Live data from Hacker News

Tell HN: Cloudflare silently injects its analytics when you switch nameservers

news.ycombinator.com

11–20 of 217 posts

Re: Tell HN: Cloudflare silently injects its analytics when you switch nameservers

#12
post #7

Surprise! The man in the middle man-in-the-middles! This is only the beginning, when you’ll get used to this they’ll do worse and worse, enshittification, remember?

If I wouldn't know it better I'd sometimes think some of the big tech shops are just fronts for centralizing the net.

Re: Tell HN: Cloudflare silently injects its analytics when you switch nameservers

#13

Isn't this well known when using CF as a proxy? Not sure how they would provide traffic / DDoS telemetry otherwise.

They're serving the HTML, they have every ability to track individual web requests without modifying the content they're serving.

Re: Tell HN: Cloudflare silently injects its analytics when you switch nameservers

#14

You left out the part about how you use them as a reverse proxy, which is decoupled from DNS. One is coincidental; the other required. If they can inject script, they can also snoop on all your cleartext traffic without you knowing....

Indeed. I have several domains using cf for dns only and they don't/can't inject anything into those sites.

Re: Tell HN: Cloudflare silently injects its analytics when you switch nameservers

#16

Isn't this well known when using CF as a proxy? Not sure how they would provide traffic / DDoS telemetry otherwise.

They're serving the HTML, they have every ability to track individual web requests without modifying the content they're serving .

100% But this does not give you any useful personal data :)

Re: Tell HN: Cloudflare silently injects its analytics when you switch nameservers

#17

Earlier quoted context omitted.

They're serving the HTML, they have every ability to track individual web requests without modifying the content they're serving .

100% But this does not give you any useful personal data :)

Or data for the increasingly invasive Cloudflare captcha.

Re: Tell HN: Cloudflare silently injects its analytics when you switch nameservers

#19
post #12
post #7

Surprise! The man in the middle man-in-the-middles! This is only the beginning, when you’ll get used to this they’ll do worse and worse, enshittification, remember?

If I wouldn't know it better I'd sometimes think some of the big tech shops are just fronts for centralizing the net.

Cloudflare is doing this already. Once they had enough monopoly power, they started a program to block all bots that don't undergo invasive KYC procedures. Eventually, they might become a KYC broker for regular browser users too. The free internet is over.

Re: Tell HN: Cloudflare silently injects its analytics when you switch nameservers

#20

You left out the part about how you use them as a reverse proxy, which is decoupled from DNS. One is coincidental; the other required. If they can inject script, they can also snoop on all your cleartext traffic without you knowing....

Oh gosh I didn’t enable anything like that also. I just wanted the nameservers in order to serve the bucket under my subdomain. What else is there I wonder?
Post reply on HN