@rabbit cloudflare hosts malware. I don't give a fuck...

cloudflare hosts malware. I don't give a fuck about the technicalities. If your resolvers are authoratative, and/or the resolved IP falls in your address space, That is hosting malware.

While I'm at it, fuck Cloudflare, and fuck their involvement for forcing the DoH RFC through, and being the default provider for many modern browsers.

Wonder how many dicks Matthew Prince had to suck for that.

Like 1 August at 19:26 | Wall-to-wall | Open on infosec.exchange

6 comments

Import Antigravity

@da_667 @rabbit Wow, one of us! I was the DNS manager for a CF competitor for a few years, and I gotta hand it to their marketing department the way they spun "We're changing DNS for your security!" for competitive advantage. I feel like Don Quixote and CF DNS are the windmills. It's nice to see someone in the wild see that.

1 August at 19:30 | Open on az.social

Import Antigravity

@da_667 @rabbit Also, I'd like to plug Edgio (the previously mentioned competitor). They're having a bit of trouble lately, and even if I got laid off last year I still wish them well. There's a lot of good people there who will treat you right.

1 August at 19:32 | Open on az.social

catte_salad clone (da_667)

@rabbit oh, and while we're on the cloudflare paintrain, at some point they claimed to handling 20% of internet traffic. Recently they claimed that 7% of all internet traffic is malicious. Exactly how do they know that, and how much of it is traffic to and from their infrastructure?

1 August at 19:34 | Open on infosec.exchange

Lord Doktor Krypt3ia

@da_667 @rabbit They host terrorists too.

1 August at 19:34 | Open on infosec.exchange

demize

@da_667 @rabbit there's one domain that we had proof was being used in an active scam targeting our customers (full email headers, etc)

we have brand protection through CSC

cloudflare completely ignored CSC and our only recourse would have been UDRP.

1 August at 19:38 | Open on unstable.systems

demize

@da_667 @rabbit at this point, I consider cloudflare in the same light I consider anyone else favored by threat actors: DNI at all costs

1 August at 19:38 | Open on unstable.systems