Live data from Hacker News

Why is Cloudflare protecting the DDoS'er (beamed.st) attacking Ubuntu servers?

infosec.exchange

41–46 of 46 posts

Re: Why is Cloudflare protecting the DDoS'er (beamed.st) attacking Ubuntu servers?

#41

I recall this post[0] from cloudflare's CEO about when they terminated daily stormer back in 2017, and particularly this quote: > Like a lot of people, we’ve felt angry at these hateful people for a long time but we have followed the law and remained content neutral as a network. This is overall a very reasonable take and one I support from a player the size of Cloudflare: They should aim to remain as neutral as poss…

Cloudflare isn't an impartial, neutral network. People need to stop perpetuating this fig leaf. To the outside world, Cloudflare acts as a host. Their servers serve the content fo whatever site is in their "network". It doesn't matter that some of those sites are being partially pulled from other backend servers that are outside their network again. Cloudflare is their service provider and they are their customer (fr…

and that's been publicly posted since 2019, on their blog 2019-08-05

Re: Why is Cloudflare protecting the DDoS'er (beamed.st) attacking Ubuntu servers?

#42
The root issue here is that your government does not consider translational cyberterrorism against civilians to be worthy of national security protection or retaliation.

(But if you are in the US, your government considers foreign human laborers doing useful work as "invaders".)

Re: Why is Cloudflare protecting the DDoS'er (beamed.st) attacking Ubuntu servers?

#43
post #21

How do they know that behind the scenes Cloudflare has not handed over whatever IP and financial information they have on the attackers to the feds? AFAIK such things would not be disclosed until the attackers are locked up and the case is closed assuming such details are ever disclosed at all.

Because law enforcement is vey bad at crossing national borders, when the victim is a mere peasant.

Re: Why is Cloudflare protecting the DDoS'er (beamed.st) attacking Ubuntu servers?

#44
post #42

The root issue here is that your government does not consider translational cyberterrorism against civilians to be worthy of national security protection or retaliation. (But if you are in the US, your government considers foreign human laborers doing useful work as "invaders".)

Let's have citizens worry about their labor laws.

Re: Why is Cloudflare protecting the DDoS'er (beamed.st) attacking Ubuntu servers?

#45

This is the dumbest post I’ve read. The attackers have a site seemingly hosted by/orange clouded by Cloudflare. They aren’t providing botnet or DDOS capabilities. Cloudflare tries to act as a third party that follows the law when the law gets involved. They don’t want to actively police the internet in the same way they don’t actively abolish piracy (see Anna’s Archive). There are exceptions to this of course, but on…

It's not "police the internet"

It's policing their own customers attacking their own other customers in a way that opens themselves up to racketeering charges.

Re: Why is Cloudflare protecting the DDoS'er (beamed.st) attacking Ubuntu servers?

#46

I recall this post[0] from cloudflare's CEO about when they terminated daily stormer back in 2017, and particularly this quote: > Like a lot of people, we’ve felt angry at these hateful people for a long time but we have followed the law and remained content neutral as a network. This is overall a very reasonable take and one I support from a player the size of Cloudflare: They should aim to remain as neutral as poss…

Cloudflare isn't an impartial, neutral network. People need to stop perpetuating this fig leaf. To the outside world, Cloudflare acts as a host. Their servers serve the content fo whatever site is in their "network". It doesn't matter that some of those sites are being partially pulled from other backend servers that are outside their network again. Cloudflare is their service provider and they are their customer (fr…

If they're providing content-neutral infrastructure I don't see why it matters whether that infrastructure technically counts as a network or not...
Post reply on HN