willieWonka
/
deCloudflare
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

This commit is contained in:
Emily Wimmer 2021-04-13 23:40:33 +00:00
parent fd0b620630
commit e006fde2bc
1 changed files with 29 additions and 28 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

57
subfiles/the_trouble_with_codeberg.md
View File

@ -8,20 +8,21 @@ In 2021, Codeberg took down the project alleging libel.
The CFT project is a non-profit charitable effort to The CFT project is a non-profit charitable effort to
promote decentralization, network neutrality, and privacy with promote decentralization, network neutrality, and privacy with
Cloudflare (a top adversary of that cause) as the core focus. CFT [Cloudflare](../README.md) (a top adversary of that cause) as the core focus.
project provides a variety of free software tools to help protect the CFT project provides a variety of free software tools to help protect the
general public from Cloudflare. An important component of protecting general public from Cloudflare.
the community from Cloudflare is documenting websites that subject An important component of protecting the community from Cloudflare is
people to the harms of Cloudflare by maintaining a massive list of documenting websites that subject people to the harms of Cloudflare by
websites to avoid. maintaining a [massive list](../cloudflare_users/domains) of websites to avoid.
Unlike other tech giant adversaries to the CFT cause such as GAFAM Unlike other tech giant adversaries to the CFT cause such as [GAFAM](https://en.wikipedia.org/wiki/GAFAM)
(Google Amazon Facebook Apple Microsoft), Cloudflare operates (Google, Amazon, Facebook, Apple, Microsoft), Cloudflare operates
surreptitiously and largely unknown to the general public, despite surreptitiously and largely unknown to the general public, despite
having access to ~20-30%+ of the world's web traffic and 80%+ of CDN having access to ~20-30%+ of the world's web traffic and 80%+ of CDN
market. Their existence is so much in the shadows that privacy orgs market.
like EFF are largely oblivious to the threat of it. Mainstream Their existence is so much in the shadows that privacy orgs
privacy orgs not only neglect to protect web users from Cloudflare, like "[Electronic Frontier Foundation](https://en.wikipedia.org/wiki/Electronic_Frontier_Foundation)" are largely oblivious to the threat of it.
Mainstream privacy orgs not only neglect to protect web users from Cloudflare,
but some of them actually naively use Cloudflare themselves and but some of them actually naively use Cloudflare themselves and
unwittingly work against their own interest and declared purpose. unwittingly work against their own interest and declared purpose.
Some privacy and ethics advice sites like "Switching Software" Some privacy and ethics advice sites like "Switching Software"
@ -60,9 +61,9 @@ gained trust by posing as those who support the CFT cause.
Transparency is essential in exposing the corporate bias behind the Transparency is essential in exposing the corporate bias behind the
information and advice you are getting. For example, a forum for talk information and advice you are getting. For example, a forum for talk
about bicycles might require Brompton representatives to be tagged as about bicycles might require [Brompton](https://en.wikipedia.org/wiki/Brompton_Bicycle) representatives to be tagged as
such so that other users are aware of the bias behind their posts. It such so that other users are aware of the bias behind their posts.
would actually be reckless *not* to identify such conflicts of It would actually be reckless *not* to identify such conflicts of
interest. This is particularly important when dealing with Cloudflare interest. This is particularly important when dealing with Cloudflare
because they have proven to publish misinformation regularly. because they have proven to publish misinformation regularly.
Codeberg's move to conceal who represents a company ultimately Codeberg's move to conceal who represents a company ultimately
@ -83,10 +84,9 @@ was not collected on social media aliases even if it was public.
> explicit consent of the person in question is illegal in EU. > explicit consent of the person in question is illegal in EU.
When a user posts a tweet, they do so with consent to the publication When a user posts a tweet, they do so with consent to the publication
of that tweet. If Codeberg's assertion above were true, then Nitter of that tweet. If Codeberg's assertion above were true, then Twitter mirror sites
would be banned in Germany for republishing the tweets of Germans. We would be banned in Germany for republishing the tweets of Germans.
know this is not true because Germans have access to the Nitter We know this is not true because Germans have access to the mirror sites.
network.
Codeberg's false accusation of illegal activity came with destructive Codeberg's false accusation of illegal activity came with destructive
removal of forked repositories removal of forked repositories
@ -123,12 +123,12 @@ is designed to deceive the public while dodging legal accountability.
> - Considering reports we received, a significant number of claims and > - Considering reports we received, a significant number of claims and
> statements were factually false. > statements were factually false.
CFT has received only one complaint. It involved one social media CFT has received only **one** complaint. It involved one social media
alias that was listed and it turned out to be a misunderstanding alias that was listed and it turned out to be a misunderstanding
surrounding the word "*support*". The listed party claimed to not surrounding the word "*support*". The listed party claimed to not
personally condone Cloudflare and thus claimed to not be a Cloudflare personally condone Cloudflare and thus claimed to not be a Cloudflare
"supporter" on that basis. But investigation of "supporter" on that basis.
[public statements](https://codeberg.org/swiso/website/issues/141#issuecomment-69593) But investigation of [public statements](https://codeberg.org/swiso/website/issues/141#issuecomment-69593)
by that individual revealed that the other party actually supported by that individual revealed that the other party actually supported
Cloudflare operationally. Note that Codeberg destroyed the Cloudflare operationally. Note that Codeberg destroyed the
investigation logs which led to the finding, so we can't cite them investigation logs which led to the finding, so we can't cite them
@ -155,7 +155,7 @@ advocacy sites to address the problem of detrimental advice.
### Analysis of Codeberg's Blog Announcement ### Analysis of Codeberg's Blog Announcement
Codeberg [said](https://blog.codeberg.org/on-the-cloudflare-tor-takedown.html): Codeberg [said](https://web.archive.org/web/20210406012737/https://blog.codeberg.org/on-the-cloudflare-tor-takedown.html):
> In the last couple of days, we have received multiple inquiries to > In the last couple of days, we have received multiple inquiries to
> remove **sensitive information** from the crimeflare/cloudflare-tor > remove **sensitive information** from the crimeflare/cloudflare-tor
@ -164,11 +164,11 @@ Codeberg [said](https://blog.codeberg.org/on-the-cloudflare-tor-takedown.html):
(emphasis added) (emphasis added)
Data published by Twitter and public forums is not sensitive. Anyone Data published on Twitter and public forums is not sensitive. Anyone
who posts in a public space and later has regrets, they have only who posts in a public space and later has regrets, they have only
themselves to blame. themselves to blame.
Privacy is like virginity: once you lose it, you can't have it back. Once you share your information publicly, you can't control them anymore.
> We have been made aware that this repository contains lists of > We have been made aware that this repository contains lists of
> usernames that are either linked with their Codeberg profile or > usernames that are either linked with their Codeberg profile or
@ -205,15 +205,16 @@ identifiable. This Regulation does not therefore concern the
processing of such anonymous information, including for statistical or processing of such anonymous information, including for statistical or
research purposes." research purposes."
``` ```
CFT's Cloudflare supporter list did not contain real names; only
CFT's [Cloudflare supporter list](../cloudflare_users/cloudflare_supporter.md) did not contain real names; only
pseudoanonymous aliases. pseudoanonymous aliases.
The listed alias of the subject who complained did not use an alias The listed alias of the subject who complained did not use an alias
formed like "firstname_lastname", or any form that could reasonably formed like "firstName_lastName", or any form that could reasonably
identify a natural individual person. identify a natural individual person.
The sole complaint CFT received lead to an investigation that found The sole complaint CFT received lead to an investigation that found
the data accurate. Even though the GDPR right to be forgotten does the data **accurate**. Even though the GDPR right to be forgotten does
not have force in that case, it was removed anyway and therefore CFT not have force in that case, it was removed anyway and therefore CFT
was (and remains) in compliance with the GDPR right to be forgotten. was (and remains) in compliance with the GDPR right to be forgotten.
@ -251,4 +252,4 @@ ignored in the absence of evidence.
--- ---
Original text provided by [humanacollaborator](https://git.sdf.org/humanacollaborator) / [GNU Affero General Public License](../LICENSE.md) Original text provided by [humanacollaborator](https://git.sdf.org/humanacollaborator). [License](../LICENSE.md)