HNHacker News
TopNewBestAskShowJobs

zccrkn

216 karma · joined September 3, 2022

submissionscomments
zccrkn··on Cloudflare lobbied FTC to stifle security researchers
I'm suggesting there should be a path to complain to Cloudflare without the site being put into the loop, for cases like this where the site is not acting in good faith.
zccrkn··on Cloudflare lobbied FTC to stifle security researchers
Not to mention that CFs policy is to forward takedown requests, unredacted, to the site you're trying to takedown. CF users like KiwiFarms have been weaponizing this policy for years by publishing their takedown requests, knowing their userbase will seek retribution against whoever sent them.
zccrkn··on Cloudflare lobbied FTC to stifle security researchers
Cloudflares indifference to DDOS-for-hire providers using their service is also raising some eyebrows, considering a large part of their business is mitigating DDOS attacks. Do a search for "stresser" or "booter" services (euphemisms for DDOS-for-hire) and check their DNS records, 9 times out of 10 they're hiding behind Cloudflare.

Intentional or not, helping the attackers stay online while also selling mitigations for their attacks is basically a protection racket.