Live data from Hacker News

Cloudflare's abuse policies and approach

blog.cloudflare.com

751–760 of 1001 posts

Re: Cloudflare's abuse policies and approach

#751
post #626

Quoted post unavailable.

Quoted post unavailable.

> archive.ph links don't work for me for some reason, so I can't see if there's any evidence in there.

Alright, so you're ignoring the bulk of the evidence. Site works on my machine.

>I have seen some screenshots claiming to show underage people talking sexually in the Catboy Ranch server, and it's been confirmed that those screenshots are not actually from the server.

Says who? By the way, Keffal's hard drive was confiscated in the Canadian police raid. It was immediately after they took this drive that Keffals fled the country.

>Keffals shares information on informed consent clinics and safe sources of HRT supplies. This is not illegal.

They specifically encourage minors to buy blockers, hormones, and needles online with Bitcoin from sketchy labs, and to self-dose behind the backs of their parents and doctors. Keffals' close friend Bobposting, who together with Keffals runs the "DIY HRT directory," has bragged about sending minors controlled substances via the mail; this is expressely illegal. See link in my parent post for details.

>The money is going to be used to sue the police department that swatted her. Suing a police department is very, very expensive.

I look forward to news of this nonexistent lawsuit. The police chief in question has made strong public statements about officers' videotaped conduct.

>Call it a false flag if you like, but I'll trust Occam's Razor on this one.

Occam's Razor means something different for people like Keffals who have a history of lying, theft, manipulation, and doxing and harassment of others.

Re: Cloudflare's abuse policies and approach

#752

That’s a lot of words to say they’re not dropping Kiwi Farms. In spite of the fact that I think they plainly meet this condition for removal: > Is otherwise illegal, harmful, or violates the rights of others, including content that discloses sensitive personal information, incites or exploits violence against people or animals, or seeks to defraud the public.

I see more that as a consequence of a failure of the US to legislate hate speech. Cloudflare, as a private company, doesn't want to police hate speech (which I fully understand and support, personally). In my country, France, this website is simply illegal. It would be prosecuted, and only then the hosting company (such as Cloudflare) would have to shut down the website.

> I see more that as a consequence of a failure of the US to legislate hate speech.

What’s considered “hate speech” is completely arbitrary and liable to change depending on who is in power. There’s untold “hate speech” against Christians, straight white males, wealthy people etc - where does it stop and why is criticizing one group of people “hate speech” and another not?

Re: Cloudflare's abuse policies and approach

#753
post #211

Earlier quoted context omitted.

All of those platforms regularly remove that type of content and ban users that post it.

Quoted post unavailable.

Finding KiwiFarms posts that currently dox a user are going to be hard, because now that the site is under increased scrutiny from the public there is likely to be an attempt from moderators to remove posts. We can clearly find posts however that doxxing has been part of the sites history for years.

For example, this post contains an address:

https://kiwifarms.net/threads/onision-james-gregory-jackson-...

Here is a post containing the IP of some user:

https://kiwifarms.net/threads/leonard-f-shaner-jr.9940/page-...

Here is a list of past addresses for someone:

https://kiwifarms.net/threads/russell-greer-just_some_dude_n...

Re: Cloudflare's abuse policies and approach

#754

>We believe cyberattacks, in any form, should be relegated to the dustbin of history. Unless, of course, you are an _enabler_ of such attacks. This is where CF's hypocrisy shines through. instant-stresser.com str3ssed.co freestresser.co metastresser.com (dozens more) These are all sites hosted with CF DNS, who provide services that are literally the opposite of free speech -- they are in the business of _suppressing…

So, the claim is that Cloudflare is acting like the window glass shop that drums up business by running around smashing windows at night? That's quite the claim. Here's a recent report on a DDoS-for-hire outfit that was criminally charged and convicted, related to downthem.org and ampnode.org https://www.malwarebytes.com/blog/news/2022/06/ddos-for-hire... Interestingly, the affidavit in that case does note that Cloud…

> So, the claim is that Cloudflare is acting like the window glass shop that drums up business by running around smashing windows at night? That's quite the claim.

That is not my claim; they don't operate any DDoS-for-hire sites. My claim is that their "free speech, we won't shut them down" claims are utter hypocrisy when they do nothing to shut down their support for DDoS-for-hire sites, the ultimate (on the internet, anyway) anti-free speech perpetrators.

Re: Cloudflare's abuse policies and approach

#756
post #27

Earlier quoted context omitted.

8chan had the whole mass shooter thing. Comparing the two websites is very hyperbolic.

8chan users radicalize each other and encourage each other to commit mass shootings. KiwiFarms users post the personal information of people and encourage each other to harass them to the point of suicide. I don't see how they aren't comparable.

What is the distinction you are drawing between a death from a swatting and pulling the trigger yourself?

Is this some "I didn't kill you, I just tied you up and left you on the tracks at 11:55 for the noon train" distinction?

And just because the attacks aren't explicitly coordinated on the site doesn't mean there's not culpability there... if an 8chan user is radicalized by 8chan and attacks a target suggested by 8chan, that doesn't mean 8chan isn't responsible just because the user didn't explicitly type "yes I am going to attack on Febtober 7th at 2pm".

That's sort of the problem with the whole "stochastic terrorism" thing... there's a transparently thin veneer of deniability for everyone involved, even the leaders. We obviously don't tolerate those excuses when dealing with jihad, you're going to get sanctioned or even bombed even if you're "just their spiritual leader and not actually involved with planning.

There's no reason to with 8chan or KF either.

Re: Cloudflare's abuse policies and approach

#757
post #331
post #54

Earlier quoted context omitted.

A protection racket implies collusion between attacker and defender, where the defender comes to you offering “protection”, but then comes again as an attacker to those who refuse. CloudFlare aren’t a protection racket; they’re just an ordinary for-hire private security service, for businesses in “bad parts of town.” They don’t come to anyone; people come to them. And they have any facility for originating outbound r…

> This is the thing: cutting off diplomatic routes is almost never the right approach, even during a hot war. The analogous approach would be to speed-limit outbound connections.

This do next to nothing though. Most of the DDoS-traffic, while initiated in these places, originates from botnets all over the western world. Smart fridges, enterprise routers, that sort of things. Many of them seem to come from small businesses.

Re: Cloudflare's abuse policies and approach

#758

That’s a lot of words to say they’re not dropping Kiwi Farms. In spite of the fact that I think they plainly meet this condition for removal: > Is otherwise illegal, harmful, or violates the rights of others, including content that discloses sensitive personal information, incites or exploits violence against people or animals, or seeks to defraud the public.

That was under “Hosting Products”, KW probably falls under “Security Services”. > Hosting products are those products where Cloudflare is the ultimate host of the content. This is different from products where we are merely providing security or temporary caching services and the content is hosted elsewhere

Which is the most frustrating thing about this document, because CloudFlare is ostensibly explaining why their AUP for hosting services is different from their AUP for security services; but instead of talking about the points of their AUP, they talk about how they don't want to terminate security services just because they feel the content is "immoral or disgusting" or "reprehensible".

They are adopting the same strawman that critics of "cancel culture" believe exists: they are answering the question of "Why don't you cancel security services to people whose content is 'immoral or disgusting' or 'reprehensible'?"

But that's not the relevant question. One presumes Kiwi Farms would violate CloudFlare's Hosting AUP not because they're "immoral or disgusting" or "reprehensible" either (because those aren't stated violations of the hosting AUP) but because it "Is otherwise illegal, harmful, or violates the rights of others, including content that discloses sensitive personal information, incites or exploits violence against people or animals, or seeks to defraud the public."

So the question they should be answering, for each of the AUP violations they prohibit in their Hosting AUP, is why they allow these activities for services protected by their security services:

* Do you, or why do you allow security service subscribers to distribute material that violates intellectual property rights?

* Do you, or why do you protect security service subscribers' ability to publish defamatory content?

* Do you, or why do you protect security service subscribers' ability to distribute malware and control botnets?

And if it turns out you don't allow them to do that, then why would you make a special exception for the last plank of your hosting AUP:

* Do you, or why do you protect security service subscribers' ability to distribute content that is otherwise illegal, harmful, or violates the rights of others, including content that discloses sensitive personal information, incites or exploits violence against people or animals, or seeks to defraud the public?

Those are the activities in question, not whether something is "immoral or disgusting" or "reprehensible". So why the misdirection? Why not answer why you think it's important to provide security services specifically to people that incites harassment to people?

In my opinion, it's because they are overcorrecting and actually favoring groups like Kiwi Farms exactly because they're repugnant and reprehensible, and giving them a special bye that they wouldn't to, say, a revenge porn site. And that's participating and aiding in the targeting of Kiwi Farms' victims.

Re: Cloudflare's abuse policies and approach

#759

Earlier quoted context omitted.

It's an American company hosting content for an American. The laws of America apply.

Precisely, they do! Which is why this isn't a free speech issue. Cloudflare is not a utility, nor are they a government entity.

No post body was provided.

Re: Cloudflare's abuse policies and approach

#760

Quoted post unavailable.

Ah so you would support Fire brigades that dont respond to the homes of people you find morally questionable?

They are not a utility, owned by the public, volunteer-led, a nonprofit, or are anywhere close in relation to the wonderful services of a fire department.

This is a company that is harboring and upholding the very act of terrorism and violence being sickened on a population.

They are upholding fascist hatred, and so are you if you aren't seeing that.

Post reply on HN