, etc. You are voluntary giving [all your information](https://github.com/privacytoolsIO/privacytools.io/issues/374#issuecomment-478686469) to Cloudflare. If you think "_Are you joking? Cloudflare is secure._" then you need to learn how [VPN works](https://en.wikipedia.org/wiki/VPN). |  |
|
||||||
I've put my trust in you<br>
|
| Cloudflare said their VPN service make your internet [fast](https://www.wired.com/story/cloudflare-says-new-vpn-service-wont-slow-you-down/). But VPN make your internet connection _slower_ than [your](https://twitter.com/ExYakuza/status/1182317536089526273) [existing](https://twitter.com/waddling/status/1177615384616325120) [connection](https://techcrunch.com/2019/04/01/cloudflares-warp-is-a-vpn-that-might-actually-make-your-mobile-connection-better/). |  |
|
||||||
Pushed as far as I can go<br>
|
| You might already know about the [PRISM](https://en.wikipedia.org/wiki/PRISM_(surveillance_program)) scandal. It is true that [AT&T](https://en.wikipedia.org/wiki/AT%26T) lets [NSA](https://en.wikipedia.org/wiki/National_Security_Agency) to [copy all internet data](https://www.cnet.com/news/at-t-lets-nsa-hide-and-surveil-in-plain-sight-the-intercept-reports/) for surveillance. |  |
|
||||||
For all this<br>
|
| Let's say you're working at the NSA, and you want _every citizen's internet profile_. You know most of them are [blindly trusting Cloudflare](https://twitter.com/search?q=Cloudflare&f=live) and using it - only one centralized gateway - to proxy their company server connection([SSH](https://blog.cloudflare.com/public-keys-are-not-enough-for-ssh-security/)/[RDP](https://blog.cloudflare.com/cloudflare-access-now-supports-rdp/)), personal website, chat website, forum website, bank website, insurance website, search engine, secret member-only website, auction website, [shopping](https://www.cloudflare.com/case-studies/shopify-powering-the-biggest-shopping-weekend-of-the-year/), video website, NSFW website, and illegal website. You also know they use Cloudflare's DNS service ("_1.1.1.1_") and VPN service ("_Cloudflare Warp_") for "_Secure! Faster! Better!_" internet experience. Combining them with user's IP address, browser [fingerprint](https://github.com/VeNoMouS/cloudscraper/issues/209#issuecomment-624853689), cookies and RAY-ID will be useful to build target's online profile. |  |
|
||||||
There's only one thing you should know<br>
|
| You want their data. [What will you do](https://www.reddit.com/r/privacy/comments/1gb0pa/how_prism_actually_works_1520_att_fiber_optic/)? |  |
|
||||||
<br>
|
|
||||||
I've put my trust in you<br>
|
|
||||||
Pushed as far as I can go<br>
|
|
||||||
For all this<br>
|
### Cloudflare is a honeypot.
|
||||||
There's only one thing you should know<br>
|
|
||||||
<br>
|
|
||||||
I tried so hard and got so far<br>
|
|
||||||
But in the end it doesn't even matter<br>
|
### Free honey for everyone. _Some_ strings attached.
|
||||||
I had to fall to lose it all<br>
|
|
||||||
But in the end it doesn't even matter<br>
|
|
||||||
<br>
|
|
||||||
We don't know why<br>
|
### Do not use Cloudflare.
|
||||||
We really don't know why<br>
|
|
||||||
It doesn't even matter how hard we tried<br>
|
|
||||||
<br>
|
|
||||||
<br>
|
### Decentralize the internet.
|
||||||
https://codeberg.org/crimeflare/cloudflare-tor/commit/a257f01adc3f852a80d45252192e97ecd18fe77e<br>
|
|
||||||
<br>
|
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
|
||||||
|
## Please continue to next page: "[Cloudflare Ethics](en.ethics.md)"
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
<details>
|
||||||
|
<summary>_click me_
|
||||||
|
|
||||||
|
## Data & More Information
|
||||||
|
</summary>
|
||||||
|
|
||||||
|
|
||||||
|
This repository is a list of websites that are behind "The Great Cloudwall", blocking Tor users and other CDNs.
|
||||||
|
|
||||||
|
|
||||||
|
**Data**
|
||||||
|
* [Cloudflare Inc.](../cloudflare_inc/)
|
||||||
|
* [Cloudflare Users](../cloudflare_users/)
|
||||||
|
* [Cloudflare Domains](../cloudflare_users/domains/)
|
||||||
|
* [Non-Cloudflare CDN users](../not_cloudflare/)
|
||||||
|
* [Anti-Tor users](../anti-tor_users/)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
**More Information**
|
||||||
|
* [Myth Catalog](../subfiles/myth_catalog.md)
|
||||||
|
* [The Great Cloudwall](../pdf/2019-Jeff_Cliff_Book1.txt), [Mr. Jeff Cliff](https://shitposter.club/users/jeffcliff)
|
||||||
|
* Download: [PDF](../pdf/2019-The_Great_Cloudwall.pdf), [ePUB](../pdf/2019-Jeff_Cliff_The_Great_Cloudwall.epub)
|
||||||
|
* The original eBook(ePUB) was deleted by BookRix GmbH due to copyright infringement of CC0 material
|
||||||
|
* [Padlock icon indicates a secure SSL connection established w MITM-ed](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831835), Anonymous
|
||||||
|
* [Block Global Active Adversary Cloudflare](https://trac.torproject.org/projects/tor/ticket/24351), nym-zone
|
||||||
|
* The ticket was vandalized so many times.
|
||||||
|
* [Deleted by the Tor Project.](https://lists.torproject.org/pipermail/anti-censorship-team/2020-May/000098.html) [See ticket 34175.](https://trac.torproject.org/projects/tor/ticket/34175)
|
||||||
|
* [Last archive ticket 24351](https://web.archive.org/web/20200301013104/https://trac.torproject.org/projects/tor/ticket/24351)
|
||||||
|
* [Problem with Cloudflare](https://github.com/privacytoolsIO/privacytools.io/issues/374#issuecomment-460077544), libBletchley
|
||||||
|
* They had used Cloudflare in the past. [CF-tor was removed.](https://github.com/privacytools/privacytools.io/pull/1804)
|
||||||
|
* [Cloudflare Watch](http://www.crimeflare.org:82/)
|
||||||
|
* [Criticism and controversies](https://en.wikipedia.org/wiki/Cloudflare#Criticism_and_controversies), Wikipedia
|
||||||
|
* [Another landmark day in the war to control, centralize and censor the internet.](https://www.reddit.com/r/privacy/comments/b8dptl/another_landmark_day_in_the_war_to_control/), TheGoldenGoose8888
|
||||||
|
* [Disadvantage of relying on only one service](https://twitter.com/w3Nicolas/status/1134529316904153089) ([DO is CF](https://www.digwebinterface.com/?hostnames=ns1.digitalocean.com%0D%0Ans2.digitalocean.com%0D%0Ans3.digitalocean.com%0D%0Awww.digitalocean.com&type=A&ns=resolver&useresolver=8.8.4.4&nameservers=))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
</details>
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
<details>
|
||||||
|
<summary>_click me_
|
||||||
|
|
||||||
|
## What can you do?
|
||||||
|
</summary>
|
||||||
|
|
||||||
|
* [Read our list of recommended actions and share it with your friends.](../ACTION.md)
|
||||||
|
|
||||||
|
* [Read other user's voice and write your thoughts.](../PEOPLE.md)
|
||||||
|
|
||||||
|
* Search something: [Ansero](https://ansero.wodferndripvpe6ib4uz4rtngrnzichnirgn7t5x64gxcyroopbhsuqd.onion/) ([clearnet](https://ansero.eu.org/)), [Crimeflare \#Search](https://crimeflare.wodferndripvpe6ib4uz4rtngrnzichnirgn7t5x64gxcyroopbhsuqd.onion/) ([clearnet](https://crimeflare.eu.org/))
|
||||||
|
|
||||||
|
* Update the domain list: [List instructions](../INSTRUCTION.md).
|
||||||
|
|
||||||
|
* [Add Cloudflare or project related event to history.](../HISTORY.md)
|
||||||
|
|
||||||
|
* [Try & write new Tool/Script.](../tool/)
|
||||||
|
|
||||||
|
* [Here's some PDF/ePUB to read.](../pdf/)
|
||||||
|
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
### About fake accounts
|
||||||
|
|
||||||
|
Crimeflare know about the existence of fake accounts impersonating our official channels, be it Twitter, Facebook, Patreon, OpenCollective, Villages etc.
|
||||||
|
**We never ask your email.
|
||||||
|
We never ask your name.
|
||||||
|
We never ask your identity.
|
||||||
|
We never ask your location.
|
||||||
|
We never ask your donation.
|
||||||
|
We never ask your review.
|
||||||
|
We never ask you to follow on social media.
|
||||||
|
We never ask your social media.**
|
||||||
|
|
||||||
|
# DO NOT TRUST FAKE ACCOUNTS.
|
||||||
|
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
| 🖼 | 🖼 |
|
||||||
|
| --- | --- |
|
||||||
|
|  |  |
|
||||||
|
|  |  |
|
||||||
|
|  |  |
|
||||||
|
|
||||||
|
</details>
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
1
readme/translateData/README.md
Normal file
1
readme/translateData/README.md
Normal file
@ -0,0 +1 @@
|
|||||||
|
TEMPLATE(MD) + TEMPLATE(JSON) + ASIS --- generate() ---> xy.md, xy.ethics.md
|
||||||
1
readme/translateData/TEMPLATE.ethics.json
Normal file
1
readme/translateData/TEMPLATE.ethics.json
Normal file
@ -0,0 +1 @@
|
|||||||
|
{}
|
||||||
273
readme/translateData/TEMPLATE.ethics.md
Normal file
273
readme/translateData/TEMPLATE.ethics.md
Normal file
@ -0,0 +1,273 @@
|
|||||||
|
# Ethical Issues
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
"_Don't support this company which is void of ethics_"
|
||||||
|
|
||||||
|
"_Your company isn't trustworthy. You claim to enforce DMCA but have many lawsuits for not doing so._"
|
||||||
|
|
||||||
|
"_They only censor those who question their ethics._"
|
||||||
|
|
||||||
|
"_I guess the truth is inconvenient and better hidden from public view._" -- [phyzonloop](https://twitter.com/phyzonloop)
|
||||||
|
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
|
||||||
|
<details>
|
||||||
|
<summary>_click me_
|
||||||
|
|
||||||
|
## CloudFlare spams people
|
||||||
|
</summary>
|
||||||
|
|
||||||
|
|
||||||
|
Cloudflare is sending spam emails to non-Cloudflare users.
|
||||||
|
|
||||||
|
- Only send emails to subscribers who’ve opted in
|
||||||
|
- When the user say "stop", then stop sending email
|
||||||
|
|
||||||
|
It's that simple. But Cloudflare doesn't care.
|
||||||
|
Cloudflare said using their service [can stop all spammers or attackers](https://support.cloudflare.com/hc/en-us/articles/200170066-Will-activating-Cloudflare-stop-all-spammers-or-attackers-).
|
||||||
|
How can we stop _Cloudflare spammers_ without activating Cloudflare?
|
||||||
|
|
||||||
|
|
||||||
|
| 🖼 | 🖼 |
|
||||||
|
| --- | --- |
|
||||||
|
|  |  |
|
||||||
|
|  | <br> |
|
||||||
|
|
||||||
|
</details>
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
<details>
|
||||||
|
<summary>_click me_
|
||||||
|
|
||||||
|
## Remove user's review
|
||||||
|
</summary>
|
||||||
|
|
||||||
|
|
||||||
|
Cloudflare censor [negative reviews](https://web.archive.org/web/20191116004046/https://www.trustpilot.com/reviews/5aa6ee0ed5a5700a7c8cf853). If you post _anti-Cloudflare_ text on Twitter, you have a chance to get a [reply](https://twitter.com/CloudflareHelp/status/1126051764917145601) from [Cloudflare employee](cloudflare_inc/cloudflare_members.txt) with "_[No, it's not](PEOPLE.md)_" message. If you post a negative review on any review site, they will try to [censor](https://twitter.com/phyzonloop/status/1178836176985366529) [it](https://twitter.com/dxgl_org/status/1178722159432220672).
|
||||||
|
|
||||||
|
|
||||||
|
| 🖼 | 🖼 |
|
||||||
|
| --- | --- |
|
||||||
|
| <br> |  |
|
||||||
|
|
||||||
|
</details>
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
<details>
|
||||||
|
<summary>_click me_
|
||||||
|
|
||||||
|
## Share user's private information
|
||||||
|
</summary>
|
||||||
|
|
||||||
|
|
||||||
|
Cloudflare has a massive [harassment problem](https://web.archive.org/web/20171024040313/http://www.businessinsider.com/cloudflare-ceo-suggests-people-who-report-online-abuse-use-fake-names-2017-5).
|
||||||
|
Cloudflare [shares personal information](https://archive.ph/ePdvi) of those [who](https://twitter.com/ZJemptv/status/898299709634248704) [complain](https://twitter.com/TinyPirate/status/554718958176067584) [about](https://twitter.com/remembrancermx/status/1010329041235148802) [hosted](https://twitter.com/Bridaguy/status/915003769280172037) [sites](https://twitter.com/HelloAndrew/status/897260208845500416). They sometimes ask you to provide
|
||||||
|
your true ID. If you don't want to get harassed, [assaulted](https://twitter.com/NiteShade925/status/1158469203420205056), [swatted](https://boingboing.net/2015/01/19/invasion-boards-set-out-to-rui.html) or [killed](https://twitter.com/RusEmbUSA/status/1187363092793040901), you better stay away from Cloudflared websites.
|
||||||
|
|
||||||
|
|
||||||
|
| 🖼 | 🖼 |
|
||||||
|
| --- | --- |
|
||||||
|
|  |  |
|
||||||
|
|  |  |
|
||||||
|
|  | <br> |
|
||||||
|
|
||||||
|
</details>
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
<details>
|
||||||
|
<summary>_click me_
|
||||||
|
|
||||||
|
## Corporate solicitation of charitable contributions
|
||||||
|
</summary>
|
||||||
|
|
||||||
|
|
||||||
|
CloudFlare is [asking](https://web.archive.org/web/20191112033605/https://opencollective.com/cloudflarecollective#section-about) for charitable contributions. It’s quite appalling that an American corporation would ask for charity alongside non-profit organizations that have good causes. If you like [blocking people or wasting other people's time](PEOPLE.md), you might want to order some pizzas🍕 for Cloudflare employees.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
</details>
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
<details>
|
||||||
|
<summary>_click me_
|
||||||
|
|
||||||
|
## Terminating sites
|
||||||
|
</summary>
|
||||||
|
|
||||||
|
|
||||||
|
What will you do if your site goes down _suddenly_? There are reports that Cloudflare is [deleting](https://twitter.com/stefan_eady/status/1126033791267426304) [user's](https://twitter.com/derivativeburke/status/903755267053117440) [configuration](https://twitter.com/lordscarlet/status/1046785164792205314) or [stopping service without any warning](https://twitter.com/svolentin/status/1227324408475344896), [silently](https://twitter.com/BlnaryMlke/status/1194339461984854018). We suggest you find [better provider](what-to-do.md).
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
</details>
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
<details>
|
||||||
|
<summary>_click me_
|
||||||
|
|
||||||
|
## Browser vendor discrimination
|
||||||
|
</summary>
|
||||||
|
|
||||||
|
|
||||||
|
CloudFlare gives preferential treatment to those using Firefox while giving hostile treatment to users of non-Tor-Browser over Tor.
|
||||||
|
Tor users of who rightfully refuse to execute non-free javascript also receive hostile treatment.
|
||||||
|
This access inequality is a network neutrality abuse and an abuse of power.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
- Left: `Tor Browser` , Right: `Chrome`. Same IP address.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
- Left: `[Tor Browser] Javascript Disabled, Cookie Enabled`
|
||||||
|
- Right: `[Chrome] Javascript Enabled, Cookie Disabled`
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
- QuteBrowser(minor browser) without Tor (Clearnet IP)
|
||||||
|
|
||||||
|
| ***Browser*** | ***Access treatment*** |
|
||||||
|
| --- | --- |
|
||||||
|
| Tor Browser (Javascript enabled) | access permitted |
|
||||||
|
| Firefox (Javascript enabled) | access degraded |
|
||||||
|
| Chromium (Javascript enabled) | access degraded (pushes Google reCAPTCHA) |
|
||||||
|
| Chromium or Firefox (Javascript disabled) | access denied (pushes *broken* Google reCAPTCHA) |
|
||||||
|
| Chromium or Firefox (Cookie disabled) | access denied |
|
||||||
|
| QuteBrowser | access denied |
|
||||||
|
| lynx | access denied |
|
||||||
|
| w3m | access denied |
|
||||||
|
| wget | access denied |
|
||||||
|
|
||||||
|
|
||||||
|
"_Why not use Audio button to solve easy challenge?_"
|
||||||
|
|
||||||
|
Yes, there is an audio button, but it _always_ [doesn't work over Tor](https://trac.torproject.org/projects/tor/ticket/23840). You will get this message when you click it:
|
||||||
|
|
||||||
|
```
|
||||||
|
Try again later
|
||||||
|
Your computer or network may be sending automated queries.
|
||||||
|
To protect our users, we can't process your request right now.
|
||||||
|
For more details visit our help page
|
||||||
|
```
|
||||||
|
|
||||||
|
</details>
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
<details>
|
||||||
|
<summary>_click me_
|
||||||
|
|
||||||
|
## Voter suppression
|
||||||
|
</summary>
|
||||||
|
|
||||||
|
|
||||||
|
Voters in US states register to vote ultimately through the state secretary's website in the state of their residence.
|
||||||
|
Republican-controlled state secretary offices engage in voter suppression by proxying the state secretary's website through Cloudflare.
|
||||||
|
Cloudflare's hostile treatment of Tor users, its MITM position as a centralized global point of surveillance, and its detrimental role overall
|
||||||
|
makes prospective voters reluctant to register. Liberals in particular tend to embrace privacy. Voter registration forms collect sensitive information about a voter's political leaning, personal physical address, social security number, and date of birth.
|
||||||
|
Most states only make a subset of that information publicly available, but Cloudflare sees ***all*** that information when someone registers to vote.
|
||||||
|
|
||||||
|
Note that paper registration does not circumvent Cloudflare because the secretary of state data entry staff workers will likely use the
|
||||||
|
Cloudflare website to enter the data.
|
||||||
|
|
||||||
|
| 🖼 | 🖼 |
|
||||||
|
| --- | --- |
|
||||||
|
|  |  |
|
||||||
|
|
||||||
|
- Change.org is a famous website for gathering votes and take action. "[people everywhere are starting campaigns, mobilizing supporters, and working with decision makers to drive solutions.](https://web.archive.org/web/20200206120027/https://www.change.org/about)"
|
||||||
|
Unfortunately, many people cannot view change.org at all due to Cloudflare's aggressive filter. They are being blocked from signing the petition, thus excluding them from a democratic process. Using other non-cloudflared platform such as [OpenPetition](https://www.openpetition.eu/content/about_us) helps remedy the problem.
|
||||||
|
|
||||||
|
| 🖼 | 🖼 |
|
||||||
|
| --- | --- |
|
||||||
|
|  |  |
|
||||||
|
|
||||||
|
- Cloudflare's "[Athenian Project](https://www.cloudflare.com/athenian/)" offers free enterprise-level protection to state and local election websites. They said "_their constituents can access election information and voter registration_" but this is a lie because many people just can't browse the site at all.
|
||||||
|
|
||||||
|
</details>
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
<details>
|
||||||
|
<summary>_click me_
|
||||||
|
|
||||||
|
## Ignoring user's preference
|
||||||
|
</summary>
|
||||||
|
|
||||||
|
|
||||||
|
If you opt-out something, you expect that you receive no email about it. Cloudflare ignore user's preference and share data with third-party corporations [without customer's consent](https://twitter.com/thexpaw/status/1108424723233419264). If you're using their free plan, they sometimes send email to you asking to buy monthly subscription.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
</details>
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
<details>
|
||||||
|
<summary>_click me_
|
||||||
|
|
||||||
|
## Lying about deleting user's data
|
||||||
|
</summary>
|
||||||
|
|
||||||
|
|
||||||
|
According to this [ex-cloudflare customer's blog](https://shkspr.mobi/blog/2019/11/can-you-trust-cloudflare-with-your-personal-data/), Cloudflare is lying about deleting accounts. Nowadays, many [companies keep your data](https://justdeleteme.xyz/) after you've closed or removed your account. Most of good companies do mention about it in their privacy policy. Cloudflare? No.
|
||||||
|
|
||||||
|
```
|
||||||
|
2019-08-05 CloudFlare sent me confirmation that they'd removed my account.
|
||||||
|
2019-10-02 I received an email from CloudFlare "because I am a customer"
|
||||||
|
```
|
||||||
|
|
||||||
|
Cloudflare didn't know about the word "remove". If it is really _removed_, why this ex-customer got an email? He also mentioned that Cloudflare's privacy policy doesn't mention about it.
|
||||||
|
|
||||||
|
```
|
||||||
|
Their new privacy policy doesn't make any mention of retaining data for a year.
|
||||||
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
How can you trust Cloudflare if [their privacy policy is a LIE](https://twitter.com/daviddlow/status/1197787135526555648)?
|
||||||
|
|
||||||
|
</details>
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
<details>
|
||||||
|
<summary>_click me_
|
||||||
|
|
||||||
|
## Keep your personal information
|
||||||
|
</summary>
|
||||||
|
|
||||||
|
|
||||||
|
Deleting Cloudflare account is [hard level](https://justdeleteme.xyz/).
|
||||||
|
|
||||||
|
```
|
||||||
|
Submit a support ticket using the "Account" category,
|
||||||
|
and request account deletion in the message body.
|
||||||
|
You must have no domains or credit cards attached to your account prior to requesting deletion.
|
||||||
|
```
|
||||||
|
|
||||||
|
You will [receive this confirmation email](https://twitter.com/originalesushi/status/1199041528414527495).
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
"We have begun to process your deletion request" but "We will continue to store your personal information".
|
||||||
|
|
||||||
|
Can you "trust" this?
|
||||||
|
|
||||||
|
</details>
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Please continue to next page: "[Cloudflare Voices](../PEOPLE.md)"
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
1
readme/translateData/TEMPLATE.json
Normal file
1
readme/translateData/TEMPLATE.json
Normal file
@ -0,0 +1 @@
|
|||||||
|
{}
|
||||||
192
readme/translateData/TEMPLATE.md
Normal file
192
readme/translateData/TEMPLATE.md
Normal file
@ -0,0 +1,192 @@
|
|||||||
|
# The Great Cloudwall
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
|
||||||
|
## Stop Cloudflare
|
||||||
|
|
||||||
|
|
||||||
|
| 🖹 | 🖼 |
|
||||||
|
| --- | --- |
|
||||||
|
| "The Great Cloudwall" is [Cloudflare Inc.](https://www.cloudflare.com/), the [U.S. company](https://en.wikipedia.org/wiki/Cloudflare). It is providing [CDN](https://en.wikipedia.org/wiki/Content_delivery_network)(content delivery network) services, [DDoS mitigation](https://en.wikipedia.org/wiki/DDoS_mitigation), [Internet security](https://en.wikipedia.org/wiki/Internet_security), and distributed [DNS](https://en.wikipedia.org/wiki/Domain_Name_System)(domain name server) services. |  |
|
||||||
|
| Cloudflare is the [world's](https://almanac.httparchive.org/en/2019/cdn) [largest](https://w3techs.com/technologies/history_overview/proxy) MITM proxy([reverse proxy](https://en.wikipedia.org/wiki/Reverse_proxy)). Cloudflare owns [more than 80% of CDN market](https://w3techs.com/technologies/history_overview/proxy) share and the number of [cloudflare users](../cloudflare_users/) are growing each day. They have expanded their network to more than [100 countries](https://blog.cloudflare.com/cloudflare-network-expands-to-more-than-100-countries/). Cloudflare serves [more web traffic](https://wp-rocket.me/blog/cloudflare-use-not/) than [Twitter](https://en.wikipedia.org/wiki/Twitter), [Amazon](https://en.wikipedia.org/wiki/Amazon_(company)), [Apple](https://en.wikipedia.org/wiki/Apple_Inc.), [Instagram](https://en.wikipedia.org/wiki/Instagram), [Bing](https://en.wikipedia.org/wiki/Bing_(search_engine)) & [Wikipedia](https://en.wikipedia.org/wiki/Wikipedia) combined. Cloudflare is offering [free plan](https://www.cloudflare.com/plans/) and many people are using it instead of configuring their servers properly. They traded [privacy](https://en.wikipedia.org/wiki/Privacy) over convenience. |  |
|
||||||
|
| Cloudflare sits between you and origin webserver, acting like a [border patrol agent](https://www.cbp.gov/careers/bpa). You are not able to connect to your chosen destination. You are connecting to Cloudflare and all your information is being decrypted and handed over on the fly. |  |
|
||||||
|
| The origin webserver administrator allowed the agent - Cloudflare - to decide [who can access](https://web.archive.org/web/https://gitlab.com/iblech/tor-appeal/issues/1) to their "_web property_" and define "_restricted area_". |  |
|
||||||
|
| Take a look at the right image. You will think Cloudflare block _only_ [bad guys](https://en.wikipedia.org/wiki/Black_hat_(computer_security)). You will think _Cloudflare is always online(never go [down](https://twitter.com/bengoldacre/status/1146058200887648258))_. You will think _legit bots and [crawlers](https://en.wikipedia.org/wiki/Web_crawler) can index your website_. |  |
|
||||||
|
| However [those are not true](../PEOPLE.md) at all. Cloudflare is blocking innocent people with no reason. Cloudflare can go down. Cloudflare blocks legit bots. |  |
|
||||||
|
| Just like any [hosting service](https://en.wikipedia.org/wiki/Web_hosting_service), Cloudflare is not perfect. You will see this screen [even if the origin server is working well](../PEOPLE.md). |  |
|
||||||
|
| Do you really think Cloudflare has 100% [uptime](https://en.wikipedia.org/wiki/Uptime)? [You have no idea](../PEOPLE.md) how many times Cloudflare [goes down](https://www.zerohedge.com/markets/major-part-web-offline-cloudflare-suffers-outage). If Cloudflare goes down your customer cannot access your website. | <br> |
|
||||||
|
| It is called this in reference to the [Great Firewall of China](https://www.comparitech.com/privacy-security-tools/blockedinchina/) which does a comparable job of [filtering out many humans](../PEOPLE.md) from seeing web content (ie everyone in [mainland China](https://en.wikipedia.org/wiki/China) and people outside) while at the same time those not affected to see a dratically different web, a web free of [censorship](https://en.wikipedia.org/wiki/Internet_censorship) such as an image of ["tank man"](https://en.wikipedia.org/wiki/Tank_Man) and the history of ["Tiananmen Square protests"](https://en.wikipedia.org/wiki/1989_Tiananmen_Square_protests#Censorship_in_China). |  |
|
||||||
|
| Cloudflare possesses [great power](http://digdeep4orxw6psc33yxa2dgmuycj74zi6334xhxjlgppw6odvkzkiad.onion/ghost/mozilla.html). In a sense, they control what the end user ultimately sees. You are prevented from browsing the website because of Cloudflare. |  |
|
||||||
|
| Cloudflare can be used for censorship. |  |
|
||||||
|
| You cannot view cloudflared website if you are using minor browser which Cloudflare may think it is a bot(because not many people use it). |  |
|
||||||
|
| You cannot pass this invasive "browser check" without enabling Javascript. This is a waste of five(or more) seconds of your valuable life. |  |
|
||||||
|
| Cloudflare also [automatically](https://twitter.com/itsybitsydots/status/1212691131508477952) [block](../PEOPLE.md) legit robots/crawlers such as Google, Yandex, Yacy, and [API clients](../PEOPLE.md). Cloudflare is actively [monitoring](../PEOPLE.md) "bypass cloudflare" community with an intent to break legit research bots. | <br> |
|
||||||
|
| Cloudflare similarly prevents many people who have poor internet connectivity from accessing the websites behind it (for example, they could be behind 7+ layers of NAT or sharing same IP, for example public Wifi) unless they solve multiple image CAPTCHAs. In some cases, [this will take 10 to 30 minutes to satisfy Google](https://trac.torproject.org/projects/tor/ticket/23840). |  |
|
||||||
|
| In the year 2020 Cloudflare switched from [Google's Recaptcha](https://en.wikipedia.org/wiki/Recaptcha) to [hCaptcha](https://en.wikipedia.org/wiki/HCaptcha) as Google [intends to charge](https://professionalhackers.in/cloudflare-dumps-recaptcha-as-google-intends-to-charge-for-its-use/) for its use. Cloudflare told you they care your privacy(["it helps address a privacy concern"](https://blog.cloudflare.com/moving-from-recaptcha-to-hcaptcha/)) but this is obviously a lie. It is all about money. "[hCaptcha](https://www.hcaptcha.com/) allows websites to make money serving this demand while blocking bots and other forms of abuse" |  |
|
||||||
|
| From user's perspective, this doesn't change much. You are being forced to solve it. | <br> |
|
||||||
|
| Many humans and software are being blocked by Cloudflare [every day](../PEOPLE.md). |  |
|
||||||
|
| Cloudflare [annoys many people](../PEOPLE.md) around the world. Take a look at the list and think whether adopting Cloudflare on your site is good for user experience. |  |
|
||||||
|
| What is the purpose of the internet if you cannot do what you want? Most people who visit your website will just look for other pages if they can't load a webpage. You may be not blocking any visitors, but Cloudflare's default firewall is strict enough to block many people. | <br> |
|
||||||
|
| There is no way to solve the captcha without enabling Javascript and Cookies. Cloudflare is [using them](../PEOPLE.md) to make a browser signature to [identify](https://cryptome.org/2016/07/cloudflare-de-anons-tor.htm) [you](../PEOPLE.md). Cloudflare needs to know your identity to decide whether you are eligeble to continue browsing the site. |  |
|
||||||
|
| [Tor users](https://www.torproject.org/) and [VPN users](https://airvpn.org/topic/23090-cloudflare-often-bans-my-ip-address/) are also a [victim](https://blog.torproject.org/trouble-cloudflare) of Cloudflare. Both solutions are being used by many people who cannot afford uncensored internet due to their country/corporation/network policy or who wants to add extra layer to protect their privacy. Cloudflare is shamelessly attacking those people, forcing them to turn off their proxy solution. |  |
|
||||||
|
| If you didn't try Tor until this moment, we encourage you to [download Tor Browser](https://www.torproject.org/) and visit your favorite websites. (advice: _Do not login to your bank website or government webpage or they will flag your account. [Use VPN](https://www.vpngate.net/en/) for those websites._) |  |
|
||||||
|
| You might want to say "_Tor is illegal! Tor users are criminal! Tor is bad!_". No. You might learned about Tor from television, saying Tor can be used to browse [darknet](https://en.wikipedia.org/wiki/Darknet) and trade guns, drugs or [chid porn](https://en.wikipedia.org/wiki/Child_sexual_abuse_material). While above statement is true that there are many market website where you can buy such items, those sites are often appear on clearnet too. |  |
|
||||||
|
| Tor _was_ [developed by US Army](https://www.nrl.navy.mil/itd/chacs/dingledine-tor-second-generation-onion-router), but current Tor is developed by the [Tor project](https://www.torproject.org/). There are many people and organizations [who use Tor](https://blog.torproject.org/tor-misused-criminals) including your future friends. So, if you are using Cloudflare on your website you are blocking _real_ humans. You will lose potential friendship and business deal. |  |
|
||||||
|
| And their DNS service, [1.1.1.1](https://1.1.1.1/), is also filtering out users from visiting the website by returning [fake](https://trac.torproject.org/projects/tor/ticket/32915) IP address [owned by Cloudflare](https://www.reddit.com/r/CloudFlare/comments/hiqm4u/no_cloudflare_website_is_loading/), localhost IP such as "127.0.0.x", or just return nothing. | <br> |
|
||||||
|
| Cloudflare DNS also [break](https://twitter.com/bowranger/status/1213031783576428550) [online](https://twitter.com/jb510/status/1212521533907668992) [software](https://twitter.com/No_Style/status/1201525422795710466) [from](https://twitter.com/daemuth/status/1187758306535903233) [smartphone](https://twitter.com/gregortorrence/status/1183102089439805441) [app](https://www.reddit.com/r/CloudFlare/comments/gmfm4i/us_bank_website_is_not_in_cloudflare_dns/) [to computer game because of their fake DNS answer](../PEOPLE.md). Cloudflare DNS [cannot query](../PEOPLE.md) some bank websites. | <br> |
|
||||||
|
| And here you might think,<br>"_I am not using Tor or VPN, why should I care?_"<br>"_I trust Cloudflare marketing, why should I care_"<br>"_My website is https why should I care_" |  |
|
||||||
|
| If you visit website which use Cloudflare, you are sharing your information not only to website owner _but also Cloudflare_. This is how the [reverse proxy](https://en.wikipedia.org/wiki/Reverse_proxy) works. |  |
|
||||||
|
| It is impossible to [analyze](https://blog.cloudflare.com/the-csam-scanning-tool/) without [decrypting TLS traffic](https://github.com/nym-zone/block_cloudflare_mitm_fx/issues/15#issuecomment-354773389). |  |
|
||||||
|
| Cloudflare knows all your data such as raw password. |  |
|
||||||
|
| [Cloudbeed](https://en.wikipedia.org/wiki/Cloudbleed) can happen anytime. |  |
|
||||||
|
| Cloudflare's https is never end-to-end. |  |
|
||||||
|
| Do you really want to share your data with Cloudflare, and also 3-letter agency? |  |
|
||||||
|
| Internet user's online profile is a "product" that the government and big tech companies wants to buy. |  |
|
||||||
|
| U.S. [Department of Homeland Security](https://www.dhs.gov/) said:<br><br>"Do you have any idea how valuable the data you have is? Is there any way you would sell us that data?" |  |
|
||||||
|
| Cloudflare also offer _FREE_ VPN service called "[Cloudflare Warp](https://blog.cloudflare.com/1111-warp-better-vpn/)". If you use it, all your smartphone ([or your computer](https://techniapps.com/2019/09/26/download-cloudflare-warp-vpn-for-pc-windows-10-mac/)) connections are sent to Cloudflare servers. Cloudflare can know which website you've read, what comment you've posted, who you've talked to, etc. You are voluntary giving [all your information](https://github.com/privacytoolsIO/privacytools.io/issues/374#issuecomment-478686469) to Cloudflare. If you think "_Are you joking? Cloudflare is secure._" then you need to learn how [VPN works](https://en.wikipedia.org/wiki/VPN). |  |
|
||||||
|
| Cloudflare said their VPN service make your internet [fast](https://www.wired.com/story/cloudflare-says-new-vpn-service-wont-slow-you-down/). But VPN make your internet connection _slower_ than [your](https://twitter.com/ExYakuza/status/1182317536089526273) [existing](https://twitter.com/waddling/status/1177615384616325120) [connection](https://techcrunch.com/2019/04/01/cloudflares-warp-is-a-vpn-that-might-actually-make-your-mobile-connection-better/). |  |
|
||||||
|
| You might already know about the [PRISM](https://en.wikipedia.org/wiki/PRISM_(surveillance_program)) scandal. It is true that [AT&T](https://en.wikipedia.org/wiki/AT%26T) lets [NSA](https://en.wikipedia.org/wiki/National_Security_Agency) to [copy all internet data](https://www.cnet.com/news/at-t-lets-nsa-hide-and-surveil-in-plain-sight-the-intercept-reports/) for surveillance. |  |
|
||||||
|
| Let's say you're working at the NSA, and you want _every citizen's internet profile_. You know most of them are [blindly trusting Cloudflare](https://twitter.com/search?q=Cloudflare&f=live) and using it - only one centralized gateway - to proxy their company server connection([SSH](https://blog.cloudflare.com/public-keys-are-not-enough-for-ssh-security/)/[RDP](https://blog.cloudflare.com/cloudflare-access-now-supports-rdp/)), personal website, chat website, forum website, bank website, insurance website, search engine, secret member-only website, auction website, [shopping](https://www.cloudflare.com/case-studies/shopify-powering-the-biggest-shopping-weekend-of-the-year/), video website, NSFW website, and illegal website. You also know they use Cloudflare's DNS service ("_1.1.1.1_") and VPN service ("_Cloudflare Warp_") for "_Secure! Faster! Better!_" internet experience. Combining them with user's IP address, browser [fingerprint](https://github.com/VeNoMouS/cloudscraper/issues/209#issuecomment-624853689), cookies and RAY-ID will be useful to build target's online profile. |  |
|
||||||
|
| You want their data. [What will you do](https://www.reddit.com/r/privacy/comments/1gb0pa/how_prism_actually_works_1520_att_fiber_optic/)? |  |
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
### Cloudflare is a honeypot.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
### Free honey for everyone. _Some_ strings attached.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
### Do not use Cloudflare.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
### Decentralize the internet.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
|
||||||
|
## Please continue to next page: "[Cloudflare Ethics](en.ethics.md)"
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
<details>
|
||||||
|
<summary>_click me_
|
||||||
|
|
||||||
|
## Data & More Information
|
||||||
|
</summary>
|
||||||
|
|
||||||
|
|
||||||
|
This repository is a list of websites that are behind "The Great Cloudwall", blocking Tor users and other CDNs.
|
||||||
|
|
||||||
|
|
||||||
|
**Data**
|
||||||
|
* [Cloudflare Inc.](../cloudflare_inc/)
|
||||||
|
* [Cloudflare Users](../cloudflare_users/)
|
||||||
|
* [Cloudflare Domains](../cloudflare_users/domains/)
|
||||||
|
* [Non-Cloudflare CDN users](../not_cloudflare/)
|
||||||
|
* [Anti-Tor users](../anti-tor_users/)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
**More Information**
|
||||||
|
* [Myth Catalog](../subfiles/myth_catalog.md)
|
||||||
|
* [The Great Cloudwall](../pdf/2019-Jeff_Cliff_Book1.txt), [Mr. Jeff Cliff](https://shitposter.club/users/jeffcliff)
|
||||||
|
* Download: [PDF](../pdf/2019-The_Great_Cloudwall.pdf), [ePUB](../pdf/2019-Jeff_Cliff_The_Great_Cloudwall.epub)
|
||||||
|
* The original eBook(ePUB) was deleted by BookRix GmbH due to copyright infringement of CC0 material
|
||||||
|
* [Padlock icon indicates a secure SSL connection established w MITM-ed](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831835), Anonymous
|
||||||
|
* [Block Global Active Adversary Cloudflare](https://trac.torproject.org/projects/tor/ticket/24351), nym-zone
|
||||||
|
* The ticket was vandalized so many times.
|
||||||
|
* [Deleted by the Tor Project.](https://lists.torproject.org/pipermail/anti-censorship-team/2020-May/000098.html) [See ticket 34175.](https://trac.torproject.org/projects/tor/ticket/34175)
|
||||||
|
* [Last archive ticket 24351](https://web.archive.org/web/20200301013104/https://trac.torproject.org/projects/tor/ticket/24351)
|
||||||
|
* [Problem with Cloudflare](https://github.com/privacytoolsIO/privacytools.io/issues/374#issuecomment-460077544), libBletchley
|
||||||
|
* They had used Cloudflare in the past. [CF-tor was removed.](https://github.com/privacytools/privacytools.io/pull/1804)
|
||||||
|
* [Cloudflare Watch](http://www.crimeflare.org:82/)
|
||||||
|
* [Criticism and controversies](https://en.wikipedia.org/wiki/Cloudflare#Criticism_and_controversies), Wikipedia
|
||||||
|
* [Another landmark day in the war to control, centralize and censor the internet.](https://www.reddit.com/r/privacy/comments/b8dptl/another_landmark_day_in_the_war_to_control/), TheGoldenGoose8888
|
||||||
|
* [Disadvantage of relying on only one service](https://twitter.com/w3Nicolas/status/1134529316904153089) ([DO is CF](https://www.digwebinterface.com/?hostnames=ns1.digitalocean.com%0D%0Ans2.digitalocean.com%0D%0Ans3.digitalocean.com%0D%0Awww.digitalocean.com&type=A&ns=resolver&useresolver=8.8.4.4&nameservers=))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
</details>
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
<details>
|
||||||
|
<summary>_click me_
|
||||||
|
|
||||||
|
## What can you do?
|
||||||
|
</summary>
|
||||||
|
|
||||||
|
* [Read our list of recommended actions and share it with your friends.](../ACTION.md)
|
||||||
|
|
||||||
|
* [Read other user's voice and write your thoughts.](../PEOPLE.md)
|
||||||
|
|
||||||
|
* Search something: [Ansero](https://ansero.wodferndripvpe6ib4uz4rtngrnzichnirgn7t5x64gxcyroopbhsuqd.onion/) ([clearnet](https://ansero.eu.org/)), [Crimeflare \#Search](https://crimeflare.wodferndripvpe6ib4uz4rtngrnzichnirgn7t5x64gxcyroopbhsuqd.onion/) ([clearnet](https://crimeflare.eu.org/))
|
||||||
|
|
||||||
|
* Update the domain list: [List instructions](../INSTRUCTION.md).
|
||||||
|
|
||||||
|
* [Add Cloudflare or project related event to history.](../HISTORY.md)
|
||||||
|
|
||||||
|
* [Try & write new Tool/Script.](../tool/)
|
||||||
|
|
||||||
|
* [Here's some PDF/ePUB to read.](../pdf/)
|
||||||
|
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
### About fake accounts
|
||||||
|
|
||||||
|
Crimeflare know about the existence of fake accounts impersonating our official channels, be it Twitter, Facebook, Patreon, OpenCollective, Villages etc.
|
||||||
|
**We never ask your email.
|
||||||
|
We never ask your name.
|
||||||
|
We never ask your identity.
|
||||||
|
We never ask your location.
|
||||||
|
We never ask your donation.
|
||||||
|
We never ask your review.
|
||||||
|
We never ask you to follow on social media.
|
||||||
|
We never ask your social media.**
|
||||||
|
|
||||||
|
# DO NOT TRUST FAKE ACCOUNTS.
|
||||||
|
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
| 🖼 | 🖼 |
|
||||||
|
| --- | --- |
|
||||||
|
|  |  |
|
||||||
|
|  |  |
|
||||||
|
|  |  |
|
||||||
|
|
||||||
|
</details>
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
1
readme/translateData/lang/en.json
Normal file
1
readme/translateData/lang/en.json
Normal file
@ -0,0 +1 @@
|
|||||||
|
{}
|
||||||
Loading…
Reference in New Issue
Block a user