4 ms·

> according to CF, it's not an issue...?! According to CloudFlare, they are are a reverse proxy, and they are not responsible for anything. This has been their

by yoo1I 10y ago

> according to CF, it's not an issue...?! According to CloudFlare, they are are a reverse proxy, and they are not responsible for anything. This has been their response to every issue that I've tried to bring up with them over any channel, including here on HN. CloudFlare just doesn't care.

cortesoft 10y ago
But I read on their blog that they are saving the internet, like, everyday and twice on Sundays!
xxdesmus 10y ago
not at all accurate. If you find something abusive or malicious report it: cloudflare.com/abuse -- every report filed there is reviewed by a human.
- adanto6840 10y ago
  For what it's worth, in the support ticket exchange I did indeed offer to submit details of the attack vector along with proof that it's currently being actively exploited, for financial gain & at the direct expense of your customers. I was basically told "you will be wasting your time"...
  - jc4p 10y ago
    To be fair, he did say "is reviewed by a human", not "we care" or "we will act on it"
- jwise0 10y ago
  It seems that this is getting downvoted, and I want to explain why I agree with the downvotes: The policy on that web page has two egregious issues. 1) It does not have any provisions for SPAM. I regularly get e-mail SPAM that has CloudFlare-protected links. That abuse page does not even apply. Effectively, CloudFlare offers spammers a 'pink contract'. 2) CloudFlare has a reputation for ignoring abuse, and that page effectively says nothing about whether abuse will be stopped; that page only offers to transmit the personal information of someone who reports abuse off to an abuser. This is not a theoretical; this has happened in the past, and the personal information of someone who reported a site that contained child pornography was then posted all over the net for its users to begin harassment with. So if you find something abusive or malicious, your best bet really is not to report it. CloudFlare won't act, other than to put you at risk.
- yoo1I 10y ago
  I don't care whether it's reviewed by a human or not, the fact remains that CloudFlare does not act on abuse reports because they claim "reverse proxy = not responsible" in every abuse report I've sent them even on matters that do not pertain to their reverse proxy functionality at all. They just don't want to be responsible, and unlike any other large network service provider that I sent abuse reports to, they just try and deflect and keep servicing spamming and phishing operations instead of booting them from their systems.

by yoo1I 10y ago

cortesoft 10y ago

But I read on their blog that they are saving the internet, like, everyday and twice on Sundays!

xxdesmus 10y ago

not at all accurate. If you find something abusive or malicious report it: cloudflare.com/abuse -- every report filed there is reviewed by a human.

adanto6840 10y ago
For what it's worth, in the support ticket exchange I did indeed offer to submit details of the attack vector along with proof that it's currently being actively exploited, for financial gain & at the direct expense of your customers. I was basically told "you will be wasting your time"...
- jc4p 10y ago
  To be fair, he did say "is reviewed by a human", not "we care" or "we will act on it"
jwise0 10y ago
It seems that this is getting downvoted, and I want to explain why I agree with the downvotes: The policy on that web page has two egregious issues. 1) It does not have any provisions for SPAM. I regularly get e-mail SPAM that has CloudFlare-protected links. That abuse page does not even apply. Effectively, CloudFlare offers spammers a 'pink contract'. 2) CloudFlare has a reputation for ignoring abuse, and that page effectively says nothing about whether abuse will be stopped; that page only offers to transmit the personal information of someone who reports abuse off to an abuser. This is not a theoretical; this has happened in the past, and the personal information of someone who reported a site that contained child pornography was then posted all over the net for its users to begin harassment with. So if you find something abusive or malicious, your best bet really is not to report it. CloudFlare won't act, other than to put you at risk.
yoo1I 10y ago
I don't care whether it's reviewed by a human or not, the fact remains that CloudFlare does not act on abuse reports because they claim "reverse proxy = not responsible" in every abuse report I've sent them even on matters that do not pertain to their reverse proxy functionality at all. They just don't want to be responsible, and unlike any other large network service provider that I sent abuse reports to, they just try and deflect and keep servicing spamming and phishing operations instead of booting them from their systems.