4 ms·

As far as the actual analytics product, is it provided via servers with specific domains? What would one look for if one wanted to block them?

manigandham 6y ago
The main product is powered by server logs from Cloudflare. You can't block them for any site using Cloudflare as a CDN/reverse proxy.
- uniqueid 6y ago
  Ah good. So all I need to do is block Cloudflare /s Sigh.
  - manigandham 6y ago
    This is no different than the server logs that any web host has. You can't block it unless you never make the request in the first place, but you can use a VPN and remove browser headers to limit your data.
    - uniqueid 6y ago
      I caught that, but I still appreciate your taking the time to explain. The point I was actually at with that comment was about the ubiquity of a handful of companies on the internet. That probably sounds like I'm need of an explanation about Cloudflare's reputation and what a ddos is. Please don't :)
    - Reelin 6y ago
      > This is no different than the server logs that any web host has. Ehh it's a bit different. I don't particularly care what (for example) some small time self hosted blog does with my IP address internally so long as it doesn't leak that data to third parties. In isolation, my IP address doesn't tell them anything about my _other_ traffic. Cloudflare, on the other hand, hosts a significant number of websites and cross-origin assets. Their logs therefore have the potential to contain a great deal of metadata about my browsing history. Of course they'd obviously have this information either way, so I don't actually have any objection to them processing their logs in this manner. (I do have serious concerns about the degree of centralization that has occurred, but that's a separate topic.)
      - yencabulator 6y ago
        > Their logs therefore have the potential to contain a great deal of metadata about my browsing history. Of course they'd obviously have this information either way, so I don't actually have any objection to them processing their logs in this manner. Well, it's a bit better than that -- the blog post promises their analytics explicitly does not try to track you, just your visit. That is, they don't cross-correlate across visits.

manigandham 6y ago

The main product is powered by server logs from Cloudflare. You can't block them for any site using Cloudflare as a CDN/reverse proxy.

uniqueid 6y ago
Ah good. So all I need to do is block Cloudflare /s Sigh.
- manigandham 6y ago
  This is no different than the server logs that any web host has. You can't block it unless you never make the request in the first place, but you can use a VPN and remove browser headers to limit your data.
  - uniqueid 6y ago
    I caught that, but I still appreciate your taking the time to explain. The point I was actually at with that comment was about the ubiquity of a handful of companies on the internet. That probably sounds like I'm need of an explanation about Cloudflare's reputation and what a ddos is. Please don't :)
  - Reelin 6y ago
    > This is no different than the server logs that any web host has. Ehh it's a bit different. I don't particularly care what (for example) some small time self hosted blog does with my IP address internally so long as it doesn't leak that data to third parties. In isolation, my IP address doesn't tell them anything about my _other_ traffic. Cloudflare, on the other hand, hosts a significant number of websites and cross-origin assets. Their logs therefore have the potential to contain a great deal of metadata about my browsing history. Of course they'd obviously have this information either way, so I don't actually have any objection to them processing their logs in this manner. (I do have serious concerns about the degree of centralization that has occurred, but that's a separate topic.)
    - yencabulator 6y ago
      > Their logs therefore have the potential to contain a great deal of metadata about my browsing history. Of course they'd obviously have this information either way, so I don't actually have any objection to them processing their logs in this manner. Well, it's a bit better than that -- the blog post promises their analytics explicitly does not try to track you, just your visit. That is, they don't cross-correlate across visits.