Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Cloudflare Warp

1.1.1.1

Post reply on HN
Print view View original

71–80 of 196 posts

Re: Cloudflare Warp

#71

Post by maxboone »

daqnal wrote: post #64

Can anyone explain how Cloudflare got the 1.1.1.1 domain? I know they are an influential company that controls a large portion of the internet, but I'm still confused. Is it an IP or a name that gets matched to an IP?

It's an IP, just like 1.0.0.1 (1.1): https://blog.cloudflare.com/announcing-1111/

https://1.1/

"APNIC's research group held the IP addresses 1.1.1.1 and 1.0.0.1. While the addresses were valid, so many people had entered them into various random systems that they were continuously overwhelmed by a flood of garbage traffic. APNIC wanted to study this garbage traffic but any time they'd tried to announce the IPs, the flood would overwhelm any conventional network."

Re: Cloudflare Warp

#72

Post by password4321 »

avg_dev wrote: post #65
rjh29 wrote: post #61

Earlier quoted context omitted.

They know what IPs you are connecting to and when, which is valuable. If Cloudflare serves the site you are connecting to (which is increasingly more common) they have access to all of the data you are transmitting.

Somehow I thought they meant more. I’m sure my ISP is after all of my data but I’d rather them than CF. Upon rereading their claim I suspect it is just about IPs and hostnames. I can live with that. Also my browser uses DoH.

Yes, even the router given by my ISP offers Parental Controls with keyword matching against host name, thanks to SNI.

https://en.wikipedia.org/wiki/Server_Name_Indication

> The desired hostname is not encrypted in the original SNI extension, so an eavesdropper can see which site is being requested.

Re: Cloudflare Warp

#74

Post by avg_dev »

marginalia_nu wrote: post #24

Kinda uneasy about how Cloudflare is positioning themselves to have insight into a huge chunk of the Internet's traffic (very much like Google has). Even though there's no visible abuse right now, you know, Google's motto also used to be "don't be evil".

It’s not new either. https://news.ycombinator.com/item?id=21169798

We used it at a job I had and it made sense for business continuity reasons. But it is centralizing the internet and they are the gatekeepers. Not a good thing

Re: Cloudflare Warp

#75

Post by eis »

Warning: Warp exposes your IP to any site that is on CloudFlare. Do not mistake it for a general VPN. It does not protect you from trackers.

This has a surely intentional side effect of incentivizing sites that want to see the real client IP to be behind CloudFlare as well.

Source: https://developers.cloudflare.com/warp-client/known-issues-a...

Re: Cloudflare Warp

#76

Post by joshmanders »

noncoml wrote: post #60
sejje wrote: post #29

> Your Internet service provider can see every site and app you use—even if they’re encrypted. Some providers even sell this data, or use it to target you with ads. > We believe privacy is a right. We won't sell your data, ever. "We, the people who make up this company now, but not in the future, PROMISE." I notice they didn't say "we don't keep the data." According to the comments, this is just wireguard. I deployed…

Yup. A bit less catchy than “Don’t be evil” but it’s the same. Cloudflare is what Google was 20 years ago. The cycle can only break by decentralized protocols.

> The cycle can only break by decentralized protocols.

I disagree. The cycle can break by breaking up the monopolies so that one company doesn't control everything, and allow free market to expand.

Competition keeps people from being evil. Evil only happens when there's no reason for them to NOT do evil things.

Google was fine until they became the top dog and nobody could even compete.

Re: Cloudflare Warp

#77

Post by robertlagrant »

noncoml wrote: post #60
sejje wrote: post #29

> Your Internet service provider can see every site and app you use—even if they’re encrypted. Some providers even sell this data, or use it to target you with ads. > We believe privacy is a right. We won't sell your data, ever. "We, the people who make up this company now, but not in the future, PROMISE." I notice they didn't say "we don't keep the data." According to the comments, this is just wireguard. I deployed…

Yup. A bit less catchy than “Don’t be evil” but it’s the same. Cloudflare is what Google was 20 years ago. The cycle can only break by decentralized protocols.

This is all running using decentralised protocols.

Re: Cloudflare Warp

#78

Post by pfortuny »

robertlagrant wrote: post #77
noncoml wrote: post #60

Earlier quoted context omitted.

Yup. A bit less catchy than “Don’t be evil” but it’s the same. Cloudflare is what Google was 20 years ago. The cycle can only break by decentralized protocols.

This is all running using decentralised protocols.

I guess he forgot “secure”, which neither TCP/IP DNS… are.

Re: Cloudflare Warp

#79

Post by birdyrooster »

daqnal wrote: post #64

Can anyone explain how Cloudflare got the 1.1.1.1 domain? I know they are an influential company that controls a large portion of the internet, but I'm still confused. Is it an IP or a name that gets matched to an IP?

So long as the ip or host name is in the TLS certificate CN or SAN, it doesn’t matter.

Re: Cloudflare Warp

#80

Post by dpq »

noncoml wrote: post #60
sejje wrote: post #29

> Your Internet service provider can see every site and app you use—even if they’re encrypted. Some providers even sell this data, or use it to target you with ads. > We believe privacy is a right. We won't sell your data, ever. "We, the people who make up this company now, but not in the future, PROMISE." I notice they didn't say "we don't keep the data." According to the comments, this is just wireguard. I deployed…

Yup. A bit less catchy than “Don’t be evil” but it’s the same. Cloudflare is what Google was 20 years ago. The cycle can only break by decentralized protocols.

Which isn't ever going to happen as the benefits of centralization are too great, as it has been empirically observed time and time again.
Post reply on HN