mirror of https://codeberg.org/crimeflare/cloudflare-tor synced 2024-12-29 19:40:30 +01:00

Dan Johns 15171ff97a zu.md

2020-08-25 08:22:47 +02:00

20 KiB

Raw Blame History

I-Cloudwall enhle

Misa i-Cloudflare

🖹	🖼
“I-Cloud Cloudwall” yinkampani iCloudflare Inc., inkampani yase-U.S.Inikezela ngezinsizakalo ze-CDN (inethiwekhi yokulethwa kokuqukethwe), ukuncishiswa kwe-DDoS, ukuphepha kwe-inthanethi, kanye nezinsizakalo ze-DNS (zesizinda segama lesizinda) ezisatshalaliswa.
I-Cloudflare yommeleli omkhulu we-MITM emhlabeni (ummeleli ophambukayo).I-Cloudflare inabanini abangaphezulu kwama-80% wezabelo zemakethe ze-CDN kanye nenani labasebenzisi befu.Bangezelele inethiwekhi yabo emazweni angaphezu kwe-100.I-Cloudflare isebenza nge-web traffic kakhulu kune-Twitter, i-Amazon, i-Apple, i-Instagram, i-Bing ne-Wikipedia ehlanganisiwe.I-Cloudflare inikeza uhlelo lwamahhala futhi abantu abaningi bayayisebenzisa esikhundleni sokumisa amaseva abo kahle.Babedayisa ubumfihlo ngokungcono.
I-Cloudflare ihlala phakathi kwakho nomsuka webserver, esebenza njenge-ejenti yokuhamba umngcele.Awukwazi ukuxhuma endaweni oyikhethile.Uxhuma ku-Cloudflare futhi yonke imininingwane yakho iyathuliswa futhi idluliselwe endibeni.
Umqondisi we-webserver odabuka wavumela i-ejenti - iCloudflare - ukuthi inqume ukuthi ngubani ongangena "empahleni yabo yewebhu" futhi ichaze "indawo ekhawulelwe".
Bheka isithombe esifanele.Uzocabanga ukuthi i-Cloudflare block kuphela abantu ababi.Uzocabanga ukuthi iCloudflare ihlala iku-inthanethi (ungaze wehle).Uzocabanga ukuthi ama-bots bots nabakhandi bangakhombisa iwebhusayithi yakho.
Kodwa-ke lokho akulona iqiniso nakancane.I-Cloudflare ivimba abantu abangenacala ngaphandle kwesizathu.I-Cloudflare ingaya phansi.I-Cloudflare ivimba ama-bots bots.
Njenganoma iyiphi insizakalo yokusingathwa, iCloudflare ayiphelele.Uzobona lesi sikrini noma ngabe iseva yomsuka isebenza kahle.
Ngabe ucabanga ukuthi i-Cloudflare ine-100% isikhathi esengeziwe?Awunangqondo ukuthi iCloudflare yehla kangaki.Uma iCloudflare yehla ikhasimende lakho alikwazi ukungena kuwebhusayithi yakho.
Lokhu kubizwa ngokuthi kubhekiselwa kwi-Great Firewall yaseChina eyenza umsebenzi wokuqhafaza abantu abaningi bangakuboni okuqukethwe kwewebhu (okusho wonke umuntu ezweni lase China kanye nabantu abangaphandle).Ngenkathi ngasikhathi sinye labo abangazange bathinteke ukubona iwebhu ehlukile kakhulu, iwebhu engenakho ukucabanga okufana nesithombe se- “tank man” nomlando wokubhikishelwa “kweTiananmen Square”.
I-Cloudflare inamandla amakhulu.Ngomqondo othile, balawula lokho okubonwa ngumsebenzisi ekugcineni.Uvinjelwe ukuphequlula iwebhusayithi ngenxa ye-Cloudflare.
I-Cloudflare ingasetjenziselwa ukucubungula.
Awukwazi ukubuka iwebhusayithi efakwe amafu uma usebenzisa isiphequluli esincane i-Cloudflare engacabanga ukuthi yi-bot (ngoba ababaningi abantu abayisebenzisayo).
Awukwazi ukudlulisa lokhu "isiphequluli" esingahlaseli ngaphandle kokunika amandla iJavascript.Lokhu ukuchitha imizuzwana emihlanu (noma ngaphezulu) yempilo yakho ebalulekile.
I-Cloudflare futhi ivimba ngokuzenzakalelayo amarobhothi / abakhaseli njenge-Google, Yandex, Yacy, kanye namakhasimende e-API.I-Cloudflare iqapha ngentshiseko umphakathi “odlula i-Cloudflare” umphakathi ngenhloso yokuphula umthetho wokucwaninga ngokusemthethweni.
I-Cloudflare ngokufanayo ivimbela abantu abaningi abanokuxhumana okungaxhunyiwe kwe-inthanethi ukufinyelela amawebhusayithi ngemuva kwayo (ngokwesibonelo, bangaba ngemuva kwezendlalelo ezingama-7+ ze-NAT noma babelane nge-IP efanayo, ngokwesibonelo i-Wifi yomphakathi) ngaphandle kokuthi baxazulule ama-CAPTCHA amaningi wezithombe.Kwezinye izimo, lokhu kuzothatha imizuzu eyi-10 kuye kwengama-30 ukwanelisa iGoogle.
Ngonyaka ka-2020 iCloudflare ishintshe isuka kwiRecaptcha yakwaGoogle yaya ku-hCaptcha njengoba iGoogle ihlose ukuyokhokhisa ukusetshenziswa kwayo.I-Cloudflare ikutshele ukuthi bayayikhathalela ubumfihlo bakho ("kuyasiza ukulungisa ukukhathazeka kobumfihlo") kepha ngokusobala kungamanga.Imayelana nemali."I-hCaptcha ivumela amawebhusayithi ukwenza imali ukwenza lokhu ngenkathi kuvimba ama-bots nezinye izindlela zokuhlukumezeka"
Ngombono womsebenzisi, lokhu akushintshi kakhulu. Uphoqelelwa ukuba uyixazulule.
Abantu abaningi nesoftware bavinjwa yi-Cloudflare nsuku zonke.
I-Cloudflare icasule abantu abaningi emhlabeni jikelele.Bheka uhlu bese ucabanga ukuthi ukwamukela i-Cloudflare kusayithi lakho kulungile kulwazi lomsebenzisi.
Yini inhloso ye-inthanethi uma ungakwazi ukwenza lokho okufunayo?Abantu abaningi abavakashela iwebhusayithi yakho bazomane babheke amanye amakhasi uma bengakwazi ukulayisha ikhasi lewebhu.Ungahle ungavimbeli ngenkani noma yiziphi izivakashi, kepha isibhengezo somlilo esizenzakalelayo se-Cloudflare siqine ngokwanele ukuvimba abantu abaningi.
Ayikho indlela yokuxazulula i-Captcha ngaphandle kokunika amandla iJavascript kanye namakhukhi.I-Cloudflare iyisebenzisela ukwenza isiginesha yesiphequluli ukukubona.I-Cloudflare idinga ukwazi ubunikazi bakho ukunquma ukuthi ngabe u-eligeble ukuze uqhubeke ukuphequlula isiza.
Abasebenzisi be-Tor nabasebenzisi be-VPN nabo bayisisulu se-Cloudflare.Zombili lezi zixazululo zisetshenziswa ngabantu abaningi abangakwazi ukukhokhela i-inthanethi engafundisiwe ngenxa yenqubomgomo yezwe / yabo yenhlangano / yenethiwekhi noma abafuna ukwengeza ungqimba olungeziwe ukuvikela ubumfihlo babo.I-Cloudflare ihlasela ngokungenamahloni labo bantu, ibaphoqa ukuthi bacishe isixazululo sommeleli.
Uma ungazange uzame i-Tor kuze kube manje, sikukhuthaza ukulanda i-Tor Browser futhi uvakashele amawebhusayithi akho owathandayo.Siphakamisa ukuthi ungangeni ngemvume kuwebhusayithi yakho yasebhange noma ekhasini lewebhu likahulumeni noma bazomaka i-akhawunti yakho. Sebenzisa i-VPN kulawo mawebhusayithi.
Ungafuna ukusho ukuthi “iTor ayikho emthethweni! Abasebenzisi be-Tor bayizigebengu! I-Tor is bad! ". Cha.Ungase ufunde ngeTor kumabonakude, uthi iTor ingasetshenziswa ukubhekisisa izibhamu ezimnyama nezokuhweba, izidakamizwa noma i-chid porn.Yize isitatimende esingenhla siliqiniso ukuthi ziningi iwebhusayithi zemakethe lapho ungathenga khona izinto ezinjalo, lawo masayithi nawo avela naku-clearnet.
I-Tor yathuthukiswa Amasosha ase-US, kepha iTor yakhona yathuthukiswa yiphrojekthi yeTor.Kunabantu abaningi nezinhlangano ezisebenzisa iTor kufaka phakathi abangane bakho bakusasa.Ngakho-ke, uma usebenzisa iCloudflare kuwebhusayithi yakho uvimba abantu bangempela.Uzolahlekelwa ubungani obunokwenzeka kanye nesivumelwano sebhizinisi.
Futhi insizakalo yabo ye-DNS, engu-1.1.1.1, iphinda ihlungise abasebenzisi ukuthi bavakashele iwebhusayithi ngokubuyisa ikheli le-IP elingelaphethwe yi-Cloudflare, IPh yasendaweni efana ne- “127.0.0.x”, noma ibuye nje.
I-Cloudflare DNS ibuye igqekeze isoftware eku-inthanethi kusuka kuhlelo lokusebenza lwe-smartphone iye kumdlalo wekhompyutha ngenxa yempendulo yabo engamanga ye-DNS.I-Cloudflare DNS ayikwazi ukubuza amanye amawebhusayithi asebhange.
Futhi lapha ungacabanga, Angisebenzisi iTor noma i-VPN, kungani kufanele nginakekele? Ngiyethemba ukumaketha kwe-Cloudflare, kungani kufanele nginakekele Iwebhusayithi yami yi-https kungani kufanele nginakekele
Uma uvakashela iwebhusayithi esebenzisa i-Cloudflare, wabelana ngemininingwane yakho hhayi kumnikazi wewebhusayithi kuphela kepha futhi ne-Cloudflare.Le ndlela isebenza kanjena isebenza kanjani.
Akunakwenzeka ukuhlaziya ngaphandle kokubeka isiminyaminya i-TLS traffic.
I-Cloudflare yazi yonke imininingwane yakho efana ne-password eluhlaza.
I-Cloudbeed ingenzeka noma nini.
I-Cloudflare's https ayikaze iphele-ukuphela.
Ngabe uyafuna ngempela ukwabelana ngemininingwane yakho ne-Cloudflare, kanye ne-ejensi eyi-3?
Iphrofayili yomsebenzisi e-inthanethi “umkhiqizo” uhulumeni nezinkampani ezinkulu ze-tech afuna ukuzithenga.
UMnyango Wezokuphepha KwaseMelika uthe: Ngabe kukhona umbono wokuthi idatha yakho onayo ibaluleke kangakanani? Ingabe ikhona indlela ongasithengisa ngayo leyo datha?
I-Cloudflare iphinde inikeze insizakalo ye-MAHHALA ye-VPN ebizwa nge- "Cloudflare Warp".Uma uyisebenzisa, konke ukuxhumana kwakho kwe-smartphone (noma ikhompyutha yakho) kuthunyelwa kumaseva we-Cloudflare.I-Cloudflare iyakwazi ukuthi iyiphi iwebhusayithi oyifundile, yikuphi okubhalile oyithumele, okhulume naye ngubani, njll.Ngokuzithandela unikezela yonke imininingwane yakho ku-Cloudflare.Uma ucabanga ukuthi "Uyahlekisa? I-Cloudflare iphephile. ” lapho-ke kufanele ufunde ukuthi i-VPN isebenza kanjani.
I-Cloudflare ithe inkonzo yabo ye-VPN yenza i-inthanethi yakho isheshe.Kodwa i-VPN yenza ukuxhumana kwakho kwe-inthanethi kube kancane kunokuxhuma kwakho okukhona.
Kungenzeka ukuthi usuvele uyazi ngesehlakalo se-PRISM.Kuliqiniso ukuthi i-AT & T ivumela i-NSA ukuthi ikopishe yonke idatha ye-inthanethi ukuze ihlolwe.
Masithi usebenza eNSA, futhi ufuna yonke imininingwane yendawo eyisakhamuzi.Uyazi ukuthi iningi labo lithembela ngokungagxili ku-Cloudflare futhi bayisebenzisa - isango elilodwa elihlanganisiwe - ukubhekela ukuxhumeka kweseva yenkampani yabo (i-SSH / RDP), iwebhusayithi yomuntu siqu, iwebhusayithi yokuxoxa, iwebhusayithi yeforamu, iwebhusayithi yebhange, iwebhusayithi yomshuwalense, injini yokusesha, ilungu eliyimfihlo Iwebhusayithi -yodwa, iwebhusayithi ye-auction, ukuyothenga, iwebhusayithi yevidiyo, iwebhusayithi yeNSFW, newebhusayithi engekho emthethweni.Uyazi futhi ukuthi basebenzisa insizakalo ye-DNS ye-Cloudflare ("1.1.1.1") nensizakalo ye-VPN ("Cloudflare Warp") ye "Londekile! Ngokushesha! Kungcono! ” isipiliyoni se-inthanethi.Ukubahlanganisa nekheli le-IP lomsebenzisi, isithonjana seminwe yesiphequluli, amakhukhi kanye ne-RAY-ID kuzosiza ekwakheni iphrofayili ye-inthanethi yethagethi.
Ufuna idatha yabo. Uzokwenzani?

I-Cloudflare iyi-honeypot.

Uju lwamahhala kuwo wonke umuntu. Imicu ethile inamathiselwe.

Ungasebenzisi i-Cloudflare.

Nika i-inthanethi i-intanethi.

Sicela uqhubeke ekhasini elilandelayo: "Izimiso Zokuziphatha ze-Cloudflare"

_ngichaze_

Imininingwane Nolwazi Olunye

Lokhu kugcina uhlu lwamawebhusayithi angemuva kwe- "The Cloudwall" enkulu, evimba abasebenzisi be-Tor namanye ama-CDN.

Idatha

Imininingwane Ngini

Myth Catalog
The Great Cloudwall, Mr. Jeff Cliff
- Landa: PDF, ePUB
- I-eBook yasekuqaleni (ePUB) isuswe yiBhukuRix GmbH ngenxa yokwephulwa kwamalungelo obunikazi bezinto ze-CC0
Padlock icon indicates a secure SSL connection established w MITM-ed, Anonymous
Block Global Active Adversary Cloudflare, nym-zone
- Ithikithi lonakaliswa kaningi.
- Kususwe yi-Tor Pro. Bheka ithikithi 34175.
- Ithikithi lokugcina lokulondolozwa elingu-24351.
The problem with Cloudflare, stopCloudflare
Cloudflare Watch
Criticism and controversies, Wikipedia
Another landmark day in the war to control, centralize and censor the internet., TheGoldenGoose8888
Disadvantage of relying on only one service (DO is CF)