3 ms·

My question is when does cloudflare starts to inject ads into my content? Is it “shots fired” situation? Because you know bullies and other bad people start t

by ozim 2y ago

My question is when does cloudflare starts to inject ads into my content? Is it “shots fired” situation? Because you know bullies and other bad people start testing ground to see what they can get away with. That is why you slap them hard and quick on the first attempt right away so they see that they cannot fool around. So I am asking can it be we have to say - well yeah technically they are right - but stop right there doing that and never do it again! They could make terms that they don’t serve vulnerable things from their cache and it is up for the customer to update or fix it - but they shouldn’t overwrite stuff, period.

thenewnewguy 2y ago
Cloudflare's primary raison d'être is messing with the response they serve to users - to perform caching, to inject CAPTCHAs when they detect a DDoS attack, etc. If you don't trust Cloudflare to not abuse this to inject ads, stop using Cloudflare.
- ozim 2y ago
  They can mess with response to make redirects/checks before my content is served, but my content is mine they should only cache it and that is it. If they serve ads on their captcha or some redirect I'd say well it is not nice - but for me fundamental difference is messing with my content even in a good faith - send me a notification an email or stop serving my content if it is active malware but don't change it.
reissbaker 2y ago
Who is the "we" here? If you're a Cloudflare customer, you're probably glad to have Cloudflare automatically defend your website against supply-chain attacks like this: after all, security is one of their selling points. when does cloudflare starts to inject ads into my content You content, as in, you the developer who is making a website, and has set up Cloudflare in front of your website? Presumably they wouldn't inject ads into your website, or else you'd stop using Cloudflare: just change the nameservers in DNS to point to someone else.
- wakawaka28 2y ago
  There are problems with Cloudflare beyond just the potential for ads. They can snoop a LOT on the site traffic of their customers.
  - reissbaker 2y ago
    True of pretty much any CDN, though — once you let them generate certs for you, or give them your certs, they can see your traffic.
oliwarner 2y ago
If you own a website and you really think this is a slippery slope, that it crosses some line in your sandpit, you can stop using Cloudflare. But worrying about ad injection off the back of a legit good-guy action seems like an overreaction. They've always been able to alter the websites they serve. They do frequently to optimise and this seems like a very benign extension of that. Don't get wet before it rains.

by ozim 2y ago

thenewnewguy 2y ago

Cloudflare's primary raison d'être is messing with the response they serve to users - to perform caching, to inject CAPTCHAs when they detect a DDoS attack, etc. If you don't trust Cloudflare to not abuse this to inject ads, stop using Cloudflare.

ozim 2y ago
They can mess with response to make redirects/checks before my content is served, but my content is mine they should only cache it and that is it. If they serve ads on their captcha or some redirect I'd say well it is not nice - but for me fundamental difference is messing with my content even in a good faith - send me a notification an email or stop serving my content if it is active malware but don't change it.

reissbaker 2y ago

Who is the "we" here? If you're a Cloudflare customer, you're probably glad to have Cloudflare automatically defend your website against supply-chain attacks like this: after all, security is one of their selling points. when does cloudflare starts to inject ads into my content You content, as in, you the developer who is making a website, and has set up Cloudflare in front of your website? Presumably they wouldn't inject ads into your website, or else you'd stop using Cloudflare: just change the nameservers in DNS to point to someone else.

wakawaka28 2y ago
There are problems with Cloudflare beyond just the potential for ads. They can snoop a LOT on the site traffic of their customers.
- reissbaker 2y ago
  True of pretty much any CDN, though — once you let them generate certs for you, or give them your certs, they can see your traffic.

oliwarner 2y ago

If you own a website and you really think this is a slippery slope, that it crosses some line in your sandpit, you can stop using Cloudflare. But worrying about ad injection off the back of a legit good-guy action seems like an overreaction. They've always been able to alter the websites they serve. They do frequently to optimise and this seems like a very benign extension of that. Don't get wet before it rains.