News for hackers. Stuff that matters.

A comment on Stay Away from Cloudflare (2017). Parent comment

Re:Stay Away from Cloudflare (2017) by remram on Thursday June 17, 2021 @02:01PM (#27542487)
> The only reason they couldn't fully steal DNS settings was I had 2FA enabled with my registrars and on my email account

This sounds like they had your password?

[ Parent | on HN ]
Re:Stay Away from Cloudflare (2017) by crummybowley on Thursday June 17, 2021 @03:29PM (#27543581)
Also seems like CF jumped the gun on letting their servers serve content to their own servers -- seems like CF fucked up too.

Like, when you are CF big you can't just start resolving domains however you feel because folks use your DNS service.

[ Parent | on HN ]
Re:Stay Away from Cloudflare (2017) by remram on Thursday June 17, 2021 @04:42PM (#27544338)
If their 8.8.8.8 resolver was returning results from customer accounts that weren't verified, like the GP seems to imply, that seems like a huge security problem.
[ Parent | on HN ]
Re:Stay Away from Cloudflare (2017) by warrenm on Friday June 18, 2021 @10:19AM (#27550585)
1.1.1.1 ... 8.8.8.8 is google :)
[ Parent | on HN ]
Re:Stay Away from Cloudflare (2017) by warrenm on Friday June 18, 2021 @10:19AM (#27550583)
but ... but ... but!

free markets!

/s

[ Parent | on HN ]
Re:Stay Away from Cloudflare (2017) by crummybowley on Tuesday June 29, 2021 @02:59PM (#27680224)
This is not a free market issue. Free market does not mean companies can do what they want.
[ Parent | on HN ]
Re:Stay Away from Cloudflare (2017) by warrenm on Thursday July 08, 2021 @04:17PM (#27777089)
Hence the "/s" :)
[ Parent | on HN ]
Re:Stay Away from Cloudflare (2017) by warrenm on Friday June 18, 2021 @07:44AM (#27549379)
Nope - they didn't change anything with the registrars

But Cloudflare still let them start making DNS entries

[ Parent | on HN ]