From a6fe7cdd461f4d9f887b1489da182f8528d6dbf2 Mon Sep 17 00:00:00 2001 From: Beth Watson <43a88b47479bfbad2914a3aa1253919fa9375417@cloudflare.com> Date: Wed, 21 Apr 2021 10:47:05 +0000 Subject: [PATCH] --- readme/translateData/TEMPLATE.ethics.tab | 444 +++++++++++++++++------ 1 file changed, 335 insertions(+), 109 deletions(-) diff --git a/readme/translateData/TEMPLATE.ethics.tab b/readme/translateData/TEMPLATE.ethics.tab index f599d876..6b60d98a 100644 --- a/readme/translateData/TEMPLATE.ethics.tab +++ b/readme/translateData/TEMPLATE.ethics.tab @@ -1,109 +1,335 @@ -clickme click me -ethx0000 Ethical Issues -ethx0001 Don't support this company which is void of ethics -ethx0002 Your company isn't trustworthy. You claim to enforce DMCA but have many lawsuits for not doing so. -ethx0003 They only censor those who question their ethics. -ethx0004 I guess the truth is inconvenient and better hidden from public view. -ethx1n0000 CloudFlare spams people -ethx1n0001 Cloudflare is sending spam emails to non-Cloudflare users. -ethx1n0002 Only send emails to subscribers who've opted in -ethx1n0003 When the user say "stop", then stop sending email -ethx1n0004 It's that simple. But Cloudflare doesn't care. -ethx1n0005 Cloudflare said using their service can stop all spammers or attackers. -ethx1n0006 How can we stop Cloudflare without activating Cloudflare? -ethx2n0000 Remove user's review -ethx2n0001 Cloudflare censor negative reviews. -ethx2n0002 If you post anti-Cloudflare text on Twitter, you have a chance to get a reply from Cloudflare employee with "No, it's not" message. -ethx2n0003 If you post a negative review on any review site, they will try to censor it. -ethx3n0000 Share user's private information -ethx3n0001 Cloudflare has a massive harassment problem. -ethx3n0002 Cloudflare shares personal information of those who complain about hosted sites. -ethx3n0003 They sometimes ask you to provide your true ID. -ethx3n0004 If you don't want to get harassed, assaulted, swatted or killed, you better stay away from Cloudflared websites. -ethx4n0000 Corporate solicitation of charitable contributions -ethx4n0001 CloudFlare is asking for charitable contributions. -ethx4n0002 It's quite appalling that an American corporation would ask for charity alongside non-profit organizations that have good causes. -ethx4n0003 If you like blocking people or wasting other people's time, you might want to order some pizzas for Cloudflare employees. -ethx5n0000 Terminating sites -ethx5n0001 What will you do if your site goes down suddenly? -ethx5n0002 There are reports that Cloudflare is deleting user's configuration or stopping service without any warning, silently. -ethx5n0003 We suggest you find better provider. -ethx6n0000 Browser vendor discrimination -ethx6n0001 CloudFlare gives preferential treatment to those using Firefox while giving hostile treatment to users of non-Tor-Browser over Tor. -ethx6n0002 Tor users of who rightfully refuse to execute non-free javascript also receive hostile treatment. -ethx6n0003 This access inequality is a network neutrality abuse and an abuse of power. -ethx6n0004 Left: Tor Browser , Right: Chrome. Same IP address. -ethx6n0005 Left: Tor Browser Javascript Disabled, Cookie Enabled -ethx6n0006 Right: Chrome Javascript Enabled, Cookie Disabled -ethx6n0007 QuteBrowser(minor browser) without Tor (Clearnet IP) -ethx6n0008 Browser -ethx6n0009 Access treatment -ethx6n0010 Javascript enabled -ethx6n0011 Javascript disabled -ethx6n0012 Cookie disabled -ethx6n0013 access permitted -ethx6n0014 access degraded -ethx6n0015 access denied -ethx6n0016 Why not use Audio button to solve easy challenge? -ethx6n0017 Yes, there is an audio button, but it always doesn't work over Tor. -ethx6n0018 You will get this message when you click it -ethx6n0019 Try again later -ethx6n0020 Your computer or network may be sending automated queries. -ethx6n0021 To protect our users, we can't process your request right now. -ethx6n0022 For more details visit our help page -ethx7n0000 Voter suppression -ethx7n0001 Voters in US states register to vote ultimately through the state secretary's website in the state of their residence. -ethx7n0002 Republican-controlled state secretary offices engage in voter suppression by proxying the state secretary's website through Cloudflare. -ethx7n0003 Cloudflare's hostile treatment of Tor users, its MITM position as a centralized global point of surveillance, and its detrimental role overall makes prospective voters reluctant to register. -ethx7n0004 Liberals in particular tend to embrace privacy. -ethx7n0005 Voter registration forms collect sensitive information about a voter's political leaning, personal physical address, social security number, and date of birth. -ethx7n0006 Most states only make a subset of that information publicly available, but Cloudflare sees all that information when someone registers to vote. -ethx7n0007 Note that paper registration does not circumvent Cloudflare because the secretary of state data entry staff workers will likely use the Cloudflare website to enter the data. -ethx7n0008 Change.org is a famous website for gathering votes and take action. -ethx7n0009 people everywhere are starting campaigns, mobilizing supporters, and working with decision makers to drive solutions. -ethx7n0010 Unfortunately, many people cannot view change.org at all due to Cloudflare's aggressive filter. -ethx7n0011 They are being blocked from signing the petition, thus excluding them from a democratic process. -ethx7n0012 Using other non-cloudflared platform such as OpenPetition helps remedy the problem. -ethx7n0013 Cloudflare's "Athenian Project" offers free enterprise-level protection to state and local election websites. -ethx7n0014 They said "their constituents can access election information and voter registration" but this is a lie because many people just can't browse the site at all. -ethx8n0000 Ignoring user's preference -ethx8n0001 If you opt-out something, you expect that you receive no email about it. -ethx8n0002 Cloudflare ignore user's preference and share data with third-party corporations without customer's consent. -ethx8n0003 If you're using their free plan, they sometimes send email to you asking to buy monthly subscription. -ethx9n0000 Lying about deleting user's data -ethx9n0001 According to this ex-cloudflare customer's blog, Cloudflare is lying about deleting accounts. -ethx9n0002 Nowadays, many companies keep your data after you've closed or removed your account. -ethx9n0003 Most of good companies do mention about it in their privacy policy. -ethx9n0004 Cloudflare? No. -ethx9n0005 CloudFlare sent me confirmation that they'd removed my account. -ethx9n0006 I received an email from CloudFlare "because I am a customer" -ethx9n0007 Cloudflare didn't know about the word "remove". -ethx9n0008 If it is really removed, why this ex-customer got an email? -ethx9n0009 He also mentioned that Cloudflare's privacy policy doesn't mention about it. -ethx9n0010 Their new privacy policy doesn't make any mention of retaining data for a year. -ethx9n0011 How can you trust Cloudflare if their privacy policy is a LIE? -ethx9n0012 Over a year passed since I cancelled my Cloudflare account -ethx10n0000 Keep your personal information -ethx10n0001 Deleting Cloudflare account is hard level. -ethx10n0002 Submit a support ticket using the "Account" category, -ethx10n0003 and request account deletion in the message body. -ethx10n0004 You must have no domains or credit cards attached to your account prior to requesting deletion. -ethx10n0005 You will receive this confirmation email. -ethx10n0006 "We have begun to process your deletion request" but "We will continue to store your personal information". -ethx10n0007 Can you "trust" this? -ethx10n0008 How to cancel your Cloudflare account -ethx10n0009 Login to your Cloudflare dashboard. -ethx10n0010 Delete all zones(domains) from your dashboard. -ethx10n0011 Click support link. -ethx10n0012 Send a new ticket. Tell them that you want to close your account. -ethx10n0013 Wait several days. -ethx10n0014 Cloudflare staff will ask for your confirmation and the reason why you have decided to leave Cloudflare. -ethx10n0015 Send a reply again. -ethx10n0016 You will get a message: We have successfully deleted your account -ethx11n0000 Cancelled subscription, got barrage of emails -ethx11n0001 The user cancelled his stream subscription and now he gets email reminders every day to remind him about cancelled subscription. -ethx11n0002 There is no unsubscribe button. How do you make this stop? -ethx11n0003 Cloudflare told this user to contact support and ask all your contents to be deleted. -other1nfo Other information -pleasenext Please continue to next page -uactionmd What you can do to resist Cloudflare? \ No newline at end of file +# 👋 [_Non-English_ versions](../README.md) +




+ + +--- + + +# Ethical Issues + +![](../image/itsreallythatbad.jpg) +![](../image/telegram/c81238387627b4bfd3dcd60f56d41626.jpg) + +"_Don't support this company which is void of ethics_" + +"_Your company isn't trustworthy. You claim to enforce DMCA but have many lawsuits for not doing so._" + +"_They only censor those who question their ethics._" + +"_I guess the truth is inconvenient and better hidden from public view._" -- [phyzonloop](https://twitter.com/phyzonloop) + + +--- + + +
+_click me_ + +## CloudFlare spams people + + + +Cloudflare is sending spam emails to non-Cloudflare users. + +- Only send emails to subscribers who’ve opted in +- When the user say "stop", then stop sending email + +It's that simple. But Cloudflare doesn't care. +Cloudflare said using their service [can stop all spammers or attackers](https://support.cloudflare.com/hc/en-us/articles/200170066-Will-activating-Cloudflare-stop-all-spammers-or-attackers-). +How can we stop _Cloudflare spammers_ without activating Cloudflare? + + +| 🖼 | 🖼 | +| --- | --- | +| ![](../image/cfspam01.jpg) | ![](../image/cfspam03.jpg) | +| ![](../image/cfspam02.jpg) | ![](../image/cfspambrittany.jpg)
![](../image/cfspamtwtr.jpg) | + +
+ +--- + +
+_click me_ + +## Remove user's review + + + +Cloudflare censor [negative reviews](https://web.archive.org/web/20191116004046/https://www.trustpilot.com/reviews/5aa6ee0ed5a5700a7c8cf853). If you post _anti-Cloudflare_ text on Twitter, you have a chance to get a [reply](https://twitter.com/CloudflareHelp/status/1126051764917145601) from [Cloudflare employee](cloudflare_inc/cloudflare_members.txt) with "_[No, it's not](PEOPLE.md)_" message. If you post a negative review on any review site, they will try to [censor](https://twitter.com/phyzonloop/status/1178836176985366529) [it](https://twitter.com/dxgl_org/status/1178722159432220672). + + +| 🖼 | 🖼 | +| --- | --- | +| ![](../image/cfcenrev_01.jpg)
![](../image/cfcenrev_02.jpg) | ![](../image/cfcenrev_03.jpg) | + +
+ +--- + +
+_click me_ + +## Share user's private information + + + +Cloudflare has a massive [harassment problem](https://web.archive.org/web/20171024040313/http://www.businessinsider.com/cloudflare-ceo-suggests-people-who-report-online-abuse-use-fake-names-2017-5). +Cloudflare [shares personal information](https://archive.ph/ePdvi) of those [who](https://twitter.com/ZJemptv/status/898299709634248704) [complain](https://twitter.com/TinyPirate/status/554718958176067584) [about](https://twitter.com/remembrancermx/status/1010329041235148802) [hosted](https://twitter.com/Bridaguy/status/915003769280172037) [sites](https://twitter.com/HelloAndrew/status/897260208845500416). They sometimes ask you to provide +your true ID. If you don't want to get harassed, [assaulted](https://twitter.com/NiteShade925/status/1158469203420205056), [swatted](https://boingboing.net/2015/01/19/invasion-boards-set-out-to-rui.html) or [killed](https://twitter.com/RusEmbUSA/status/1187363092793040901), you better stay away from Cloudflared websites. + + +| 🖼 | 🖼 | +| --- | --- | +| ![](../image/cfdox_what.jpg) | ![](../image/cfdox_swat.jpg) | +| ![](../image/cfdox_kill.jpg) | ![](../image/cfdox_threat.jpg) | +| ![](../image/cfdox_dox.jpg) | ![](../image/cfdox_ex1.jpg)
![](../image/cfdox_ex2.jpg) | + +
+ +--- + +
+_click me_ + +## Corporate solicitation of charitable contributions + + + +CloudFlare is [asking](https://web.archive.org/web/20191112033605/https://opencollective.com/cloudflarecollective#section-about) for charitable contributions. It’s quite appalling that an American corporation would ask for charity alongside non-profit organizations that have good causes. If you like [blocking people or wasting other people's time](PEOPLE.md), you might want to order some pizzas🍕 for Cloudflare employees. + + +![](../image/cfdonate.jpg) + +
+ +--- + +
+_click me_ + +## Terminating sites + + + +What will you do if your site goes down _suddenly_? There are reports that Cloudflare is [deleting](https://twitter.com/stefan_eady/status/1126033791267426304) [user's](https://twitter.com/derivativeburke/status/903755267053117440) [configuration](https://twitter.com/lordscarlet/status/1046785164792205314) or [stopping service without any warning](https://twitter.com/svolentin/status/1227324408475344896), [silently](https://twitter.com/BlnaryMlke/status/1194339461984854018). We suggest you find [better provider](what-to-do.md). + +![](../image/cftmnt.jpg) + +
+ +--- + +
+_click me_ + +## Browser vendor discrimination + + + +CloudFlare gives preferential treatment to those using Firefox while giving hostile treatment to users of non-Tor-Browser over Tor. +Tor users of who rightfully refuse to execute non-free javascript also receive hostile treatment. +This access inequality is a network neutrality abuse and an abuse of power. + +![](../image/browdifftbcx.gif) + +- Left: `Tor Browser` , Right: `Chrome`. Same IP address. + +![](../image/browserdiff.jpg) + +- Left: `[Tor Browser] Javascript Disabled, Cookie Enabled` +- Right: `[Chrome] Javascript Enabled, Cookie Disabled` + +![](../image/cfsiryoublocked.jpg) + +- QuteBrowser(minor browser) without Tor (Clearnet IP) + +![](../image/lynx_cloudflare.gif) + +- Lynx + + +| ***Browser*** | ***Access treatment*** | +| --- | --- | +| Tor Browser (Javascript enabled) | access permitted | +| Firefox (Javascript enabled) | access degraded | +| Chromium (Javascript enabled) | access degraded (pushes Google reCAPTCHA) | +| Chromium or Firefox (Javascript disabled) | access denied (pushes *broken* Google reCAPTCHA) | +| Chromium or Firefox (Cookie disabled) | access denied | +| QuteBrowser | access denied | +| lynx | access denied | +| w3m | access denied | +| wget | access denied | + + +"_Why not use Audio button to solve easy challenge?_" + +Yes, there is an audio button, but it _always_ [doesn't work over Tor](https://trac.torproject.org/projects/tor/ticket/23840). You will get this message when you click it: + +``` +Try again later +Your computer or network may be sending automated queries. +To protect our users, we can't process your request right now. +For more details visit our help page +``` + +
+ +--- + +
+_click me_ + +## Voter suppression + + + +Voters in US states register to vote ultimately through the state secretary's website in the state of their residence. +Republican-controlled state secretary offices engage in voter suppression by proxying the state secretary's website through Cloudflare. +Cloudflare's hostile treatment of Tor users, its MITM position as a centralized global point of surveillance, and its detrimental role overall +makes prospective voters reluctant to register. Liberals in particular tend to embrace privacy. Voter registration forms collect sensitive information about a voter's political leaning, personal physical address, social security number, and date of birth. +Most states only make a subset of that information publicly available, but Cloudflare sees ***all*** that information when someone registers to vote. + +Note that paper registration does not circumvent Cloudflare because the secretary of state data entry staff workers will likely use the +Cloudflare website to enter the data. + +| 🖼 | 🖼 | +| --- | --- | +| ![](../image/cfvotm_01.jpg) | ![](../image/cfvotm_02.jpg) | + +- Change.org is a famous website for gathering votes and take action. "[people everywhere are starting campaigns, mobilizing supporters, and working with decision makers to drive solutions.](https://web.archive.org/web/20200206120027/https://www.change.org/about)" +Unfortunately, many people cannot view change.org at all due to Cloudflare's aggressive filter. They are being blocked from signing the petition, thus excluding them from a democratic process. Using other non-cloudflared platform such as [OpenPetition](https://www.openpetition.eu/content/about_us) helps remedy the problem. + +| 🖼 | 🖼 | +| --- | --- | +| ![](../image/changeorgasn.jpg) | ![](../image/changeorgtor.jpg) | + +- Cloudflare's "[Athenian Project](https://www.cloudflare.com/athenian/)" offers free enterprise-level protection to state and local election websites. They said "_their constituents can access election information and voter registration_" but this is a lie because many people just can't browse the site at all. + +
+ +--- + +
+_click me_ + +## Ignoring user's preference + + + +If you opt-out something, you expect that you receive no email about it. Cloudflare ignore user's preference and share data with third-party corporations [without customer's consent](https://twitter.com/thexpaw/status/1108424723233419264). If you're using their free plan, they sometimes send email to you asking to buy monthly subscription. + +![](../image/cfviopl_tp.jpg) + +
+ +--- + +
+_click me_ + +## Lying about deleting user's data + + + +According to this [ex-cloudflare customer's blog](https://shkspr.mobi/blog/2019/11/can-you-trust-cloudflare-with-your-personal-data/), Cloudflare is lying about deleting accounts. Nowadays, many [companies keep your data](https://justdeleteme.xyz/) after you've closed or removed your account. Most of good companies do mention about it in their privacy policy. Cloudflare? No. + +``` +2019-08-05 CloudFlare sent me confirmation that they'd removed my account. +2019-10-02 I received an email from CloudFlare "because I am a customer" +``` + +Cloudflare didn't know about the word "remove". If it is really _removed_, why this ex-customer got an email? He also mentioned that Cloudflare's privacy policy doesn't mention about it. + +``` +Their new privacy policy doesn't make any mention of retaining data for a year. +``` + +![](../image/cfviopl_notdel.jpg) + +How can you trust Cloudflare if [their privacy policy is a LIE](https://twitter.com/daviddlow/status/1197787135526555648)? + +- [Over a year passed since I cancelled my Cloudflare account](https://shkspr.mobi/blog/2020/09/dont-trust-cloudflare-with-your-personal-data/) + +
+ +--- + +
+_click me_ + +## Keep your personal information + + + +Deleting Cloudflare account is [hard level](https://justdeleteme.xyz/). + +``` +Submit a support ticket using the "Account" category, +and request account deletion in the message body. +You must have no domains or credit cards attached to your account prior to requesting deletion. +``` + +You will [receive this confirmation email](https://twitter.com/originalesushi/status/1199041528414527495). + +![](../image/cf_deleteandkeep.jpg) + +"We have begun to process your deletion request" but "We will continue to store your personal information". + +Can you "trust" this? + + +- How to cancel your Cloudflare account + +1. Login to your [Cloudflare dashboard](https://dash.cloudflare.com/). +2. Delete all zones(domains) from your dashboard. +3. Click _support_ link. +4. Send a new ticket. Tell them that you want to close your account. +5. _Wait several days._ +6. Cloudflare staff will ask for your confirmation and the reason why you have decided to leave Cloudflare. +7. Send a reply again. +8. _Wait several days._ +9. You will get a message: "We have successfully deleted your account" + + +
+ +--- + +
+_click me_ + +## Cancelled subscription, got barrage of emails + + + +The user cancelled his stream subscription and now he gets email reminders every day to remind him about cancelled subscription. +There is no unsubscribe button. How do you make this stop? + +![](../image/barrageemailcancelsubscription.jpg) + +Cloudflare told this user to contact support and ask all your contents to be deleted. + +- [t](https://web.archive.org/web/20210412165334/https://twitter.com/JohnHaldson/status/1381651569247088650) + +
+ +--- + +## Other information + +- [Joseph Sullivan (Joe Sullivan)](../cloudflare_inc/cloudflare_members.md) ([Cloudflare CSO](https://twitter.com/eastdakota/status/1296522269313785862)) + - [Ex-Uber security head charged in connection with the cover-up of a 2016 hack that affected 57 million customers](https://www.businessinsider.com/uber-data-hack-security-head-joe-sullivan-charged-cover-up-2020-8) + - [Former Chief Security Officer For Uber Charged With Obstruction Of Justice](https://www.justice.gov/usao-ndca/pr/former-chief-security-officer-uber-charged-obstruction-justice) + +``` +Sullivan took to allegedly cover it up, including making the $100,000 payout +under Uber's "bug bounty" program. +``` + +--- + + +## Please continue to next page: "[What you can do to resist Cloudflare?](en.action.md) + +![](../image/freemoldybread.jpg) +![](../image/cfisnotanoption.jpg)