Re: Using Cloudflare after Christchurch
Peter Lambrechtsen <[email protected]> Wed, 10 Jul 2019 10:28:00 +1200
| Newsgroups | gmane.org.operators.nznog |
|---|---|
| Message-ID | <CACJd5cFwqjuyQczuqgCwf-LibGjmwRMoFB4kO2WavieZ9HgkoQ@mail.gmail.com> |
--===============1885536605== Content-Type: multipart/alternative; boundary="000000000000863d8e058d47131c" --000000000000863d8e058d47131c Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Stuart I thought I would respond publicly as I have received a number of emails offline over the past months. My expectations are extremely low after attempting to raise awareness of this situation with various parties (including InternetNZ and others). Oddly enough the more convincing topic was to talk about the fact that Cloudflare host the majority if nor all Revenge Porn sites rather than the fact they host Terrorist or White Supremacist sites. It did surprise me as Cloudflare have worked hard on the SEO for Terrorism but not so much Revenge Porn. If they do in the future work on their SEO in that area it will further speak volumes about their business practices and lack of ethics. Roughly the responses fall into three groups: - Understanding and accepting that the company has no morals or ethics and refusing to do further business with them. This will be the absolute minority and if you get more than 10% traction I will be impressed. - Apathy towards Cloudflare and their business practices when highlighted. This will be the majority of responses and it is disheartening to say the least. Typically the apathy will be because the viable DDoS alternatives to Cloudflare are either cost prohibitive or not hosted within the NZ/AU regions so moving to alternatives would significantly reduce the sites performance. Included in this group are folks that say Facebook and Twitter were the most to blame and focus their attention there rather than the fact the stream was initially published on sites protected by Cloudflare and disseminated from there. - Hostile disagreement towards any limitations on Cloudflare due to their strong Free Speech approach and lack of interest to be the "Internet Police". When examples of certain sites protected by Cloudflare reveling in doxing people that leads to physical harm from other site members or individuals suicide they tend to not respond further. But again the minority of people but even more disheartening than the second group. I've contacted the majority of large ISPs within NZ, and none of them have any immediate plans to change peering agreements with Cloudflare. The consistent response is that it should be a unified response from all ISPs in NZ rather than one ISP taking a unilateral decision. So far nothing has happened in that area either. Lastly I was emailed off list by a number of people saying not to have any expectations on NZNOG to actually do anything. I think it was best summed up as "Welcome to the dumpster fire that is NZNOG, good luck getting any traction". So while an Australian white supremacist was radicalised online and came to our country on the express purpose to kill a religious minority. Asking them to actually do something rather than shift blame seems too much to ask for. I wish you the best of luck. Kind regards Peter On Tue, Jul 9, 2019 at 7:49 PM stuart pilling <[email protected]> wrote: > Hi All, > > > > A long time lurker, but this one seems to be well worth the wait. Can > someone online or offline please provide a list of those houses that > use/support cloudflare as their infrastructure partner of choice. I don= =E2=80=99t > really want to wade through the DNC records looking for cloudflare DNS > entries. Commercial pressure comes from business that buy services as we= ll. > > > > Cheers > > > > Stu > > > > *From:* [email protected] [mailto: > [email protected]] *On Behalf Of *Jed Laundry > *Sent:* Friday, 3 May 2019 11:21 a.m. > *To:* Peter Lambrechtsen; nznog > *Subject:* Re: [nznog] Using Cloudflare after Christchurch > > > > Hi all, > > > > InternetNZ are working on a well-considered response and I do support > them, but I don't think they are the only organisation or group where thi= s > should be discussed. Especially where operational decisions are involved > which may have downstream effects. > > > I agree with Peter and Michael; the argument that "it's just content" and > that ISPs have no role in layer 8+ policy decisions is a bit disingenuous= , > because we regularly filter our customers from bad things. We run spam > filters, we block malware sites, we choose to stop working with abusive > customers; we (try to) make the internet a hostile place for bad people t= o > operate. This isn't censorship--they can still get content online--we jus= t > don't make it easy for them. > > > Cloudflare have taken a commercial position based on a very US-centric > "free speech" world view that they, effectively, shouldn't try to do any = of > this. Personally, I can understand their position, but I don't agree with > it. Lacking any US amendment, the seemingly only way to change this > commercial position is to apply commercial pressure, which is the point > that Peter is making; is anyone considering operational changes to apply > commercial pressure? > > I know on the consumer side, at $DAYJOB we're looking at edge services. > Cloudflare are of course one of the options. Based on my personal > experience with my free account I was going to strongly back them, but > their continued non-response to these events has made me reconsider that > and my personal IT involvement with them. > > Thanks, > Jed. > > > > On Fri, 3 May 2019 at 11:06, Peter Lambrechtsen <[email protected]> wrote: > > I have tried tweeting eastdakota when I was doxed and haven't had a > response. If you get a response I would be interested. > > > > But I highly recommend you ask him the pointed question about the AUP of > Cloudflare as brevity of it speaks volumes: > > > > https://www.cloudflare.com/terms/ > > > > And ask him why *all* the most vile sites on the internet seem to only us= e > his services for WAF/DDoS protection and none of the other providers and > why he doesn't do anything about it. It's no mistake that there isn't any > validation of the email address you use when signing up to the Cloudflare > service. > > > > Cheers, Peter > > > > On Fri, May 3, 2019 at 10:44 AM Mehmet Akcin <[email protected]> wrote: > > If you have concerns, email the ceo or tweet him @eastdakota. Good guy, > reasonable, and he will take time respond. I know people who work there. > They are not going to let anyone malicious use their platform knowingly. > > > > =E2=80=98Mehmet > > > > On Thu, May 2, 2019 at 15:14 Michael Fincham <[email protected]> > wrote: > > On Fri, 3 May 2019 09:10:50 +1200 > Jonathan Brewer <[email protected]> wrote: > > > InternetNZ is the forum to discuss this, not NZNOG. > > Engineers have a personal responsibility to ensure that the actions they > take, even on behalf of an employer, are ethically right. > > I do think therefore this is a discussion for NZNOG, being as it is a > community of engineers who do the implementing. > > -- > Michael > _______________________________________________ > NZNOG mailing list > [email protected] > https://list.waikato.ac.nz/mailman/listinfo/nznog > > -- > > Mehmet > +1-424-298-1903 > > _______________________________________________ > NZNOG mailing list > [email protected] > https://list.waikato.ac.nz/mailman/listinfo/nznog > > _______________________________________________ > NZNOG mailing list > [email protected] > https://list.waikato.ac.nz/mailman/listinfo/nznog > > --000000000000863d8e058d47131c Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">Hi Stuart<div><br></div><div>I thought I would respond pub= licly as I have received a number of emails offline over the past months.</= div><div><br></div><div>My expectations are extremely low after attempting = to raise awareness of this situation with various parties (including Intern= etNZ and others). Oddly=C2=A0enough the more convincing topic was to talk a= bout the fact that Cloudflare host the majority if nor all Revenge Porn sit= es rather than the fact they host Terrorist or White Supremacist sites. It = did surprise me as Cloudflare have worked hard on the SEO for Terrorism but= not so much Revenge Porn. If they do in the future work on their SEO in th= at area it will further speak volumes about their business practices and la= ck of ethics.</div><div><br></div><div>Roughly the responses fall into thre= e groups:</div><div><br></div><div>- Understanding and accepting that the c= ompany has no morals or ethics and refusing to do further business with the= m. This will be the absolute minority and if you get more than 10% traction= I will be impressed.</div><div><br></div><div>- Apathy towards Cloudflare = and their business practices when highlighted. This will be the majority of= responses and it is disheartening to say the least. Typically the apathy w= ill be because the viable DDoS alternatives to Cloudflare are either cost p= rohibitive or not hosted within the NZ/AU regions so moving to alternatives= would significantly reduce the sites performance. Included in this group a= re folks that say Facebook and Twitter were the most to blame and focus the= ir attention there rather than the fact the stream was initially published = on sites protected by Cloudflare and disseminated from there.</div><div><br= ></div><div>- Hostile disagreement towards any limitations on Cloudflare du= e to their strong Free Speech approach and lack of interest to be the "= ;Internet Police". When examples of certain sites protected by Cloudfl= are reveling in doxing people that leads to physical harm from other site m= embers or individuals suicide they tend to not respond further. But again t= he minority of people but even more disheartening than the second group.</d= iv><div><br></div><div>I've contacted the majority of large ISPs within= NZ, and none of them have any immediate plans to change peering agreements= with Cloudflare. The consistent response is that it should be a unified re= sponse from all ISPs in NZ rather than one ISP taking a unilateral decision= . So far nothing has happened in that area either.</div><div><br></div><div= >Lastly I was emailed off list by a number of people saying not to have any= expectations on NZNOG to actually do anything. I think it was best summed = up as "Welcome to the dumpster fire that is NZNOG, good luck getting a= ny traction".</div><div><br></div><div>So while an Australian white su= premacist was radicalised online and came to our country on the express pur= pose to kill a religious minority. Asking them to actually do something rat= her than shift blame seems too much to ask for.</div><div><br></div><div>I = wish you the best of luck.</div><div><br></div><div>Kind regards</div><div>= <br></div><div>Peter</div></div><br><div class=3D"gmail_quote"><div dir=3D"= ltr" class=3D"gmail_attr">On Tue, Jul 9, 2019 at 7:49 PM stuart pilling <= ;<a href=3D"mailto:[email protected]">[email protected]</a>&g= t; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0p= x 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div l= ang=3D"EN-NZ"><div class=3D"gmail-m_877372491952454061WordSection1"><p clas= s=3D"MsoNormal"><span style=3D"font-size:11pt;font-family:Calibri,sans-seri= f;color:rgb(31,73,125)">Hi All,<u></u><u></u></span></p><p class=3D"MsoNorm= al"><span style=3D"font-size:11pt;font-family:Calibri,sans-serif;color:rgb(= 31,73,125)"><u></u>=C2=A0<u></u></span></p><p class=3D"MsoNormal"><span sty= le=3D"font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">A= long time lurker, but this one seems to be well worth the wait.=C2=A0 Can = someone online or offline please provide a list of those houses that use/su= pport cloudflare as their infrastructure partner of choice.=C2=A0 I don=E2= =80=99t really want to wade through the DNC records looking for cloudflare = DNS entries.=C2=A0 Commercial pressure comes from business that buy service= s as well.<u></u><u></u></span></p><p class=3D"MsoNormal"><span style=3D"fo= nt-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u>= =C2=A0<u></u></span></p><p class=3D"MsoNormal"><span style=3D"font-size:11p= t;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Cheers<u></u><u></u>= </span></p><p class=3D"MsoNormal"><span style=3D"font-size:11pt;font-family= :Calibri,sans-serif;color:rgb(31,73,125)"><u></u>=C2=A0<u></u></span></p><p= class=3D"MsoNormal"><span style=3D"font-size:11pt;font-family:Calibri,sans= -serif;color:rgb(31,73,125)">Stu<u></u><u></u></span></p><p class=3D"MsoNor= mal"><span style=3D"font-size:11pt;font-family:Calibri,sans-serif;color:rgb= (31,73,125)"><u></u>=C2=A0<u></u></span></p><div style=3D"border-right:none= ;border-bottom:none;border-left:none;border-top:1pt solid rgb(181,196,223);= padding:3pt 0cm 0cm"><p class=3D"MsoNormal"><b><span lang=3D"EN-US" style= =3D"font-size:10pt;font-family:Tahoma,sans-serif">From:</span></b><span lan= g=3D"EN-US" style=3D"font-size:10pt;font-family:Tahoma,sans-serif"> <a href= =3D"mailto:[email protected]" target=3D"_blank">nznog-bounce= [email protected]</a> [mailto:<a href=3D"mailto:[email protected]= to.ac.nz" target=3D"_blank">[email protected]</a>] <b>On Beh= alf Of </b>Jed Laundry<br><b>Sent:</b> Friday, 3 May 2019 11:21 a.m.<br><b>= To:</b> Peter Lambrechtsen; nznog<br><b>Subject:</b> Re: [nznog] Using Clou= dflare after Christchurch<u></u><u></u></span></p></div><p class=3D"MsoNorm= al"><u></u>=C2=A0<u></u></p><div><div><p class=3D"MsoNormal">Hi all,<u></u>= <u></u></p></div><div><p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p></div>= <div><p class=3D"MsoNormal">InternetNZ are working on a well-considered res= ponse and I do support them, but I don't think they are the only organi= sation or group where this should be discussed. Especially where operationa= l decisions are involved which may have downstream effects. <u></u><u></u><= /p></div><div><p class=3D"MsoNormal"><br>I agree with Peter and Michael; th= e argument that "it's just content" and that ISPs have no rol= e in layer 8+ policy decisions is a bit disingenuous, because we regularly = filter our customers from bad things. We run spam filters, we block malware= sites, we choose to stop working with abusive customers; we (try to) make = the internet a hostile place for bad people to operate. This isn't cens= orship--they can still get content online--we just don't make it easy f= or them.<u></u><u></u></p></div><div><p class=3D"MsoNormal" style=3D"margin= -bottom:12pt"><br>Cloudflare have taken a commercial position based on a ve= ry US-centric "free speech" world view that they, effectively, sh= ouldn't try to do any of this. Personally, I can understand their posit= ion, but I don't agree with it. Lacking any US amendment, the seemingly= only way to change this commercial position is to apply commercial pressur= e, which is the point that Peter is making; is anyone considering operation= al changes to apply commercial pressure?<br><br>I know on the consumer side= , at $DAYJOB we're looking at edge services. Cloudflare are of course o= ne of the options. Based on my personal experience with my free account I w= as going to strongly back them, but their continued non-response to these e= vents has made me reconsider that and my personal IT involvement with them.= <br><br>Thanks,<br>Jed.<br><br><u></u><u></u></p></div></div><p class=3D"Ms= oNormal"><u></u>=C2=A0<u></u></p><div><div><p class=3D"MsoNormal">On Fri, 3= May 2019 at 11:06, Peter Lambrechtsen <<a href=3D"mailto:[email protected]= " target=3D"_blank">[email protected]</a>> wrote:<u></u><u></u></p></div><b= lockquote style=3D"border-top:none;border-right:none;border-bottom:none;bor= der-left:1pt solid rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin-left:4.8= pt;margin-right:0cm"><div><div><p class=3D"MsoNormal">I have tried tweeting= =C2=A0eastdakota when I was doxed and haven't had a response. If you ge= t a response I would be interested.<u></u><u></u></p><div><p class=3D"MsoNo= rmal"><u></u>=C2=A0<u></u></p></div><div><p class=3D"MsoNormal">But I highl= y recommend you ask him the pointed question about the AUP of Cloudflare as= brevity of it speaks volumes:<u></u><u></u></p></div><div><p class=3D"MsoN= ormal"><u></u>=C2=A0<u></u></p></div><div><p class=3D"MsoNormal"><a href=3D= "https://www.cloudflare.com/terms/" target=3D"_blank">https://www.cloudflar= e.com/terms/</a><u></u><u></u></p></div><div><p class=3D"MsoNormal"><u></u>= =C2=A0<u></u></p></div><div><p class=3D"MsoNormal">And ask him why *all* th= e most vile sites on the internet seem to only use his services for WAF/DDo= S protection and none of the other providers and why he doesn't do anyt= hing about it. It's no mistake that there isn't any validation of t= he email address you use when signing up to the Cloudflare service.<u></u><= u></u></p></div><div><p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p></div><= div><p class=3D"MsoNormal">Cheers, Peter<u></u><u></u></p></div></div></div= ><p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p><div><div><p class=3D"MsoNo= rmal">On Fri, May 3, 2019 at 10:44 AM Mehmet Akcin <<a href=3D"mailto:me= [email protected]" target=3D"_blank">[email protected]</a>> wrote:<u></u><u>= </u></p></div><blockquote style=3D"border-top:none;border-right:none;border= -bottom:none;border-left:1pt solid rgb(204,204,204);padding:0cm 0cm 0cm 6pt= ;margin-left:4.8pt;margin-right:0cm"><div><div><p class=3D"MsoNormal">If yo= u have concerns, email the ceo or tweet him @eastdakota. Good guy, reasonab= le, and he will take time respond. I know people who work there. They are n= ot going to let anyone malicious use their platform knowingly.<u></u><u></u= ></p></div></div><div><p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p></div>= <div><p class=3D"MsoNormal">=E2=80=98Mehmet<u></u><u></u></p></div><div><p = class=3D"MsoNormal"><u></u>=C2=A0<u></u></p><div><div><p class=3D"MsoNormal= ">On Thu, May 2, 2019 at 15:14 Michael Fincham <<a href=3D"mailto:michae= [email protected]" target=3D"_blank">[email protected]</a>> wrote:<u= ></u><u></u></p></div><blockquote style=3D"border-top:none;border-right:non= e;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0cm 0cm= 0cm 6pt;margin-left:4.8pt;margin-right:0cm"><p class=3D"MsoNormal">On Fri,= 3 May 2019 09:10:50 +1200<br>Jonathan Brewer <<a href=3D"mailto:jon.bre= [email protected]" target=3D"_blank">[email protected]</a>> wrote:<br><br= >> InternetNZ is the forum to discuss this, not NZNOG.<br><br>Engineers = have a personal responsibility to ensure that the actions they take, even o= n behalf of an employer, are ethically right.<br><br>I do think therefore t= his is a discussion for NZNOG, being as it is a community of engineers who = do the implementing.<br><br>-- <br>Michael<br>_____________________________= __________________<br>NZNOG mailing list<br><a href=3D"mailto:[email protected]= ikato.ac.nz" target=3D"_blank">[email protected]</a><br><a href=3D"h= ttps://list.waikato.ac.nz/mailman/listinfo/nznog" target=3D"_blank">https:/= /list.waikato.ac.nz/mailman/listinfo/nznog</a><u></u><u></u></p></blockquot= e></div></div><p class=3D"MsoNormal">-- <u></u><u></u></p><div><p class=3D"= MsoNormal">Mehmet<br>+1-424-298-1903<u></u><u></u></p></div><p class=3D"Mso= Normal">_______________________________________________<br>NZNOG mailing li= st<br><a href=3D"mailto:[email protected]" target=3D"_blank">NZNOG@l= ist.waikato.ac.nz</a><br><a href=3D"https://list.waikato.ac.nz/mailman/list= info/nznog" target=3D"_blank">https://list.waikato.ac.nz/mailman/listinfo/n= znog</a><u></u><u></u></p></blockquote></div><p class=3D"MsoNormal">_______= ________________________________________<br>NZNOG mailing list<br><a href= =3D"mailto:[email protected]" target=3D"_blank">[email protected]= c.nz</a><br><a href=3D"https://list.waikato.ac.nz/mailman/listinfo/nznog" t= arget=3D"_blank">https://list.waikato.ac.nz/mailman/listinfo/nznog</a><u></= u><u></u></p></blockquote></div></div></div></blockquote></div> --000000000000863d8e058d47131c-- --===============1885536605== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ NZNOG mailing list [email protected] https://list.waikato.ac.nz/mailman/listinfo/nznog --===============1885536605==--