6 ms·
Tell HN: Cloudflare silently injects its analytics when you switch nameservers
A few hours ago I switched my nameservers to Cloudflare in order to enable R2 bucket serving through my own subdomain, and I found out that it silently had injected a JS analytics snippet in my HTML-only JS-free site textlog.cc — I had to go to the Analytics dashboard, Add the site to the analytics and then disable the snippet. I find this approach entirely invasive, you should opt-in to features like that not have to opt-out. Just a warning out there to folks who might not be aware of this.
- csomar 2mo agoTo add to your experience: It was also very hard, for me, to find the setting that disables this JavaScript.
- windexh8er 2mo agoIsn't this well known when using CF as a proxy? Not sure how they would provide traffic / DDoS telemetry otherwise.
- JoshTriplett 2mo agoThey're serving the HTML, they have every ability to track individual web requests without modifying the content they're serving.
- sscaryterry 2mo ago100% But this does not give you any useful personal data :)
- JoshTriplett 2mo agoOr data for the increasingly invasive Cloudflare captcha.
- windexh8er 2mo agoI understand how it technically could work. My response was more centric to the fact that CF has been doing this for a long time and you should probably know better when selecting a vendor / feature like this. Again, this isn't anything new.
- celsoazevedo 2mo agoYes, they add the js if "web analytics" is enabled. I believe I had to manually enable it on my old sites though. Maybe it's enabled by default when adding new domains?
- stagas 2mo agoNo, I hadn’t enabled for any site. I had to enable first to turn it off.
- nilram 2mo agoMaybe send it to them as a bug. Seems more like a mistake than malevolence.
- PlotCitizen 2mo agoThey have a blog post about it so they know what they're doing.
- purpleidea 2mo agoYikes! I see this too: <script type="module" src="https://static.cloudflareinsights.com/beacon.min.js/v4513226cdae34746b4dedf0b4dfa099e1781791509496 https://static.cloudflareinsights.com/beacon.min.js/v4513226..." integrity="sha512-ZE9pZaUXND66v380QUtch/5sE9tPFh2zg45pR2PB0CVkCtOREv2AJKkSidISWkysEuQ0EH8faUU5du78bx87UQ==" data-cf-beacon='{"version":"2024.11.0","token":"c0859b51a7804ab5a9cc8e9e2b2c4cde","r":1}' crossorigin="anonymous"></script>
- kevincox 2mo agoYup, I explicitly had all anaytics turned off. But had a few sites using Cloudflare for caching. Now I'm checking and seeing this on all of them. This is gross and unacceptable. "Caching" does not mean "modifying my site".
- zx8080 2mo agoMITM attack, that's what it is. Why is this not in the news? Ah, no one cares.
- reaperducer 2mo agoWhy is this not in the news? Good point. There should be a place where hackers can get this kind of news. Some kind of Hacker News place.
- zeafoamrun 2mo agoIt takes a lot of trust to let a CDN be able to terminate TLS traffic for you and this doesn't exactly give the warm fuzzies.
- ironmagma 2mo agoCloudflare is essentially MITM as a service. What else would someone expect?
- chrisweekly 2mo agoAdding a RUM beacon for observability / performance metrics capture, as an opt-out feature for free plans (opt-in for paid plans), is not exactly nefarious. Hopefully/presumably there was some communication before the change was rolled out.
- deleted 2mo ago[deleted]
- moktonar 2mo agoSurprise! The man in the middle man-in-the-middles! This is only the beginning, when you’ll get used to this they’ll do worse and worse, enshittification, remember?
- _def 2mo agoIf I wouldn't know it better I'd sometimes think some of the big tech shops are just fronts for centralizing the net.
- LoganDark 2mo agoCloudflare is doing this already. Once they had enough monopoly power, they started a program to block all bots that don't undergo invasive KYC procedures. Eventually, they might become a KYC broker for regular browser users too. The free internet is over.
- Bender 2mo agoI don't know what would give anyone that idea. [1] [1] - https://www.youtube.com/watch?v=a3Xxi0b9trY https://www.youtube.com/watch?v=a3Xxi0b9trY
- cryo32 2mo agoThat's exactly what they are. And they can fuck off.
- tdeck 2mo agoI'm curious which governments have spies within CloudFlare.
- ValentineC 2mo agoTook me a minute to realise this isn't 1.1.1.1 (which Cloudflare also runs), but their original website DNS hosting service.
- pudgywalsh 2mo agoYou left out the part about how you use them as a reverse proxy, which is decoupled from DNS. One is coincidental; the other required. If they can inject script, they can also snoop on all your cleartext traffic without you knowing....
- johntash 2mo agoIndeed. I have several domains using cf for dns only and they don't/can't inject anything into those sites.
- sebastiennight 2mo ago"can't" is incorrect. As your name server, they can decide to turn the reverse proxy/caching at any point in the future, write an obscure blog post about how this is the best solution for all (a post that gets 2 comments on HN due to other news that week), and you'd only find out about it 11 months later in a thread like this one.
- stagas 2mo agoOh gosh I didn’t enable anything like that also. I just wanted the nameservers in order to serve the bucket under my subdomain. What else is there I wonder?
- stagas 2mo agoOk to turn this off you go Domains → Overview → your.site → DNS → Records → then Edit each entry to DNS Only (gray cloud). MITM gone now (I hope).
- kazinator 2mo agoOK, how can Cloudfare edit your HTML without it passing through your server? If the browser connects directly to your web server, how can there be Cloudfare's analytics stuff? Check what IP address you are connecting to when you load textlog.cc. Is that an address that you control? If it's not an address that you control, where is it getting your page, and is that not called proxying?
- dchest 2mo agoIndeed, https://blog.cloudflare.com/the-rum-diaries-enabling-web-analytics-by-default/ https://blog.cloudflare.com/the-rum-diaries-enabling-web-ana...
- altairprime 2mo agoPerhaps it drowned in newslop when announced? The RUM Diaries: Enabling Web Analytics by Default (2 points, 11 months ago): https://news.ycombinator.com/item?id=45291323 https://news.ycombinator.com/item?id=45291323 (1 point, 11 months ago): https://news.ycombinator.com/item?id=45339321 https://news.ycombinator.com/item?id=45339321
- cromka 2mo agoI noticed that there's very little non-AI stuff of value that gets to the front page nowadays
- BorisMelnik 2mo agoyep, last website I did was JS free 100% except that pesky cloudflare script
- minraws 2mo agoIs there an opt-out mechanism at least? CF is burning goodwill in months it built over the last decade.
- deleted 2mo ago[deleted]
- yogorenapan 2mo agoNoticed this the other day as well. Sketchy as fuck. I didn't have analytics enabled. I had to go and enable to get access to the option to turn this off
- outlines 2mo agoAre you using CF as a proxy or only for DNS? I ask because I just went to check my domains on the dashboard (some purchased a few years ago, one purchased just a couple days ago), and none of them have Web Analytics enabled. I have all my domains set to DNS only, so no CF proxy. Wondering if that is why?
- stagas 2mo agoI just went and switched them to DNS only, they were on Proxy by default, that also should have been opt-in. Maybe I missed the option while switching the nameservers because I did it in a hurry but still.
- TiredOfLife 2mo ago> that also should have been opt-in. The proxy is like 99% of why people use Cloudflare
- stagas 2mo agoA simple screen when I did the switch that requires explicitly ‘Enable Proxy’ or ‘skip for now’ would have been enough. Also for ‘Enable Analytics’. None of these existed, or not very obvious otherwise I’d seen them.
- TiredOfLife 2mo agoIn the DNS screen there is literally a column "proxy status" with the only color besides black and white being the orange of proxy enabled
- cortesoft 2mo agoI agree it is a bit confusing, but it makes sense if you think about the expected default use case, which is enabling the cloudflare CDN for customers. They expect people to be using their CDN. I use them for my registrar, because they offer domains at cost and you can’t beat that. But yes, they make it an extra step to use them without using the CDN. Once you figure it out, it is fairly straightforward, though, and you can’t beat the price.
- Animats 2mo ago> injected a JS analytics snippet in my HTML-only JS-free site textlog.cc Cloudflare injected hostile code into a site they are not even hosting? If it's HTTPS, how do they even do that? Does it violate the "exceeds authorized access" provision in the Computer Fraud and Abuse Act?
- deleted 2mo ago[deleted]
- bawolff 2mo agoThe most likely answer is the person accidentally enabled the cloudflare reverse proxy without understanding what they were doing. It seems incredibly unlikely cloudflare does this when just DNS hosting, if for no other reason then that this would break so many things.
- stagas 2mo agoI can’t recall if there was a setting to enable reverse proxy, if there was it was On by default since I didn’t expect to have reverse proxy enabled as well. But you can also rp without injecting a script. That’s overdoing it.
- eaf7e281 2mo agoIf the cloud symbol is orange, it's enabled. I believe they'll even warn you if you disable it, a lot of people enable it unintentionally.
- dboreham 2mo agoI don't know what happened in this situation but beware that CF and similar providers are not true DNS hosting providers. They do DNS, but only so their CDN stuff works, and to lock their customers from using whatever DNS hosting they want. Various things that one might reasonably want to do with your DNS zone are not possible with their product. So use it only because you need to do so in conjunction with their core services.
- 2mo ago
- monitorion 2mo ago[flagged]
- okzgn 2mo agoAn alternative: <meta http-equiv="Content-Security-Policy" content="script-src 'self' https://only-scripts-allowed-from-here.com https://only-scripts-allowed-from-here.com"> This makes the client only load self-hosted scripts, or scripts only from the specified origins, among the other directives CSP allows (e.g. restricting styles, images, frames, etc.): https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CSP https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CSP
- 1vuio0pswjnm7 2mo agoIf Cloudflare (CF) has r/w access to the response body, which CF does have by default, then CF can easily modify or remove that <meta> tag. The risk is not abated The risk of third parties injecting scripts, etc., e.g., analytics, advertising, etc., into response bodies (web pages) is usually cited as a rationale for using HTTPS^1 CF somehow avoids the usual objections. CF is a MiTM but few people object 1. For example, a data collection, surveillance and advertising services company that operates a www search engine and releases a web browser may not want an ISP to inject scripts, etc., e.g., analytics, ads, etc., into web pages as it might compete with the company's business. As a defense against such ISPs and other third parties that are potential competitors for data collection/surveillance/advertising services, it might favor HTTPS sites in its www search engine results, promote HTTPS at conferences discussing its web browser, etc.
- okzgn 2mo agoThanks for the background context, very interesting and realistic. Yes, of course it also has read/write access, though I always make sure there’s no interference of that kind. It has only happened to me once, where a binary I hosted on Pages didn't work when downloaded with wget (though that happened several years ago).
- 1vuio0pswjnm7 2mo agoFWIW, I operate own DNS (including own custom root.zone) and I MiTM own TLS traffic with a localhost forward proxy. With this setup I get r/w access to response bodies, I add a CSP as an HTTP response header, and a long list of other traffic manipulation. There is no tracking, ads, telemetry, etc. Nothing leaves the computer unless I allow it. Operating DNS plus forward proxy gives me lots of control Letting Cloudflare (CF) operate DNS and direct traffic through its proxies gives CF control It's interesting to see how they use it under market pressures
- Symbiote 2mo agoIt's not necessary to use Cloudflare hosted DNS to use R2 with a custom subdomain. Make a CNAME record the same way you would for a CDN subdomain. (I am not yet running this in production, YMMV.)
- hackernud3s 2mo agoThen you don't get edge cache though, right? And maybe some other features?
- johneth 2mo agoThe benefit of not being MITM'd by Cloudflare is probably worth it in many cases.
- jjcm 2mo agoThank you for this. I indeed had it up on mine. Cloudflare has switched defaults a couple times now, which honestly is wild to me.
- p0w3n3d 2mo agoSpies. Spies everywhere
- deleted 2mo ago[deleted]
- kazinator 2mo agoIf you're only using Cloudfare for DNS, but HTTPS connections go directly to your server, how does it inject HTML? You must be allowing Cloudfare to terminate your HTTPS connections; i.e. using them for actual proxying.
- hackernud3s 2mo agoThe orange cloud icon in dns settings, in other words, but that's opt-out too. So yeah - double opt-out I guess.
- ____tom____ 2mo agoI have no idea what 'the orange cloud icon' means, as I'm not a CloudFlare used. But DNS/Name servers do not see HTML traffic, as the above poster mentioned, so it's not obvious how this change would matter. Is it that they are serving their HTML via CloudFlare, and cloudflare is making changing in its serving of their html?
- supermdguy 2mo agoCloudflare sets up a reverse proxy as part of their core offering, so by default they can MITM your proxy. The “orange cloud” by a DNS record means it points to their proxy instead of your server.
- vickychijwani 2mo agoWhat a shame. I wasn’t expecting these dark patterns from Cloudflare at all.
- hackernud3s 2mo agoThat's how you get DDOS protection / edge delivery, so it's not a dark pattern. I imagine it's the main reason why people would DNS through them in the first place.
- sparsesignal 2mo agoI noticed the same thing with email-decode.min.js on my site. It turns out it's the "Email Address Obfuscation" feature, which I didn't expect to be on by default.
- evalystai 2mo ago[flagged]
- userbinator 2mo agoThis reminds me of the old free hosts that would inject their own scripts/ads on pages hosted by them, but their implementation would do it only after detecting the closing HTML tag (either </body> or </html>, can't remember) and the various tricks to get around it, including omitting the tag (browsers don't care), rAnDoM case tags (some were hardcoding lower or upper and comparing case-sensitively), and messing with the content type and relying on the browser to detect correctly since it didn't inject into other types (not sure how the current browsers will handle that).
- Terr_ 2mo agoI'm getting flashbacks to Proxomitron, a localhost proxy in the HTTP days when it was also much harder/impossible to make browser plugins.
- sebastiennight 2mo agoA public service reminder to anyone setting up their domains that there are many alternatives to Cloudflare, like EG Bunny.net (I am not affiliated, just a happy customer) and that by using one of these other DNS providers, you - play your small part in keeping the Internet open - delay or avoid entirely the enshittification that is 100% foreseeable when buying the "free" services of a quasi-monopoly vendor. If you're not an enterprise customer, alternate providers will also give you every single feature you could ever need and more, and fewer surprises like the OP's.
- mbravorus 2mo agoif you aren't paying, you aren't buying
- deadbabe 2mo agoWhy do people care? This is hardly anything malicious.
- eXpl0it3r 2mo agoHardly anything malicious ... yet and even that's debatable. Yes, when you proxy anything through Cloudflare (CF) you give up on having your contents encrypted as CF terminates the TLS endpoints, but going from this to changing the content of the served site and injecting JavaScript is quite a big step and likely not what a lot of people would want nor expect. Your JavaScript-free site becomes a site that ships JavaScript without you knowing or having done anything. Additionally, this introduces additional tracking of users, which a lot of people don't want. And finally, there's the slippery slope. Today it's RUM, tomorrow it's ads or something else? Once CF starts modifying the user's content, what's stopping them from doing it more and more?
- deadbabe 2mo agoSlippery slope doesn’t apply here, because at the point the slope becomes too slippery, you can just get off and find a new solution. Maybe you don’t proxy at all. For now, a pure JavaScript free site and a JavaScript-free-except-a-bit-of-analytics does not make meaningful difference to visitors of the site. The benefits of proxying are more important.
- cryptonym 2mo agoCF tested the water with polyfill.io 2 years ago. Everyone liked them modifying user's content. We are now on the "more and more" side.
- Kim_Bruning 2mo agoSay I'm a vegetarian restaurant, and I contract out my delivery service. One day the delivery service starts adding free sausages to every delivery on an opt-out basis. By the time you realize, they'll already have delivered adulterated meals. You won't have a lot of customers left! People are often vegetarian for ethical reasons. In a similar way, many people have Ethical Opinions (tm) about Analytics as well. They don't like it when other people collect private information about themselves, and refuse to Do Unto Others. But even if you're fine with analytics in general: When intermediaries and other transitive dependencies (like software libraries) start injecting analytics on an opt-out basis, you simply can't control what's going on. And that's before we talk about the ethics and legality of third parties modifying content in-flight. In the EU, the law actually codifies the ethics at play here (GDPR). Several people point out that cloudflare disables this 'feature' for the EU. This makes a lot of sense, because it would have been a huge mess for everyone impacted to have to go to their customers with a "sorry, we leaked your PII, here's how we'll make you whole"; as well as possibly lawsuits against cloudflare to recover those damages upstream.
- sitzkrieg 2mo agocloudflare is malware, what did you expect?
- fragmede 2mo agoNo it's not. You don't have to like them, but malware is "any program or file built to damage, disrupt, or secretly gain access to a computer, phone, or network". Cloudflare is many things, some good, some bad, but they don't secretly gain access to your system, you have to choose to install it, so it's not malware.
- PlotCitizen 2mo agoYou choose to install it on your website if you own a website, but if you're surfing the world wide web, then a lot of the places you visit are increasingly being gatekept/hidden behind Cloudflare pages meant to "challenge" you if you take anti-fingerprinting measures. Presumably these include any measures which would counter their operating model of tracking users on the web, under the excuse of stopping bots.
- hinata08 2mo ago>they don't secretly gain access to your system They are only "enabling Web Analytics by default" "by providing a powerful, in-depth monitoring solution that helps you debug and optimize applications" when users do not come from the EU Cloudflare is doing a great job most of the time, but I feel like this feature was speed run through approvals and could use more discussions
- jesterson 2mo agoWhat else would you expect from Cloudflare? It this point in time it is somewhere between GoDaddy and RyanAir in dark pattern usage
- leinwand 2mo agoYou are right that Cloudflare enabled these analytics by default for our free plans in Septemeber of last year. We built Real User Measurement (RUM) into our free plans because it gives site owners actionable performance data they would not otherwise have. It is on by default for free sites fr the reasons we wrote about in the blog post below. It is easy to disable if you don't want it on. All of our paid plans are opt-in only. This also gives free plans access to our Observatory product at no cost. Observatory is a performance-monitoring tool inside the Cloudflare dashboard that combines real user data with simulated lab tests to help you measure and improve your website speed. Blog post: https://blog.cloudflare.com/the-rum-diaries-enabling-web-analytics-by-default/ https://blog.cloudflare.com/the-rum-diaries-enabling-web-ana...
- dchest 2mo ago> measure and improve your website speed inserts 31KB JavaScript into tiny HTML pages.
- tredre3 2mo agoIf RUM is such a good thing, why is it opt-in for paid users? Why push this gracious gift only onto free users?
- tacitusarc 2mo agoI have broadly good feelings about Cloudflare but this warrants a response.
- hecturchi 2mo agoBecause if something is free, you are the product.
- anon7000 2mo agoBecause paying business customers are a lot more sensitive to this type of change rolling out. They are particular about how they want their shit hosted. Which is totally fair. People on the free tier probably a lot more interested in free benefits and care less about a little change in their hosting.
- denkmoon 2mo agoMaybe don't use CF if you don't want someone fucking with what you're serving. It's their entire raison detre.
- the4anoni 2mo agoThank you so much for info about this. Does anyone has list of known "traps" like that on Cloudflare? I only want to use them for proxying my IPv6 website, SSL, and nothing else.
- PlotCitizen 2mo agoThere are countless objections to many of the things the Cloudflare is doing. If you only need it for a small number of things perhaps it may be worthwhile to look if at whether there are alternatives to CF for those use cases.
- hinata08 2mo agoCloudflare used to effectively allow you to block users coming from Tor or proxies, forcing them to chose between not visiting your site or disabling their privacy features. (when Akamai was able to still allow legitimate users) They do a much better job these days, at least
- jwr 2mo agoHere we go. First, get everyone on the internet to use a free service (nameservers and CDN caching, which BTW is mostly unnecessary for pretty much everyone out there). Then, inject analytics, to "give site owners actionable performance data they would not otherwise have". Then, inject ads. In the meantime, also implement "bot protection" and get everyone on the internet to outsource the decision on who can access their website. With no appeal. I'm increasingly worried about Cloudflare.
- stragies 2mo agoIs there an entry in filter-lists used by ublock and other client-side content blockers for `https://static.cloudflareinsights.com/beacon.min.js/ https://static.cloudflareinsights.com/beacon.min.js/`?
- neop1x 2mo agoYou are using MITM proxy as a service. In addition to analyzing all traffic and blocking legitimate users with captchas, they can inject stuff in there, too.
- anon5739483 2mo agoUnsuspecting reader: if you think this comment is interesting please search "deCloudflare" and "crimeflare" on the Internet. The repo is abandoned but it's still regularly taken down whenever it's uploaded. Cloudflare is literally the GFW of the world, is involved in a lot of suspicious activities and a huge danger to future of the open web. The company started as an intelligence honeypot service originally got funded by DHS in '08. You can DYOR on how things moved on from there. This one hasn't been taken out yet: https://gitlab.lain.la/dCF/deCloudflare/-/blob/master/readme/en.md https://gitlab.lain.la/dCF/deCloudflare/-/blob/master/readme... The taken down versions of the repo usually link here: https://en.wikipedia.org/wiki/Wikipedia:Uphill_battles https://en.wikipedia.org/wiki/Wikipedia:Uphill_battles
- CommanderData 2mo agoPersonally not sure what the concern is unless you only use Cloudflare for DNS only. They see everything that passes through their proxy, and if they wanted to perform analysis on a site they're interested in I really wouldn't be surprised if there's a clause in the ToS that allows them to do it.
- endre 2mo agoyou wanted the cloudflare, you got the cloudflare.
- deleted 2mo ago[deleted]
- ozereray1 2mo ago[flagged]
- corford 2mo agoIf you're using free hosting and allowing that provider to mitm your origin's traffic, it seems a little naive to assume they wont eventually submit to temptation and start doing something like this.
- traceroute66 2mo agoI have "Enhanced Tracking Protection" strict mode enabled in Firefox and surprise surprise it is allowing `static.cloudflareinsights.com` not blocking it. So much for "Firefox shields you as you browse, blocking trackers automatically so you’re in control of your digital trail" Mozilla..... Edit to add: I have been doing a little experimenting, it looks like there might be some sort of hardcoded whitelist somewhere in Firefox ? When I first wanted to check, I visited `cloudflare.com` as it seemed the obvious place to find `static.cloudflareinsights.com` and Firefox shield blocks nothing there (hence I made this post) However, then I tried to find a different site, and after a bit of random searching/clicking around I found `www.tenforums.com` and `static.cloudflareinsights.com` is blocked on there. Its not a first-party domain thing, since cloudflare.com != cloudflareinsights.com. Surely `static.cloudflareinsights.com` should be blocked everywhere in strict mode, no exceptions ? Interestingly, when testing other sites, I have also been discovering other things Firefox shield is failing to block, e.g. `browser.events.data.microsoft.com` (tested on a non microsoft.com site)
- Topfi 2mo agoStandard, Strict or Custom? Strict should block that one for sure, will check once at home.
- traceroute66 2mo agoI just double checked `about:preferences#privacy` is "Enhanced Tracking Protection: Strict" and clicking "Advanced Settings" confirms the radio button is indeed under "Strict". Firefox 153.0.4
- Topfi 2mo agoJust saw the edit, all clicked now. As described this is expected behavior. The entitieslist (can't link right now because Github is down but got a local copy for some experiments) contains exceptions for owners of tracking URLs, in this case as a resource for Cloudflare.com and others owned by them only. Basically, because they are the same entity, they are considered one. Whether that could be communicated better by upstream, that's worth a discussion. Anyone besides Cloudflare.com has cloudflareinsights blocked. Here the specific entry for context from my local copy of ESR 153: { "entities": { "Cloudflare": { "properties": [ "cloudflare-quic.com", "cloudflare.com", "cloudflare.tv", "cloudflarestatus.com", "cloudflareworkers.com" ], "resources": [ "cloudflare.com", "cloudflareinsights.com", "cloudflarestream.com" ] } } } On a side note, spent a while learning how upstream Firefox works in-depth over the last few months, if ETP didn't block cloudflareinsights on pages outside Cloudflare.com I'd have lost any confidence build up and my project would likely linger even longer. Might just add a setting that totally excludes such exceptions if I can properly test it before release, seems there might be demand. Admittedly more for UX and honest communication clarity reasons (top setting truly prevents everything) then privacy, not the main goal of Hominis as a project.
- T3RMINATED 2mo ago[dead]
- ChoGGi 2mo agoHacker News already knows, nobody gave shit when they first announced it. I assume because it didn't have AI in the title? https://news.ycombinator.com/item?id=45291323 https://news.ycombinator.com/item?id=45291323
- docmars 2mo agoI think it has more to do with the title sounding positive and not causing a stir to avoid controversy, maybe.
- ttoinou 2mo agoHow could we ever find which hosting has ever changed the output html / files it sent ? How could we guarantee that the hosting service is only hosting ?
- tmpsvc2695f5 2mo ago[dead]
- tmpsvc2695f5 2mo ago[dead]
- TheqO 2mo agoCloudflare is also now actioning DMCA requests and blocking site pages. Returning an Error 451 - Unavailable For Legal Reasons.
- tdeck 2mo agoI keep wondering when the other shoe will drop on the idea of this one company MITMing a large portion of the world's internet traffic.
- tmpsvc2695f5 2mo ago[dead]