Live data from Hacker News

Cloudflare's abuse policies and approach

blog.cloudflare.com

221–230 of 1001 posts

Re: Cloudflare's abuse policies and approach

#221

Earlier quoted context omitted.

KF actively pushes people to commit suicide. People have died because of them.

So does Twitter, Facebook, Instagram, and every large platform. There is so much harassment, doxing, and other disturbing behavior on all the platforms.

Twitter and Meta have policies against doxing. Difficulty preventing it at much larger scale does not make them equivalent to Kiwi Farms.

Re: Cloudflare's abuse policies and approach

#222

Earlier quoted context omitted.

And let's be real. DDoS attacks are acts of digital terrorism. They're attacking infrastructure due to political motives. These people who want to revoke DDoS protection for groups they don't like are essentially promoting terrorism. Why else would they fight so hard to remove DDoS protection, if not because they simply want those attacks to succeed?

> They're attacking infrastructure due to political motives. They're attacking KiwiFarms for their agenda of trying to drive people to commit suicide.

No post body was provided.

Re: Cloudflare's abuse policies and approach

#223
post #126

Earlier quoted context omitted.

I think one easy thing they could do, is stop hosting for forums dedicated to doxxing and harassing people, preferably before they inevitably bully their victims into suicide.

Guess what? They do. FTA: > Our decision to disable access to content in hosting products fundamentally results in that content being taken offline, at least until it is republished elsewhere. Hosting products are subject to our Acceptable Hosting Policy. Under that policy, for these products, we may remove or disable access to content that we believe: [...] Is otherwise illegal, harmful, or violates the rights of ot…

The article says that providing CDN and DDOS protection services for KiwiFarms doesn't constitute hosting. The GP commenter clearly disagrees. I'll be honest: it really does seem like a distinction without a difference to me. If Cloudflare stopped doing business with Kiwifarms, it wouldn't be online. Kiwifarms is doing a great deal of harm to the world by being online. At the end of the day, Cloudflare has a moral responsibility to—at the very least—stop contributing their security and networking resources to the cause of "Keep Kiwifarms online".

Re: Cloudflare's abuse policies and approach

#224

Earlier quoted context omitted.

KF actively pushes people to commit suicide. People have died because of them.

Is this in fact the case? Of course it is being claimed, but I always perceived that KF's nastiness was relatively self-contained, e.g. when someone encourages suicide, it's performative to other Farmers, rather than reaching out to a potential victim or their loved ones. All bark, no bite, and caged.

Wikipedia has information on 3 suicides related to KiwiFarms: https://en.wikipedia.org/wiki/Kiwi_Farms#Suicides_of_harassm...

Re: Cloudflare's abuse policies and approach

#225

Earlier quoted context omitted.

Unfortunately, it's extremely hard to prove allegations of abuse by skilled actors that know how to use their tools (tools that are really easy to use). KF's lead admin states it plainly: use a VPN, because KF complies with subpoenas. If folks were committing high-end acts of terrorism against elected officials regularly, the baddies might not be safe. But if you're a trans streamer with a small following, if the fol…

Have you thought about the reverse side of your argument? Someone falsely accusing you or your persons of insert-your-favorite-harm and then having your life upended by the social justice mob or corporate actions? It needs to go through a trial. That's what its for.

Of course I have thought about the reverse side of this. Everyone involved in the matter on my end treated it with the seriousness it deserved. And for what it's worth, I too used to believe that words couldn't hurt people and that justice was out there for those who do get hurt.

Having experienced it firsthand, I know that to not be the case. Good luck serving the subpoenas on Large Faceless Internet Giant(tm) and John Does 1-100, especially when you don't have anything near the standard of evidence necessary to do that or the law degree necessary to make such filings. Good luck doing anything less than that, because no one actually cares as long as the money keeps flowing.

The only way I could prove malice was by infiltrating their community. The only way I could shut them down was to sow enough distrust that they couldn't operate and to expose their malice to the world. And you know what? Our coordinated effort won out. We only had to fight an uphill battle against complete strangers, with our real lives put at risk. And they aren't so much as banned from the platform. They just know well enough not to mess with us again. Just the one group, because any other group could swing by and make our lives hard again.

And I'm not even the person who was being attacked. I'm privileged enough that I could have turned away and told them they were on their own. Just like some folks running some companies that help these folks do their dirty work. I didn't, because helping someone without any other recourse was the right thing to do.

Re: Cloudflare's abuse policies and approach

#227
post #79

It's rather disappointing that Cloudflare's policy is to not host content that is "illegal, harmful, or violates the rights of others, including content that discloses sensitive personal information, incites or exploits violence against people or animals, or seeks to defraud the public", but they do not apply that same policy to content that they provide DDoS mitigation services for. I don't see why their policies sh…

Hosting and DDoS protection are different services. Think of them like a landlord (hosting) vs fire department (ddos) situation - one of them can morally refuse their services to people that they think are doing wrong/illegal/immoral things, the other one doesn't.

Not that I agree or disagree with this argument - just wanted to point out what their reasoning seems to be.

Re: Cloudflare's abuse policies and approach

#228
post #206
post #181

Earlier quoted context omitted.

> I think one easy thing they could do, is stop hosting for forums dedicated to doxxing and harassing people > This policy seems to only apply to content that they host. Yes, which is exactly what the parent commenter was saying.

Quoted post unavailable.

Words have meaning. If you want to understand the difference between hosting and providing security services, here's a good article: https://blog.cloudflare.com/cloudflares-abuse-policies-and-a...

Re: Cloudflare's abuse policies and approach

#229

Earlier quoted context omitted.

> ...we worked with our Proudflare employee resource group to identify an organization that supported LGBTQ+ rights and donate 100 percent of the fees for our services to them. I'm sure their LGBTQ+ employees will appreciate that when they get doxxed, swatted, and harassed every hour of the day and night because they're providing critical resources to the groups doing so. Their position probably really does come from…

So, you have at least one example of this scenario (gay Cloudflare employee gets doxxed and harassed) ready to tell us about, right?

I haven't checked, but I expect the chilling effect is getting most of them to not rock the boat too hard.

If you want an example for such targeting though, Liz Fong-Jones has a thread on Kiwifarms because she's outspoken and worked at Google (and thus being seen as more influential / more of a threat). The thread has also significantly slowed down after she left Google.

Re: Cloudflare's abuse policies and approach

#230

Earlier quoted context omitted.

> They are exact type of customer who need DDOS protection the most. They (KiwiFarms, Daily Stormer) would be better not on the internet. > They've decided they want to be seen as a utility. This isn't how law works - just as you can't say "we don't have a banking license but we'd like to be seen as a bank and provide banking services" you can't say "we're not a utility but we'd like to be seen as one". Note that bei…

> They are exact type of customer who need DDOS protection the most. > > They (KiwiFarms, Daily Stormer) would be better not on the internet. DDOS protection only exists because some people are willing to illegally target websites they believe would be better not on the internet. It's the entire point. Folding to publish pressure for one customer weakens their case for protecting others.

Dropping nazis from your service generally doesn't weaken the case for your service. For example, when Cloudflare did this in the past, it didn't harm their business.
Post reply on HN