deCloudflare/readme/jv.action.md

22 KiB
Raw Blame History

Apa sing bisa ditindakake kanggo nolak Cloudflare?

🖼 🖼

Matthew Prince (@eastdakota)

"Id suggest this was armchair analysis by kids its hard to take seriously." t

"That was simply unfounded paranoia, pretty big difference." t

"We also work with Interpol and other non-US entities" t

"Watching hacker skids on Github squabble about trying to bypass Cloudflare's new anti-bot systems continues to be my daily amusement. 🍿" t


klik kula

Konsumen situs web

  • Yen situs web sing sampeyan seneng nggunakake Cloudflare, jarakake supaya ora nggunakake Cloudflare.
    • Whining ing media sosial kayata Facebook, Reddit, Twitter utawa Mastodon ora ana bedane. Tindakan luwih banter tinimbang tagar.
    • Coba kontak karo pamilik situs web yen sampeyan pengin migunani.

Cloudflare ujar:

Disaranake sampeyan menghubungi administrator kanggo layanan utawa situs tartamtu sing sampeyan lakoni lan nuduhake pengalaman sampeyan.

Yen sampeyan ora njaluk, pemilik situs web ora bakal ngerti masalah iki.

Tuladha sing sukses.
Sampeyan duwe masalah? Ngunggahake swara saiki. Tuladha ing ngisor iki.

Sampeyan mung mbantu sensor perusahaan lan pengawasan massal.
https://codeberg.org/crimeflare/cloudflare-tor/src/branch/master/README.md
Kaca web sampeyan ana ing taman berdhelik pribadi CloudFlare sing nglanggar privasi.
https://codeberg.org/crimeflare/cloudflare-tor/
  • Luangake wektu kanggo maca kabijakan privasi situs web.
    • yen situs web kasebut ana ing mburi Cloudflare utawa situs web nggunakake layanan sing gegandhengan karo Cloudflare.

Kudu nerangake apa "Cloudflare" kasebut, lan njaluk idin kanggo nuduhake data karo Cloudflare. Gagal nglakoni bakal nyebabake pelanggaran kepercayaan lan situs web sing dimaksud kudu dihindari.

Tuladha kabijakan privasi sing bisa ditampa ing kene ("Subprocessors" > "Entity Name")

Aku wis maca kabijakan privasi sampeyan lan aku ora bisa nemokake tembung Cloudflare.
Aku nolak nuduhake data karo sampeyan yen sampeyan terus menehi data ing Cloudflare.
https://codeberg.org/crimeflare/cloudflare-tor/

Iki minangka conto kabijakan privasi sing ora duwe tembung Cloudflare. Liberland Jobs privacy policy:

Cloudflare duwe kabijakan privasi dhewe. Cloudflare seneng karo wong sing doxxing.

Mangkene conto sing apik kanggo formulir pendaftaran situs web. AFAIK, situs web nol nindakake iki. Apa sampeyan bakal dipercaya?

Kanthi ngeklik "Mlebu kanggo XYZ", sampeyan setuju karo syarat layanan lan pernyataan privasi.
Sampeyan uga setuju kanggo nuduhake data karo Cloudflare lan uga setuju karo pernyataan privasi cloudflare.
Yen Cloudflare ngeculake informasi sampeyan utawa ora ngidini sampeyan nyambung menyang server, iku dudu kaluputane. [*]

[ Ndhaptar ] [ Aku ora setuju ]

[*] PEOPLE.md


klik kula

Add-ons

  • Yen browser sampeyan yaiku Firefox, Tor Browser, utawa Chromium Ungoogled, gunakake salah siji add-on ing ngisor iki.
    • Yen sampeyan pengin nambah add-on anyar takon luwih dhisik.
Jeneng Pangembang Dhukungan Bisa Blokir Ora Bisa ngabari Chrome
Bloku Cloudflaron MITM-Atakon #Addon ? Nggih Nggih Nggih
Ĉu ligoj estas vundeblaj al MITM-atako? #Addon ? Ora Nggih Nggih
Ĉu ĉi tiuj ligoj blokos Tor-uzanton? #Addon ? Ora Nggih Nggih
Block Cloudflare MITM Attack
DELETED BY TOR PROJECT
nullius ? , Link Nggih Nggih Ora
TPRB Sw ? Nggih Nggih Ora
Detect Cloudflare Frank Otto ? Ora Nggih Ora
True Sight claustromaniac ? Ora Nggih Ora
Which Cloudflare datacenter am I visiting? 依云 ? Ora Nggih Ora

klik kula

Pamilik situs web / pangembang Web

🖼 🖼

  • Nggunakake Cloudflare kanggo proksi "layanan API", "server nganyari piranti lunak" utawa "feed RSS" bakal ngrugekake pelanggan. Pelanggan nyeluk sampeyan lan ujar "Aku ora bisa nggunakake API sampeyan maneh", lan sampeyan ora ngerti apa sing kedadeyan. Cloudflare bisa meneng-menengan mblokir pelanggan sampeyan. Apa sampeyan mikir ora apa-apa?
    • Ana akeh klien maca RSS lan layanan online maca RSS. Napa sampeyan nerbitake feed RSS yen sampeyan ora ngidini wong langganan?

Dhaptar IP: "Kisaran IP Cloudflare saiki"

A: Blokir wae

server {
...
deny 173.245.48.0/20;
deny 103.21.244.0/22;
deny 103.22.200.0/22;
deny 103.31.4.0/22;
deny 141.101.64.0/18;
deny 108.162.192.0/18;
deny 190.93.240.0/20;
deny 188.114.96.0/20;
deny 197.234.240.0/22;
deny 198.41.128.0/17;
deny 162.158.0.0/15;
deny 104.16.0.0/12;
deny 172.64.0.0/13;
deny 131.0.72.0/22;
deny 2400:cb00::/32;
deny 2606:4700::/32;
deny 2803:f800::/32;
deny 2405:b500::/32;
deny 2405:8100::/32;
deny 2a06:98c0::/29;
deny 2c0f:f248::/32;
...
}

B: Pangalihan menyang kaca bebaya

http {
...
geo $iscf {
default 0;
173.245.48.0/20 1;
103.21.244.0/22 1;
103.22.200.0/22 1;
103.31.4.0/22 1;
141.101.64.0/18 1;
108.162.192.0/18 1;
190.93.240.0/20 1;
188.114.96.0/20 1;
197.234.240.0/22 1;
198.41.128.0/17 1;
162.158.0.0/15 1;
104.16.0.0/12 1;
172.64.0.0/13 1;
131.0.72.0/22 1;
2400:cb00::/32 1;
2606:4700::/32 1;
2803:f800::/32 1;
2405:b500::/32 1;
2405:8100::/32 1;
2a06:98c0::/29 1;
2c0f:f248::/32 1;
}
...
}

server {
...
if ($iscf) {rewrite ^ https://example.com/cfwsorry.php;}
...
}

<?php
header('HTTP/1.1 406 Not Acceptable');
echo <<<CLOUDFLARED
Thank you for visiting ourwebsite.com!<br />
We are sorry, but we can't serve you because your connection is being intercepted by Cloudflare.<br />
Please read https://codeberg.org/crimeflare/cloudflare-tor for more information.<br />
CLOUDFLARED;
die();
  • Siapake Tor Onion Service utawa I2P yen sampeyan yakin kebebasan lan nampani pangguna anonim.

  • Nyuwun saran saka operator situs web dual Clearnet / Tor liyane lan temokake kanca anonim!


klik kula

Pangguna piranti lunak

  • Discord nggunakake CloudFlare. Alternatif? Disaranake Briar (Android), Ricochet (PC), Tox + Tor (Android/PC)

    • Briar kalebu Tor daemon dadi ora prelu nginstal Orbot.
    • Pengembang Qwtch, Bukak Privasi, mbusak proyek stop_cloudflare saka layanan git tanpa kabar.
  • Yen sampeyan nggunakake Debian GNU / Linux, utawa turunan, lengganan: bug #831835. Lan yen sampeyan bisa, tulung verifikasi tambalan kasebut, lan tulung njaga kanggo kesimpulan sing bener apa kudu ditampa.

  • Tansah menehi saran browser iki.

Jeneng Pangembang Dhukungan Komentar
Ungoogled-Chromium Eloston ? PC (Win, Mac, Linux) !Tor
Bromite Bromite ? Android !Tor
Tor Browser Tor Project ? PC (Win, Mac, Linux) Tor
Tor Browser Android Tor Project ? Android Tor
Onion Browser Mike Tigas ? Apple iOS Tor
GNU/Icecat GNU ? PC (Linux)
IceCatMobile GNU ? Android
Iridium Browser Iridium ? PC (Win, Mac, Linux, OpenBSD)

Privasi piranti lunak liya ora sampurna. Iki ora ateges browser Tor "sampurna". Ora ana 100% aman utawa 100% pribadi ing internet lan teknologi.

Ayo ngobrol babagan privasi piranti lunak liyane.

Mula, disaranake mung tabel ing ndhuwur. Ora liya.


klik kula

Pangguna Mozilla Firefox

  • "Firefox Nightly" bakal ngirim informasi level debug menyang server Mozilla tanpa metode opt-out.

  • Sampeyan bisa nglarang Firefox supaya ora nyambung menyang server Mozilla.

    • Pandhuan template-Mozilla
    • Elinga trik iki bisa uga mandheg ing versi mengko amarga Mozilla seneng nggawe dhaptar putih dhewe.
    • Gunakake filter firewall lan DNS kanggo mblokir kabeh.

"/distribution/policies.json"

"WebsiteFilter": {
  "Block": [
  "*://*.mozilla.com/*",
  "*://*.mozilla.net/*",
  "*://*.mozilla.org/*",
  "*://webcompat.com/*",
  "*://*.firefox.com/*",
  "*://*.thunderbird.net/*",
  "*://*.cloudflare.com/*"
  ]
},
  • Laporake bug babagan tracker mozilla, supaya ora nggunakake Cloudflare. Ana laporan bug babagan bugzilla. Akeh wong sing ngirim keprihatinan, nanging bug kasebut didhelikake dening admin ing taun 2018.

  • Sampeyan bisa mateni DoH ing Firefox.

Piye carane

  1. Download Tor lan instal ing komputer.
  2. Tambahake baris iki menyang file "torrc". DNSPort 127.0.0.1:53
  3. Wiwiti maneh Tor.
  4. Setel server DNS komputer menyang "127.0.0.1".

klik kula

Tumindak


Komentar

Ana pangarep-arep ing resistensi.

Resistansi subur.

Malah uga sawetara asil sing luwih peteng, tumindak resistensi nglatih kita kanggo terus ngganggu status quo status dystopik sing asile.

Nolak!
Dina-dina, sampeyan bakal ngerti sebabe kita nulis iki.
Ora ana sing futuristik babagan iki. Kita wis kalah.

Saiki, apa sing sampeyan lakoni dina iki?