nora-puchreiner

It's always been available, although tricky: click "report abuse" on your account, write something, and voila - you have a working account, invisible to others: they see your profile and activity page as 404.

> Yes. You can buy any car you want,

No.

In the US, if you want, you can buy and legally own a tank or other military vehicle.

But in Russia you still can't, despite all the mobilizations :(

What is sanction-related is SWIFT almost frozen in Russia, for all entities, irregardless their presence in sanction lists. So, if one have money on PayPal, he cannot move it to a bank easily. And then cannot pay from that bank back to a Western contractor. Ironically, as the result of that cross-border slowdown, Russians now have big account balances on PayPal.

Flipperzero could have shown more Ukrainians than Russians, but... America could side with the Russians in the conflict and discount the Ukrainians.

so "Everything made by Americans are bad and unreliable for foreign users"

They had a similar issue with Stripe few months ago which was partly resolved (Stripe unblocked 70% of money which was enough to them to go on with production).

It is generalized: CF dropped 8chan and archive.is few years ago.

I wonder that KiwiFarms worked for so long and that Gab.com is still on CF.

And blog.pinboard.in shows default Apache stub...

It looks good for NixOS (or Guix) store.

That million Firefox users who chose Cloudflare DNS must know that chose "privacy versus convenience" too and be happy with that.

There are number of websites (Wikipedia, Lobste.RS, some subreddits, ...) which do archive all new outlinks in an automated way.

Why content preservation is not very popular among webmasters (why NH and 1000000s other sites do not do it?) is an interesting question for Internet philosophers.

Maybe, because people mostly want the shit to sink and not come up again?

Also, why web-archiving is biased right-wing?

> Google could potentially shut their entire game down any day

SemRush CEO said that Google would rather sponsor them than shut down.

That kind of analytics increases Google's sales, but Google cannot run such a product without conflicts of interest (providing one ad-buyers information on what doing their competitors).

...when the CA (DigiCert) requires the private key to perform the revokation which Cloudflare does not give away

It is too weak a guarantee. We already have seen as risk of revenue losing did not stop Kaspersky.

I'd compare the current Cloudflare's power to Kaspersky's ability to steal any file from computers their antivirus is installed on. If they can do it then one day they will have a strong reason to do it, risking the trust and sales volume.

> They risk losing their status as a trusted CA.

There are tons of goals more important than the trusted status. Killing Osama, arresting Silk Road, performing or exposure of election fraud, ...

Losing of the status might happen sometimes later while the traffic interception/modification is what they can do right now. And it could be ordered by someone who do not care on those statuses at all.

A MITM-attack which starts from DNS could be narrow targeted, forged DNS responses could be sent to a single person or an organization. Certificate Transparency monitors are futile here.

Also, if the reputation risks is the only thing which could prevent them from doing so... it is not the security we expect from the cryptographic protocols. A subpoena/warrant could be a more "colossal" threat to their business.

Since 1.1.1.1 introduction, Cloudflare is able to perform HTTPS man-in-the middle attacks even for the websites which do not use Cloudflare CDN: they could forge DNS answer and proxy HTTPS traffic of any website via their CDN, instantaneously issuing a valid HTTPS certificate, as they have root certs and could issue certs for any domain.

Since ODoH they could perform such attacks without being spotted by ISPs. Nice.