Live data from Hacker News

Cloudflare Warp

1.1.1.1

161–170 of 196 posts

Re: Cloudflare Warp

#161
post #94

Kinda uneasy about how Cloudflare is positioning themselves to have insight into a huge chunk of the Internet's traffic (very much like Google has). Even though there's no visible abuse right now, you know, Google's motto also used to be "don't be evil".

Cloudflare recently hijacked the domain of one of their customers (RaidForums), then cloned the RaidForums login page, and ran a phishing campaign at the behest of the FBI for two weeks. I understand that you have to comply with law enforcement, but actively attacking the users of one of your customer's websites is super rude.

Please, where can I read about that? I need it to back my point why putting too much trust into CF is not good.

Re: Cloudflare Warp

#162

I have a fun story about using Warp while on vacation (Bahamas). I was finding that my net traffic felt like it was slower/more variable than I'd expect with uneven speedups and slowdowns. On a whim I installed and turned on Warp and suddenly my internet speed was both palpably faster and more consistent in its speed. I think it possible that one of the side effects of encrypting your traffic may be that it evades IS…

Back when I used Visible (North American MVNO) for my phone, you could get substantially faster speeds and less latency by enabling Warp because it bypassed their traffic shaping and limited egress points, for example if you viewed Netflix without Warp you were throttled to 480p but with Warp you could easily do 1080p.

I had a similar experience. Higher resolution netflix on my T-Mobile prepaid data line with warp installed.

Additionally I did the bog standard TTL modification, installed warp and probably one or two other things I can't recall. For whatever reason those changes allowed me to tether unlimited 4G speed data rather than being throttled down to 3G after a few gigs. This was true for T-Mobile, US Mobile's "verizon" tower mvno service as well as US Mobile's "t-mobile" tower mvno service. Can't say I was upset about it.

Re: Cloudflare Warp

#163
So, are they already blocking access to the parts of the Internet that they consider to be too dangerous for people to be allowed to visit? Or how long would it be till they start to?

Re: Cloudflare Warp

#164
post #135

We use Cloudflare Warp at work. Honestly—and I say this as a Cloudflare fan in general—it doesn’t work well for me. I regularly have connection issues with it enabled. Video calls sometimes cut out for a couple seconds, and Tuple (which I use a lot) really struggles with it. It’s possible it’s my internet connection or something unrelated, but I don’t have any of these issues when Warp is disabled. YMMV and all that,…

Warp is actually two products: their consumer VPN product, which is typically what's referred to as Warp, and their Zero Trust, which uses the VPN hooks to layer on Enterprise management features. Zero Trust allows companies to route particular IP ranges through various separate connections, unlike Warp which only routes through Cloudflare. It sounds like your company is routing more than internal IP traffic through…

> In my case, despite living near Detroit and CF's datacenter there, I'm routed through Chicago, adding 40ms to any roundtrip time.

This shouldn’t be the case: want to email me (silverlock at cloudflare) the output of https://www.cloudflare.com/cdn-cgi/trace and your company’s accountId?

This is stuff we want to address — whether directly in our control and/or where we need to ensure others are peering with us locally to help their users.

Re: Cloudflare Warp

#165

Earlier quoted context omitted.

Is their DDOS service censored?

There was a recent controversy where an activist named "Keffals" posted something violent and threatening on KiwiFarms about herself, screenshotted and deleted it (it's not clear to me whether she deleted the post or if it was removed, however I know her account was banned), and then used the screenshot to lobby CloudFlare to take down the site. After this became known CloudFlare has held steady in their commitment t…

None of that sounds like censorship though?

Re: Cloudflare Warp

#166

Earlier quoted context omitted.

Is their DDOS service censored?

There was a recent controversy where an activist named "Keffals" posted something violent and threatening on KiwiFarms about herself, screenshotted and deleted it (it's not clear to me whether she deleted the post or if it was removed, however I know her account was banned), and then used the screenshot to lobby CloudFlare to take down the site. After this became known CloudFlare has held steady in their commitment t…

>There was a recent controversy where an activist named "Keffals" posted something violent and threatening on KiwiFarms about herself, screenshotted and deleted it

There is not a citation big enough for this holy shit

>That said it's not an especially nice site

It's a site that encourages people to literally commit suicide. But you seem to have an agenda in your comment

Re: Cloudflare Warp

#168

Earlier quoted context omitted.

This is a pretty wild mischaracterization. "I can't believe they let the FBI tell them what to do" is an incredibly bad take.

It is a problem when you centralize the Internet like this though. The more of the Internet you've got running through your service, the more appealing a target you are for not only domestic government pressure, but attempts from foreign state actors to compromise the service (through not only hacking, but espionage and blackmail as well). It's not great.

I'm no fan of centralization but if you think that it makes any difference to the FBI, you're mistaken. The tiniest providers are obligated to do the exact same thing. This has nothing to do with domestic pressure.

Re: Cloudflare Warp

#170

I have a fun story about using Warp while on vacation (Bahamas). I was finding that my net traffic felt like it was slower/more variable than I'd expect with uneven speedups and slowdowns. On a whim I installed and turned on Warp and suddenly my internet speed was both palpably faster and more consistent in its speed. I think it possible that one of the side effects of encrypting your traffic may be that it evades IS…

Unfortunately this is my experience at home in Germany.

I don't know if Vodafone shapes their traffic but the the effect is the same when their network is having trouble for various reasons.

Post reply on HN