7 ms·

Does Cloudflare still host (edit: proxy) the companies that do DDoS attacks thus serving to justify the use of Cloudflare services?

jgrahamc 10y ago
We don't do hosting.
- bhouston 10y ago
  Quoting Brian Krebs: > These two services, like most booters, are hidden behind CloudFlare, a content distribution service that lets sites obscure their true Internet address. In case anyone cares, Lizardstresser’s real Internet address currently is 217.71.50.57, at a hosting facility in Bosnia. https://krebsonsecurity.com/2014/12/lizard-kids-a-long-trail-of-fail/ https://krebsonsecurity.com/2014/12/lizard-kids-a-long-trail...
  - aurbano 10y ago
    So they don't do hosting... What you've quoted just explains how they act as a layer in front of the actual server
    - bhouston 10y ago
      Host/proxy - a non-relevant detail. I misspoke. Either way, Cloudflare appears to both help booters and then also sells services to protect you from booters.
      - jgrahamc 10y ago
        Cloudflare's CEO spoke about this here: https://www.youtube.com/watch?v=SWFX-zEYwN0 https://www.youtube.com/watch?v=SWFX-zEYwN0
        e40 10y ago
        An almost hour long talk. TL;DR?
        majke 10y ago
        (I work at CF) I usually agree that spending 1h on a talk may be much. But I found this one to be really good. Matthew is both entertaining, and revealing some things that weren't public before. I'd say the 1h is worth it.
        cryptarch 10y ago
        I think the point of a TL;DR is to allow those short in time to still take some points away, or to give an overview and entice to consume the entire thing. I'd say "Cloudflare recommends Cloudflare" is pretty uninformative while a TL;DR isn't.
        astrodust 10y ago
        Sometimes there isn't a TL;DR. Like explaining cancer or quantum physics in 30 seconds misses most of the important details.
        cryptarch 10y ago
        Sure, but GP seemed to focus on "I know best how to spend your time", whether intended or not. Irksome.
        hollander 10y ago
        The talk is about how CF protects free speech by allowing anyone on their network, good or bad. Only a US court order can force them to not deliver content for a specific website. Examples are given how Amazon removed Wikileaks from their servers without court order, how another CDN removed content because they had other clients that didn't like that content etc. I cannot judge how honest it all is, but I'm impressed and do believe their intent. One of the scary things is what happens if Google, Microsoft or Amazon decides to buy them. Or some shady Russian or Chinese investor...
      - Dylan16807 10y ago
        The tire store both sells you new tires, and sells tires to the guy that slashed them. Cloudflare thinks that everyone should be immune to DDoS, both good people and bad people. I agree with that sentiment. They're not helping the booters do booting activities.

jgrahamc 10y ago

We don't do hosting.

bhouston 10y ago
Quoting Brian Krebs: > These two services, like most booters, are hidden behind CloudFlare, a content distribution service that lets sites obscure their true Internet address. In case anyone cares, Lizardstresser’s real Internet address currently is 217.71.50.57, at a hosting facility in Bosnia. https://krebsonsecurity.com/2014/12/lizard-kids-a-long-trail-of-fail/ https://krebsonsecurity.com/2014/12/lizard-kids-a-long-trail...
- aurbano 10y ago
  So they don't do hosting... What you've quoted just explains how they act as a layer in front of the actual server
  - bhouston 10y ago
    Host/proxy - a non-relevant detail. I misspoke. Either way, Cloudflare appears to both help booters and then also sells services to protect you from booters.
    - jgrahamc 10y ago
      Cloudflare's CEO spoke about this here: https://www.youtube.com/watch?v=SWFX-zEYwN0 https://www.youtube.com/watch?v=SWFX-zEYwN0
      - e40 10y ago
        An almost hour long talk. TL;DR?
        majke 10y ago
        (I work at CF) I usually agree that spending 1h on a talk may be much. But I found this one to be really good. Matthew is both entertaining, and revealing some things that weren't public before. I'd say the 1h is worth it.
        cryptarch 10y ago
        I think the point of a TL;DR is to allow those short in time to still take some points away, or to give an overview and entice to consume the entire thing. I'd say "Cloudflare recommends Cloudflare" is pretty uninformative while a TL;DR isn't.
        astrodust 10y ago
        Sometimes there isn't a TL;DR. Like explaining cancer or quantum physics in 30 seconds misses most of the important details.
        cryptarch 10y ago
        Sure, but GP seemed to focus on "I know best how to spend your time", whether intended or not. Irksome.
        hollander 10y ago
        The talk is about how CF protects free speech by allowing anyone on their network, good or bad. Only a US court order can force them to not deliver content for a specific website. Examples are given how Amazon removed Wikileaks from their servers without court order, how another CDN removed content because they had other clients that didn't like that content etc. I cannot judge how honest it all is, but I'm impressed and do believe their intent. One of the scary things is what happens if Google, Microsoft or Amazon decides to buy them. Or some shady Russian or Chinese investor...
    - Dylan16807 10y ago
      The tire store both sells you new tires, and sells tires to the guy that slashed them. Cloudflare thinks that everyone should be immune to DDoS, both good people and bad people. I agree with that sentiment. They're not helping the booters do booting activities.