From 888280758391435554af71e419af39ec7f46fbeb Mon Sep 17 00:00:00 2001 From: "Captcha.Was061159" Date: Thu, 28 Nov 2019 23:36:16 +0100 Subject: Update 'subfiles/add-ons.md' --- subfiles/add-ons.md | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/subfiles/add-ons.md b/subfiles/add-ons.md index 25dd47e5..5ffcfd2d 100644 --- a/subfiles/add-ons.md +++ b/subfiles/add-ons.md @@ -1,9 +1,15 @@ # CrimeFlarE -***Why you should say no to Cloudflare*** +***Why you should say "NO" to Cloudflare*** ## Solutions - Add-ons + | Name | Developer | Support | Can Block | Can Notify | | -------- | -------- | -------- | -------- | -------- | +| **[Bloku Cloudflaron MITM-Atakon](addon/about.bcma.md)** | Searxes | [Link](https://searxes.eu.org/) | **Yes** | **Yes** | +| **[Ĉu ligoj estas vundeblaj al MITM-atako?](addon/about.ismm.md)** | Searxes | [Link](https://searxes.eu.org/) | No | **Yes** | | [Block Cloudflare MITM Attack](https://trac.torproject.org/projects/tor/attachment/ticket/24351/block_cloudflare_mitm_attack-1.0.14.1-an%2Bfx.xpi) | nullius | [Link](https://github.com/nym-zone/block_cloudflare_mitm_fx) | **Yes** | **Yes** | +| [TPRB](https://sw.skusklxqaqnrmszytky4vfyrg625erw4hqhiokyc2ufnokd2aitb47yd.onion/) | Sw | [Link](https://sw.skusklxqaqnrmszytky4vfyrg625erw4hqhiokyc2ufnokd2aitb47yd.onion/) | **Yes** | **Yes** | | [Detect Cloudflare](https://addons.mozilla.org/en-US/firefox/addon/detect-cloudflare/) | Frank Otto | [Link](https://github.com/traktofon/cf-detect) | No | **Yes** | -| [Cloud Firewall](https://addons.mozilla.org/en-US/firefox/addon/cloud-firewall/) | Niklas Poslovski, Gokulakrishna Sudharsan | [Link](https://web.archive.org/web/https://gitlab.com/gkrishnaks/cloud-firewall/) | **Yes** | No | +| [Cloud Firewall](https://addons.mozilla.org/en-US/firefox/addon/cloud-firewall/) | Gokulakrishna Sudharsan | [Link](https://web.archive.org/web/https://gitlab.com/gkrishnaks/cloud-firewall/) | **Yes** | No | + +See "[What you can do to resist Cloudflare?](../what-to-do.md)" for more information. \ No newline at end of file -- cgit v1.2.3 From 8cb69f14ed4a226842740e4647058d1410927b22 Mon Sep 17 00:00:00 2001 From: "Captcha.Was061159" Date: Thu, 28 Nov 2019 23:38:46 +0100 Subject: Update 'subfiles/change-firefox-dns.md' --- subfiles/change-firefox-dns.md | 17 ++++++++++------- 1 file changed, 10 insertions(+), 7 deletions(-) diff --git a/subfiles/change-firefox-dns.md b/subfiles/change-firefox-dns.md index 435e0023..66884d46 100644 --- a/subfiles/change-firefox-dns.md +++ b/subfiles/change-firefox-dns.md @@ -1,14 +1,17 @@ # CrimeFlarE -***Why you should say no to Cloudflare*** +***Why you should say "NO" to Cloudflare*** ## Solutions - Change default DNS provider of firefox -Mozilla (Firefox) has partnered up with Cloudflare and will resolve the -domain names from the application itself via a DNS server from Cloudflare. + +Mozilla (Firefox) has partnered up with Cloudflare and will resolve the domain names from the application itself via a DNS server from Cloudflare. Cloudflare will then be able to read everyone’s DNS requests. -You can disable it in “about:config". The string value of "network.trr.uri" -should be empty. Some other settings can also contain Cloudflare URLs. It -is recommended to search for "cloudflare". GNU Icecat and older Firefox -versions are not affected *yet*. +You can disable it in “about:config". + +- The string value of "`network.trr.uri`" should be empty. +- The string value of "`network.trr.resolvers`" should be set to `[]`. + +Some other settings can also contain Cloudflare URLs. It is recommended to search for "`cloudflare`". +GNU Icecat and older Firefox versions(<68) are not affected *yet*. ![The about:config page which shows the Cloudflare DNS address in the network.trr.uri string.](../image/firefox-cloudflare-dns-settings.jpg) -- cgit v1.2.3 From e9cb3f9946dbebf84f4bc3565c0112c14567c0c5 Mon Sep 17 00:00:00 2001 From: "Captcha.Was061159" Date: Thu, 28 Nov 2019 23:41:01 +0100 Subject: Update 'subfiles/change-firefox-dns.md' --- subfiles/change-firefox-dns.md | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/subfiles/change-firefox-dns.md b/subfiles/change-firefox-dns.md index 66884d46..5a01f87a 100644 --- a/subfiles/change-firefox-dns.md +++ b/subfiles/change-firefox-dns.md @@ -6,11 +6,22 @@ Mozilla (Firefox) has partnered up with Cloudflare and will resolve the domain names from the application itself via a DNS server from Cloudflare. Cloudflare will then be able to read everyone’s DNS requests. -You can disable it in “about:config". +> You can disable it in “about:config" - The string value of "`network.trr.uri`" should be empty. - The string value of "`network.trr.resolvers`" should be set to `[]`. +> Or in /distribution/policies.json` (Firefox ESR) + +``` +... + "DNSOverHTTPS": { + "Enabled": false, + "ProviderURL": "https://0.0.0.0/" + }, +... +``` + Some other settings can also contain Cloudflare URLs. It is recommended to search for "`cloudflare`". GNU Icecat and older Firefox versions(<68) are not affected *yet*. -- cgit v1.2.3 From 116e7b54c74174f42161edfb4a5e8fa111f8a1e4 Mon Sep 17 00:00:00 2001 From: "Captcha.Was061159" Date: Thu, 28 Nov 2019 23:43:26 +0100 Subject: -. Incapsula is MITM --- subfiles/cloudflare-alternatives.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/subfiles/cloudflare-alternatives.md b/subfiles/cloudflare-alternatives.md index 7b4b7804..6c7449b8 100644 --- a/subfiles/cloudflare-alternatives.md +++ b/subfiles/cloudflare-alternatives.md @@ -13,13 +13,11 @@ more aimed at technical people. We might create a guide for some self-hosting basics which don't require Cloudflare. -`to consider: Is user---incapsula---origin really okay?` ## Alternatives | Alternative | Drawback | Price | Link | | ----------------- | --------------------------------- | ------ | ---- | | PerimeterX | not gratis | ? | - | -| Impurva incapsula | not gratis | Paid | - | | Github pages | uses Microsoft servers | Free | https://pages.github.com/ (WARNING: Tor/VPN users will get their [account blocked automatically](https://github.com/crimeflare/cloudflare-tor) by Github) | | Gitlab pages | uses Google servers | Free | https://gitlab.com/pages/ (WARNING: Some area of Gitlab is Cloudflare) | -- cgit v1.2.3 From e193a23f0eb24436847b503b566adab028cf9a48 Mon Sep 17 00:00:00 2001 From: "Captcha.Was061159" Date: Thu, 28 Nov 2019 23:44:21 +0100 Subject: Update 'subfiles/add-ons.md' --- subfiles/add-ons.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/subfiles/add-ons.md b/subfiles/add-ons.md index 5ffcfd2d..dddd4974 100644 --- a/subfiles/add-ons.md +++ b/subfiles/add-ons.md @@ -10,6 +10,6 @@ | [Block Cloudflare MITM Attack](https://trac.torproject.org/projects/tor/attachment/ticket/24351/block_cloudflare_mitm_attack-1.0.14.1-an%2Bfx.xpi) | nullius | [Link](https://github.com/nym-zone/block_cloudflare_mitm_fx) | **Yes** | **Yes** | | [TPRB](https://sw.skusklxqaqnrmszytky4vfyrg625erw4hqhiokyc2ufnokd2aitb47yd.onion/) | Sw | [Link](https://sw.skusklxqaqnrmszytky4vfyrg625erw4hqhiokyc2ufnokd2aitb47yd.onion/) | **Yes** | **Yes** | | [Detect Cloudflare](https://addons.mozilla.org/en-US/firefox/addon/detect-cloudflare/) | Frank Otto | [Link](https://github.com/traktofon/cf-detect) | No | **Yes** | -| [Cloud Firewall](https://addons.mozilla.org/en-US/firefox/addon/cloud-firewall/) | Gokulakrishna Sudharsan | [Link](https://web.archive.org/web/https://gitlab.com/gkrishnaks/cloud-firewall/) | **Yes** | No | +| [Cloud Firewall](https://addons.mozilla.org/en-US/firefox/addon/cloud-firewall/) | Niklas Poslovski | [Link](https://web.archive.org/web/https://gitlab.com/gkrishnaks/cloud-firewall/) | **Yes** | No | See "[What you can do to resist Cloudflare?](../what-to-do.md)" for more information. \ No newline at end of file -- cgit v1.2.3 From 5ebb4b2e0e424f73bcc32a733b5abf960dff1d54 Mon Sep 17 00:00:00 2001 From: "Captcha.Was061159" Date: Thu, 28 Nov 2019 23:44:43 +0100 Subject: Update 'subfiles/add-ons.md' --- subfiles/add-ons.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/subfiles/add-ons.md b/subfiles/add-ons.md index dddd4974..093b21ad 100644 --- a/subfiles/add-ons.md +++ b/subfiles/add-ons.md @@ -10,6 +10,6 @@ | [Block Cloudflare MITM Attack](https://trac.torproject.org/projects/tor/attachment/ticket/24351/block_cloudflare_mitm_attack-1.0.14.1-an%2Bfx.xpi) | nullius | [Link](https://github.com/nym-zone/block_cloudflare_mitm_fx) | **Yes** | **Yes** | | [TPRB](https://sw.skusklxqaqnrmszytky4vfyrg625erw4hqhiokyc2ufnokd2aitb47yd.onion/) | Sw | [Link](https://sw.skusklxqaqnrmszytky4vfyrg625erw4hqhiokyc2ufnokd2aitb47yd.onion/) | **Yes** | **Yes** | | [Detect Cloudflare](https://addons.mozilla.org/en-US/firefox/addon/detect-cloudflare/) | Frank Otto | [Link](https://github.com/traktofon/cf-detect) | No | **Yes** | -| [Cloud Firewall](https://addons.mozilla.org/en-US/firefox/addon/cloud-firewall/) | Niklas Poslovski | [Link](https://web.archive.org/web/https://gitlab.com/gkrishnaks/cloud-firewall/) | **Yes** | No | +| [Cloud Firewall](https://addons.mozilla.org/en-US/firefox/addon/cloud-firewall/) | Niklas Poslovski | [Link](https://gitlab.com/gkrishnaks/cloud-firewall/) | **Yes** | No | See "[What you can do to resist Cloudflare?](../what-to-do.md)" for more information. \ No newline at end of file -- cgit v1.2.3 From fadf8efd5332879e0e47720efb2d0f216dfb190b Mon Sep 17 00:00:00 2001 From: "Captcha.Was061159" Date: Thu, 28 Nov 2019 23:45:31 +0100 Subject: Update 'what-to-do.md' --- what-to-do.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/what-to-do.md b/what-to-do.md index feb4d75d..b7f9b20d 100644 --- a/what-to-do.md +++ b/what-to-do.md @@ -89,7 +89,7 @@ If Cloudflare leak your information or won't let you to connect to our servers, | [Block Cloudflare MITM Attack](https://trac.torproject.org/projects/tor/attachment/ticket/24351/block_cloudflare_mitm_attack-1.0.14.1-an%2Bfx.xpi) | nullius | [Link](https://github.com/nym-zone/block_cloudflare_mitm_fx) | **Yes** | **Yes** | | [TPRB](https://sw.skusklxqaqnrmszytky4vfyrg625erw4hqhiokyc2ufnokd2aitb47yd.onion/) | Sw | [Link](https://sw.skusklxqaqnrmszytky4vfyrg625erw4hqhiokyc2ufnokd2aitb47yd.onion/) | **Yes** | **Yes** | | [Detect Cloudflare](https://addons.mozilla.org/en-US/firefox/addon/detect-cloudflare/) | Frank Otto | [Link](https://github.com/traktofon/cf-detect) | No | **Yes** | -| [Cloud Firewall](https://addons.mozilla.org/en-US/firefox/addon/cloud-firewall/) | Gokulakrishna Sudharsan | [Link](https://web.archive.org/web/https://gitlab.com/gkrishnaks/cloud-firewall/) | **Yes** | No | +| [Cloud Firewall](https://addons.mozilla.org/en-US/firefox/addon/cloud-firewall/) | Niklas Poslovski | [Link](https://gitlab.com/gkrishnaks/cloud-firewall/) | **Yes** | No | - Convince your friends to use [Tor](https://www.torproject.org/download/tor/) on the daily basis. Anonymity should be the standard of the open internet! -- cgit v1.2.3 From 27baa160cc917ac025d4924cbff7798f1235897d Mon Sep 17 00:00:00 2001 From: "Captcha.Was061159" Date: Thu, 28 Nov 2019 23:53:07 +0100 Subject: Upload files to 'image' --- image/cfmarketshare.jpg | Bin 0 -> 76342 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 image/cfmarketshare.jpg diff --git a/image/cfmarketshare.jpg b/image/cfmarketshare.jpg new file mode 100644 index 00000000..8c2f4bf3 Binary files /dev/null and b/image/cfmarketshare.jpg differ -- cgit v1.2.3 From b2a59ecaa670c108ea112f854f5840f3e47ec2e8 Mon Sep 17 00:00:00 2001 From: "Captcha.Was061159" Date: Thu, 28 Nov 2019 23:55:24 +0100 Subject: Update 'README.md' --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 0ae092de..0d801980 100644 --- a/README.md +++ b/README.md @@ -23,6 +23,7 @@ The origin webserver administrator allowed the agent to decide [who can access]( --- +![](image/cfmarketshare.jpg) ![](image/cloudflaredearuser.jpg) ![](image/usershoulddecide.jpg) -- cgit v1.2.3 From cf95a7297b4494f1c1de255b3d5da61e82fc16bd Mon Sep 17 00:00:00 2001 From: "Captcha.Was061159" Date: Fri, 29 Nov 2019 00:01:35 +0100 Subject: Upload files to 'image' --- image/cf_deleteandkeep.jpg | Bin 0 -> 51909 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 image/cf_deleteandkeep.jpg diff --git a/image/cf_deleteandkeep.jpg b/image/cf_deleteandkeep.jpg new file mode 100644 index 00000000..a332754b Binary files /dev/null and b/image/cf_deleteandkeep.jpg differ -- cgit v1.2.3 From be2b2a80df91d2053e6667f08ae342178d41e100 Mon Sep 17 00:00:00 2001 From: "Captcha.Was061159" Date: Fri, 29 Nov 2019 00:10:19 +0100 Subject: Update 'README_ethics.md' --- README_ethics.md | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/README_ethics.md b/README_ethics.md index be647392..7d535af9 100644 --- a/README_ethics.md +++ b/README_ethics.md @@ -18,6 +18,7 @@ Table of contents - [Voter suppression](README_ethics.md#voter-suppression) - [Ignoring user's preference](README_ethics.md#ignoring-user-s-preference) - [Lying about deleting user's data](README_ethics.md#lying-about-deleting-users-data) +- [Keep your personal information](README_ethics.md#keep-your-personal-information) --- @@ -166,7 +167,26 @@ Their new privacy policy doesn't make any mention of retaining data for a year. How can you trust Cloudflare if [their privacy policy is a LIE](https://twitter.com/daviddlow/status/1197787135526555648)? +--- + +### Keep your personal information + +Deleting Cloudflare account is [hard](https://justdeleteme.xyz/) + +``` +Submit a support ticket using the "Account" category, +and request account deletion in the message body. +You must have no domains or credit cards attached to your account prior to requesting deletion. +``` + +You will [receive this confirmation email](https://twitter.com/originalesushi/status/1199041528414527495). + +![](cf_deleteandkeep.jpg) +``` +Customer: Delete my account! +Cloudflare: We process your request(= "We've received your message"). We will continue keeping your personal information. +``` --- -- cgit v1.2.3 -- cgit v1.2.3 From b7cdb13381b9289f411922204e4ef80e82d2ad7d Mon Sep 17 00:00:00 2001 From: "Captcha.Was061159" Date: Fri, 29 Nov 2019 00:14:41 +0100 Subject: Update 'README_ethics.md' --- README_ethics.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/README_ethics.md b/README_ethics.md index 7d535af9..2a02380c 100644 --- a/README_ethics.md +++ b/README_ethics.md @@ -171,7 +171,7 @@ How can you trust Cloudflare if [their privacy policy is a LIE](https://twitter. ### Keep your personal information -Deleting Cloudflare account is [hard](https://justdeleteme.xyz/) +Deleting Cloudflare account is [hard level](https://justdeleteme.xyz/). ``` Submit a support ticket using the "Account" category, @@ -183,10 +183,10 @@ You will [receive this confirmation email](https://twitter.com/originalesushi/st ![](cf_deleteandkeep.jpg) -``` -Customer: Delete my account! -Cloudflare: We process your request(= "We've received your message"). We will continue keeping your personal information. -``` +"We have begun to process your deletion request" but "We will continue to store your personal information". + +Can you "trust" this? + --- -- cgit v1.2.3 From f73c7f2e7c37fa7940de5ccffd856e73f6b08a84 Mon Sep 17 00:00:00 2001 From: "Captcha.Was061159" Date: Fri, 29 Nov 2019 00:15:15 +0100 Subject: Update 'README_ethics.md' --- README_ethics.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README_ethics.md b/README_ethics.md index 2a02380c..fb2c200d 100644 --- a/README_ethics.md +++ b/README_ethics.md @@ -181,7 +181,7 @@ You must have no domains or credit cards attached to your account prior to reque You will [receive this confirmation email](https://twitter.com/originalesushi/status/1199041528414527495). -![](cf_deleteandkeep.jpg) +![](image/cf_deleteandkeep.jpg) "We have begun to process your deletion request" but "We will continue to store your personal information". -- cgit v1.2.3 From 06a2bcaaf32281b8cb9aa80ba2b94f27e2826dd9 Mon Sep 17 00:00:00 2001 From: "Captcha.Was061159" Date: Fri, 29 Nov 2019 00:20:44 +0100 Subject: Update 'PEOPLE.md' --- PEOPLE.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/PEOPLE.md b/PEOPLE.md index 58827e61..14fce83b 100644 --- a/PEOPLE.md +++ b/PEOPLE.md @@ -375,6 +375,20 @@ Table of contents > Too many to list here. It is IMPOSSIBLE to list them all! [See for yourself](https://twitter.com/search?q=Cloudflare). +" I just got 3 friends here in Germany to try - and NONE of them can gain access - they get blocked by the same captcha. I'm thinking Cloudflare has Deutsche Telekom blacklisted, or some such." by @[GrayanOne](https://twitter.com/GrayanOne/status/1200057914842587136) + +"Just a friendly reminder that if your Black Friday sales page requires someone to: check a Cloudflare “I’m not a robot” check box solve a CAPTCHA image it’s probably not worth the discount." by @[CoryJaccino](https://twitter.com/CoryJaccino/status/1199946959110443008) + +"the site seems to use Cloudflare which blocks a lot of users from the start, so a large crowd can't open the site even if it's online" by @[adlerweb](https://twitter.com/adlerweb/status/1199966079126310912) + +"Day 2 of trying to get my Cloudflare account deleted. They sure don't make it easy, or logic." by @[originalesushi](https://twitter.com/originalesushi/status/1199041528414527495) + +"Just don't make me discover my PII in some future breach or I'll dig up my Cloudflare exodus logs and I'll step on the biggest soapbox I can find to cast hell upon you." by @[originalesushi](https://twitter.com/originalesushi/status/1199063754740314115) + +"Hi there ! Your cdnjs is blocked by Stormshield firewall IPS." by @[nivuniconu_](https://twitter.com/nivuniconu_/status/1199988064589950977) + +"So many people are hoping for word of an actually decisive move from the Not-Board that cloudflare thinks arseblog's under DDoS attack." by @[fuckmedoris](https://twitter.com/fuckmedoris/status/1200180923649732608) + "Whole thing happened again when I started from the beginning to reset my password, then again when it told me to reactivate my account." by @[JayNBoston](https://twitter.com/JayNBoston/status/1199829882131427333) "You also send all the traffic to the NSA though Cloudflare — thanks but no thanks!" by @[Mcnst](https://twitter.com/Mcnst/status/1199096502968299520) -- cgit v1.2.3