Email or username:

Password:

Forgot your password?
rabbit's posts Post Back to profile
Top-level
rabbit

When Boston hospitals were placed under DDoS attack years ago, we called Radware, who were also great to work with. Anybody but CloudFlare.

1 August at 18:28 | Open on mastodon.social
8 comments
NosirrahSec 🏴‍☠️

@rabbit Nazi-flare*

They host Nazis, kiwifarms(still right?), etc.

Fuck Cloudflare.

1 August at 18:33 | Open on infosec.exchange
catte_salad clone (da_667)

@rabbit

cloudflare hosts malware. I don't give a fuck about the technicalities. If your resolvers are authoratative, and/or the resolved IP falls in your address space, That is hosting malware.

While I'm at it, fuck Cloudflare, and fuck their involvement for forcing the DoH RFC through, and being the default provider for many modern browsers.

Wonder how many dicks Matthew Prince had to suck for that.

1 August at 19:26 | Open on infosec.exchange
Import Antigravity

@da_667 @rabbit Wow, one of us! I was the DNS manager for a CF competitor for a few years, and I gotta hand it to their marketing department the way they spun "We're changing DNS for your security!" for competitive advantage. I feel like Don Quixote and CF DNS are the windmills. It's nice to see someone in the wild see that.

1 August at 19:30 | Open on az.social
Import Antigravity

@da_667 @rabbit Also, I'd like to plug Edgio (the previously mentioned competitor). They're having a bit of trouble lately, and even if I got laid off last year I still wish them well. There's a lot of good people there who will treat you right.

1 August at 19:32 | Open on az.social
catte_salad clone (da_667)

@rabbit oh, and while we're on the cloudflare paintrain, at some point they claimed to handling 20% of internet traffic. Recently they claimed that 7% of all internet traffic is malicious. Exactly how do they know that, and how much of it is traffic to and from their infrastructure?

1 August at 19:34 | Open on infosec.exchange
Lord Doktor Krypt3ia
demize

@da_667 @rabbit there's one domain that we had proof was being used in an active scam targeting our customers (full email headers, etc)

we have brand protection through CSC

cloudflare completely ignored CSC and our only recourse would have been UDRP.

1 August at 19:38 | Open on unstable.systems
demize

@da_667 @rabbit at this point, I consider cloudflare in the same light I consider anyone else favored by threat actors: DNI at all costs

1 August at 19:38 | Open on unstable.systems
Go Up