Celebrating CloudFlare's 4th Birthday

Post by tokenizerrr » Sat, Sep 27, 2014, 3:22 PM UTC

zuck9 wrote: post #9

anon1385 wrote: post #3

CloudFlare is the biggest MITM attack in the history of the internet. Why are we putting this much power in the hands of a few US citizens, who are legally obliged to record all that unencrypted data passing through their servers?

Most sites which are not on HTTPS now are static sites like blogs etc. Google recently announced HTTPS will be determining SERP so many webmasters are going to use it anyway even with a MITM.

Post by spindritf » Sat, Sep 27, 2014, 3:25 PM UTC

tokenizerrr wrote: post #11

zuck9 wrote: post #9

Earlier quoted context omitted.

Most sites which are not on HTTPS now are static sites like blogs etc. Google recently announced HTTPS will be determining SERP so many webmasters are going to use it anyway even with a MITM.

> Google recently announced HTTPS will be determining SERP Seriously? So now I have to buy into the corrupt CA system in order to rank well in searches? :/

Post by spindritf » Sat, Sep 27, 2014, 3:27 PM UTC

timdorr wrote: post #8

scaz wrote: post #2

First letter of each paragraph = "SSL TLS FREE".

Time to go grab a cert from startssl.com for free. No more excuses for not having an SSL site.

Post by yetanotherHNacc » Sat, Sep 27, 2014, 3:43 PM UTC

throwaway2048 wrote: post #10

Wonder why DDOSes have been getting worse lately? DDOS groups are putting their sites behind Cloudflare so they cannot be DDOSed off the internet by rival groups, thus their "services" become a lot more accessible, and they have grown bolder. This is a grave conflict of interest for Cloudflare, they have no incentive to stop them, after all, it generates more business for Cloudflare. This absolutely needs to be addre…

Post by slipstream- » Sat, Sep 27, 2014, 4:19 PM UTC

yetanotherHNacc wrote: post #17

throwaway2048 wrote: post #10

Wonder why DDOSes have been getting worse lately? DDOS groups are putting their sites behind Cloudflare so they cannot be DDOSed off the internet by rival groups, thus their "services" become a lot more accessible, and they have grown bolder. This is a grave conflict of interest for Cloudflare, they have no incentive to stop them, after all, it generates more business for Cloudflare. This absolutely needs to be addre…

It is because many DDoS websites sitting behind Cloudflare are FBI run. See titaniumstresser[0] as an example. One of their sub-domain's IP address is allocated to the FBI[1]. Seems like the longest lasting sites peddling stolen info, child pornography, or malicious services are all run by feds. Hostname: direct.titaniumstresser.net IP Address: 153.31.25.12 Organization: FBI Criminal Justice Information Systems [0] h…