You’d need security for this to be a brutal hack.
Microsoft's Azure has had multiple cross-tenant exploits revealed in the last 3 months, absolutely inexcusable flaws. One of them exposed a large swathe of Fortune 500 companies' data.
You're not "safer" at Azure than a small provider spending almost nothing on security, because of the impact of more attention and a larger target on your back.
Dunking on providers for being hacked is essentially victim blaming. There's a roughly 100% chance the providers you choose are vulnerable or have lost your data at some point in time.
Yes a determined hacker will be able to breach systems and securities and vulnerabilities in hardware and software are found all the time. But a company that invests in security will almost always be less likely to be hacked and your data stolen. This does not mean the company is immune but, like in the case of Epic, if you store your data in an insecure location, you're practically asking to be hacked. It's not "victim shaming" to point fingers at a company with appallingly bad security
You seem to be claiming Azure is less likely to be hacked, however Azure has had cross-tenant security vulnerabilities.
You can't claim Epik is an "insecure location" while Azure is not while Azure has the absolute worst kind of security vulnerabilities. I'll remind you that Microsoft spends multiple billions of dollars on security and has large security and incident response teams :)
The motivation behind hacking Ubiquiti, SonicWall, SolarWinds and even Azure is very different and that matters.
In fact, Cloudflare currently provides services to Gab.
Is this a case of double standards on your part for political beliefs of the founders?
That's different from a book only featuring nazi iconography and text.
Regardless of our respective views, yours is not an accurate comparison.
Your response here is basically saying "Why are you trying so hard to catch this serial killer when cars kill so many more people".
The appropriate action is to find any illegal content there and report it directly to either ICANN or to the authorities to force the registrar to take it down.
[0] https://community.letsencrypt.org/t/lets-encrypt-is-enabling...
Gab rolled their own SQL injection prevention and failed at it, published the source for it (because they forked Mastodon and had to) and got hacked. When they got hacked they tried to cover it up and did barely anything to fight the fire they created. They got hacked again because they never reset any user tokens in the aftermath.
Parler got hacked due to them building a platform on Wordpress, using 3rd party plugins that were riddled with security holes that they never updated. On top of that due to their decision to use WP their entire platform got scraped using the sequential IDs.
And we've all seen this entire Epik debacle.
I see these as a complete betrayal of user trust and it makes any similar platform or service potentially dangerous to its users, that's all. If you're interested in my political opinion: I'm very torn between censorship and free speech as far as any entity in guardianship of others' speech is concerned, I still haven't found a balance where I'd feel comfortable planting myself because no decision happens in a bubble and is shielded from consequences in a bubble.
So, to circle back, I don't dislike Cloudflare for hosting Gab, I wouldn't even say I hate Gab for being Gab, I just avoid it. I don't know if I'd do business with Gab or not, but I'd say this: if you develop a reputation, whether thanks to you or people outside of your influence (the press or social media, for example), you have to manage it and act accordingly or risk causing a fallout.
Now, personally, I'd avoid white supremacists and anarchist groups, malware providers, hacking groups and any extremists as far as doing business with myself.
However, I'm not in charge of a giant company so I don't have to draw the line and I'm thankful for that, I certainly don't know if I'd have the wisdom to both consider my best interests, my company's best interest and the world's, all at once.
Yeah. Thanks to some bug bounties, which is a small part of the billions spent on security with some hackers is one of the solutions to this.
Without that, I think you would have a wild west of 0day exploits every day on lots of high profile companies. One day Anonymous will try to target someone else that they don't like and it could be any random S&P 500 company next. Who knows.