Okay..WTF? http://ai. Didn’t work on Chrome Mac but it works in Safari for iOS. Is this a bug or how the hell is this possible? It’s flipping everything I thought I knew about domains upside down.
It wasn’t a mistake it was a strategic cost benefit analysis. Many people myself included don’t even use the webcam at all and would rather keep it blocked with a sticker most of the time. If most people statistically don’t use webcam on their MacBook why would it make sense to increase the price to have it? The few times I opened FaceTime app on the MacBook 2020 it looked fine to me anyways. I certainly wouldn’t like paying say an extra $100 for a better webcam I don’t even use.
Why do they think they have the right to kill domains that people have entrusted them with their custodianship? I don't understand why they have to set any domain to pendingDelete status, short of a court order. It sounds like something ripe for abuse. I don't see what the benefit of overzealous deletion is. If they think a domain is malicious they want to stop it they can simply disable it via NS records without actually deleting it for the remainder of the contract payment cycle. People shouldn't have to live in fear that their domain might randomly be deleted with no recourse. Perhaps new legislation is necessary to protect people's domains from random registrar deletion.
The process wasn't described inaccurately in the OP post. What you said here doesn't contradict anything in the OP post and infact confirms that it happened.
>domains determined to be malicious registrations/transfers may be deleted
The person in the story's domain was determined to be malicious and deleted for fraud. (however in reality it wasn't) and thus deleted, like you said.
>Cloudflare allows transfers of domains out of Cloudflare’s registrar immediately, unless there are indications of potentially malicious or fraudulent activity.
This is what the OP post described has happened in the story. The person's domain was determined fraudulent and was thus disallowed from transfering out, like you said.
>Cloudflare follows the standard industry practice followed by virtually all domain registrars of blocking the transfer out of domains deleted for what appears to be potentially malicious purposes.
The fact is, a serious mistake was made by Cloudflare and evidently the guy had no way to appeal the decision outside of Hacker News. It is clear that this industry practice needs reform. Perhaps instead of trying to dismiss/downplay this your time would be better spent improving the process or maybe implementing some form of due process/trial for these extremely important accounts. An accidental domain deletion seems to be no big deal to you. But in reality its a nightmare that can cause serious harm to a persons life and livelihood.
Try to imagine it yourself how it would feel. if one day all your important accounts stopped working. all your domains has been hijacked! Why? because your registrar set it to DELETED on short notice due to random false-positive-fraud and a sniper re-registers it elsewhere! there is nothing you can do about it, your registrar stonewalls you. You're completely screwed and theres nothing you can do about it. Your valuable domain is gone. All your important accounts tied to email on that domain get broken into. Your companies and brand are destroyed. No one ever suspects their properly secured domain name will randomly be DELETED in < than the time it was registered for. This is a really traumatic event for people and not something that should be minimized.
Not everyone shares your enthusiasm. Yes, this is good for foreigners and corporations but it comes at the expense of native workers. it suppresses wages(often times immigrants are willing to do the same jobs at lower salaries), as well as makes it more difficult for native workers to find a job due to increased competition.
I implore you to consider alerting media outlets about Cloudflares abusive actions anyway. More needs to be down to expose CloudFlare’s abusive actions. They can’t keep getting away with this.
It’s sickening. They are committing a massive crime here and getting away with it. It’s time somebody alerts the media and blow the whistle on Cloudflares abusive actions.
I wonder how many customers domains Cloudflare stole/deleted who’s owner didn’t have the luxury of knowing the Hacker News publicity trick?
That’s terrifying. By far the worst part of this. If they ban somebody for TOS violations that is fair, but preventing people from transferring out their domain and setting it to pendingdelete is really insidious. What they are doing is akin to stealing anyone domain name permanently with no recourse. This may be grounds for a lawsuit.
In the US, anyones company can be financially destroyed by wealthy competitors who abuse the corrupt legal system via bad faith lawsuits like this one. In this case, his $35 million business is being destroyed by Match because simply because the name contains the simple English word “match”—a common word associated with matchmaking-a common word associated with dating services for decades before match.com existed, and also because it briefly utilized a “swipe” left/right system for likes—a most basic UI interaction concept which should never have been allowed a copyright to begin with. I’ve heard many such stories of companies being destroyed by having to pay 6-7 figure sums defending themselves from frivolous lawsuits like this one. The courts here are so corrupt here that it saddens me and made me lose faith after hearing so many such stories.
Stuff like this is what me lose all faith/hope/trust in the US legal system. I used to be a patriotic and loyal citizen but after reading so many similar such stories of injustice, I no longer believe that this country’s evil and corrupt system is worth protecting.
> How could a third party like Cloudflare protect my unprotected IP address?
Simple, they could scan the internet like I explained and notify their customers who’s site IP is findable this way with a big scary warning message. They could do this easily and cheaply, but for some reason they don’t.
Say that, despite your linked recommendations for hiding the public IP, thousands of customers were under the impression that as long as no one leaked the IP, no one would be able to discover the site. They’re paying you a lot of money for security, yet that security can be completely undermined by a teen with a scanner tool. If there’s thousands of clients paying for anti-DDOS services yet their IP is easily findable, then it’s like…what are they even paying for? On a scale of thousands this probably adds up to a large sum of money…Money paid for pointless services rendered.
Thanks for clarifying that it had to be Github. The post you replied to says Gitbub or Cloudflare take it down. Either way, this issue should be brought to customers attention more clearly. Most people probably don’t know that the entire internet can be scanned in a matter of hours or days which might uncover their site. I’m curious how many customers are paying for your anti-ddos service yet their sites are easily findable using such a tool effectively rendering the service useless. Do you scan the internet yourself and proactively warn customers when their real IP is findable in this way?
It’s a story in itself that a simple script which locates a site’s real IP was taken down for TOS violations. Cloudflare doesn’t own the real IPs or something so it’s really unclear why they (or GitHub) were entitled to take down this repository. Just because it threatens their million dollar buisness model they think they can take it down? That’s wrong my friend. And people need to know. Cloudflare or GitHub overstepped it’s boundaries to help a corporation enforce security by obscurity. Since this method is proven to be preventable, why take it down? Instead of taking it down from public knowledge (which does nothing to stop cybercriminals with private forks) why don’t they help their customers mitigate the impact instead?
Also, they stopped blocking the Tor IPs now but this wasn’t always the case. Many people remember a few years ago the IPs were blocked.
I don’t trust Shodan (a Corporation) not to hide / omit certain results or certain ranges. A self hosted scanner that could be deployed on a cheap VPS would be a better solution. having the ability to scan the entire internet is pretty fascinating honestly. Who knows what kind of sick and bizarre content dredging the entire internet with no filters might dig up.
Because http://com. Works as well.