News for hackers. Stuff that matters.
Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by viraptor on Monday September 05, 2022 @08:39AM (#32723615)
My headcanon is that Price wanted to take a stand, but the legal team actually took a better look at the situation because of the pressure and had a long meeting, explaining to him why it's a really bad idea. I hope we learn what really happened in a few years.

Reason: twice I sent messages directly to appropriate teams at (large-companies) with something like "are you aware of what your ceo is doing at (link)" which was followed by the team sending a new response and ceo disappearing from that conversation.

Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by that_guy_iain on Monday September 05, 2022 @08:43AM (#32723656)
Didn't he previously say he took down the nazi site because they were saying that the reason they weren't taken down was that he agreed with them? That provides the sort of decision making process.

Also, I find it hard to believe that a legal team would all of a sudden decide 3 days after they publically announce they wouldn't remove security services from a customer that one customer who has basically been the same for god only knows how long needs to have those services removed. I honestly, would be surprised if the original announcement hadn't already had input from legal. So if legal thought this customer was so bad, why wouldn't they have it done before they publically say they won't do it.

I think the twitter mobbing of CloudFlare worked.

Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by MichaelCollins on Monday September 05, 2022 @02:44PM (#32727724)
> Didn't he previously say he took down the nazi site because they were saying that the reason they weren't taken down was that he agreed with them?

And about that decision, he said this:

> Let me be clear: this was an arbitrary decision. It was different than what I’d talked talked with our senior team about yesterday. I woke up this morning in a bad mood and decided to kick them off the Internet. I called our legal team and told them what we were going to do. I called our Trust & Safety team and had them stop the service. It was a decision I could make because I’m the CEO of a major Internet infrastructure company.

> Having made that decision we now need to talk about why it is so dangerous. I’ll be posting something on our blog later today. Literally, I woke up in a bad mood and decided someone shouldn’t be allowed on the Internet. No one should have that power.

https://gizmodo.com/cloudflare-ceo-on-terminating-service-to...

Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by prvit on Monday September 05, 2022 @02:49PM (#32727766)
I wonder if he's actually so delusional to think that he's got the power to decide what goes on the internet, or if this is just something Cloudflare marketing is trying to push to make them seem like the only option anyone could possibly work with.
Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by theptip on Monday September 05, 2022 @03:10PM (#32728061)
Isn’t the simplest read on that statement “there should be legislation that means nobody has this power”? Basically, something like “if it’s legal I’ll do it, but I don’t think it should be legal”.

This is kind of dubious as a basic ethical position (if you think it’s bad just don’t do it) but note that it’s not entirely ridiculous as if it’s legal, others can and will pressure you to do it. Whereas if you cede the right to do a thing, you can’t be coerced by an angry mob to do it.

Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by prvit on Monday September 05, 2022 @03:40PM (#32728443)
Nobody has this kind of power, you can easily switch to another provider. If literally nobody wants to work with you, then ...

>Whereas if you cede the right to do a thing

Perhaps we shouldn't be hurrying to get rid of freedom of association.

Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by MichaelCollins on Monday September 05, 2022 @02:59PM (#32727902)
I think his consternation is performative.
Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by jamincan on Monday September 05, 2022 @04:57PM (#32729379)
If he doesn't think that Cloudflare should hold any responsibility for illegal or criminal activity using their services, then I welcome them being treated as a utility and subject to all of the regulation that that would entail.
Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by MichaelCollins on Monday September 05, 2022 @05:19PM (#32729616)
If he doesn't think he should have the power he has, he should step away from it. It's not as though he's Claudius, an inadvertent emperor who believes in the Republic but is afraid of being murdered if he lets go of the reins. He's free to quit any time he likes and take this weight off his mind. If he has qualms about handing this power to anybody else, he shouldn't have accumulated this much power in the first place.

Truth is he likes the money, and the power. That's why he has it.

Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by prvit on Monday September 05, 2022 @09:05AM (#32723870)
He said he took down the Daily Stormer because they claimed to have friends at Cloudflare (which was true https://nitter.net/GossiTheDog/status/1565128386753843201)
Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by philippejara on Monday September 05, 2022 @03:22PM (#32728212)
If you think screenshots of someone saying slurs in 2014 is evidence of someone being part of the daily stormer i'm afraid a lot more of the internet is a part of the daily stormer than you think.

The usage of weev's the trial is also pretty absurd and manipulative, given that his trial wasn't really related to the daily stormer, but about hacking, so much so that the EFF[0] defended him.

[0]: https://www.eff.org/deeplinks/2013/07/weevs-case-flawed-begi...

Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by prvit on Monday September 05, 2022 @03:59PM (#32728720)
Nobody has ever suggested that Asshurt was a part of the daily stormer, she wasn't.

>The usage of weev's the trial is also pretty absurd and manipulative, given that his trial wasn't really related to the daily stormer, but about hacking, so much so that the EFF[0] defended him.

Pretty sure most smart people have already distanced themselves from the EFF at this point, so that's not very convincing.

EFF, despite getting repeatedly called out by several top experts, spent years pushing downright dangerous disinformation via their "secure messaging scorecard". Not exactly a trustworthy organisation.

It was also a bizarre choice to defend weev, both from a legal and moral point of view. tptacek explained it well at the time https://news.ycombinator.com/item?id=5978686

Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by philippejara on Monday September 05, 2022 @04:25PM (#32729025)
> Nobody has ever suggested that Asshurt was a part of the daily stormer, she wasn't.

Then why link the slurs at all to accompany the argument?

> It was also a bizarre choice to defend weev, both from a legal and moral point of view. tptacek explained it well at the time https://news.ycombinator.com/item?id=5978686

On that same page you linked there are about as many people in favor as against, tptacek's word is not the law regardless of his competency, and it sure wasn't as uncontroversial as you make it out to be.

Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by googlryas on Monday September 05, 2022 @01:50PM (#32727077)
She left the company shortly thereafter...I assume when her viewpoints became known, probably couldn't keep her mouth shut after the "outrage" of not providing service to daily stormer.

It would be silly to say there are definitely no Nazis in a company above a certain size. It's easy to fire them as soon as you know about them, but a lot of shitheads know to fly under the radar, so you can't really proactively hunt them out.

Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by benmmurphy on Monday September 05, 2022 @02:29PM (#32727540)
Given she has stated in public that she is a 'troll' on twitter I don't think those twitter posts are evidence that she was a nazi. They seem consistent with her shitposting on twitter.

https://www.youtube.com/watch?v=cNgLq_naOKw

Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by superkuh on Monday September 05, 2022 @10:30AM (#32724710)
Legal? I think you mean PR team. They realized it would have an impact on income. There was obviously no legal issue.
Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by treis on Monday September 05, 2022 @03:14PM (#32728106)
There's definite legal liability here. Kiwi Farms was organizing doxxing that was directly leading to real world harm. The heirs of the next victim would have a colorable claim against CF for knowingly enabling Kiwi farms to continue organizing doxxing campaigns. CF could probably prevail in court, at least in the US, but it's always better to avoid lawsuits if you can.
Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by caeril on Monday September 05, 2022 @11:36AM (#32725470)
On income? How would this work?

As a CF customer, I am far more concerned with a policy or precedent of capriciously cutting off customers than a policy of defending "bad" customers.

Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by wizofaus on Monday September 05, 2022 @12:05PM (#32725863)
That CF would have made a judgment that a larger percentage of their customers would feel uncomfortable using a service that also appears to support sites like KF is hardly surprising though. And as a corporation they're well within their rights to decide on that basis to cut off relationships with clients that they see as bad for business.
Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by superkuh on Monday September 05, 2022 @01:49PM (#32727072)
Cloudflare/DDoS-Guard doesn't care about you. You don't do enough business. The DDOS protection company cares about the reactions of the abstract things called corporations and institutions. Corporate persons have different motives than human person do. I don't think it is controversial to say most corporations and institutions have no problem with this decision. That'd be despite what any informed IT dept. employee might believe about the situation.

So yes, they worried about their income.

Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by sealeck on Monday September 05, 2022 @06:10PM (#32730094)
Because you (and others like you) are probably not a substantial source of revenue to Cloudflare. Big companies who are the bulk of Cloudflare's sales (and whom they spend >1.5x on courting than they do on engineering) would rather not be hosted on the same infrastructure that powers hate groups. Not really as a moral thing, but in the same way that e.g. Volkswagen or Samsung or Allianz would rather not advertise on a child pornography website, they'd also rather not host on an infrastructure provider who provide services to a forum whose members try to drive people to commit suicide, make bomb threats, fake calls to counterterrorism hotlines and generally espouse _extreme_ right ideology.
Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by Shank on Monday September 05, 2022 @02:23PM (#32727466)
> On income? How would this work?

Cloudflare is a public company. I can tell you from being in a position to know this at a small company, but the "vendor review / procurement process" that happens to acquire a new service is non-trivial and usually offers several checkpoints to make sure that you're only onboarding vendors that meet strict criteria. One of those criteria is "not being embroiled in an obviously bad PR scandal easily revealed by a basic Google search."

CloudFlare is public and that means that their shareholders have the final say, not the individual customers. If shareholders see that CloudFlare's revenue is declining or that key customers are leaving, and there's an obvious reason why that's happening, well, that's the answer to who has the most say.

The whole operational plan that @SleepingGiants had during the Trump administration was to systematically identify corporate links and associations, and to highlight them to PR and legal teams who knew how this worked. "Cancellation" works not because individuals are easily moved by emotional arguments. It works because most companies answer to shareholders, and most shareholders care about value and growth. The company has a fiduciary duty to drive value for shareholders. When those stars align, obvious reasons why value is being artificially capped don't become "hard decisions." They become easy ways to increase value.

There are very few companies that can successfully hold an ideology. When they do hold an ideology, that ideology is usually aligned with some market force. Apple advertises privacy as its ideology because it's seemingly aligned with shareholder value. The ideology becomes expensive or even net-negative commensurate with the value being driven.

Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by _-david-_ on Monday September 05, 2022 @02:54PM (#32727844)
I'm not sure that it was PR. It is quite popular to be consistent and defend anybody who isn't convicted of a crime. If you are choosing to get CDN / DDOS protection and are running any site that may not be the most popular do you want to go with the company that bends their knee when the internet comes calling?
Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by kweingar on Tuesday September 06, 2022 @02:49AM (#32733793)
> It is quite popular to be consistent and defend anybody who isn't convicted of a crime.

I don’t know how popular this is, or at least how popular it should be.

Conviction is based on the extremely high bar of guilt beyond a reasonable doubt. This is the standard for depriving a person of their liberty.

Society rightly does not operate at that standard. Conviction was never meant to be a proxy for whether you ought to do business with somebody.

Think about killers who “got off on a technicality,” where everyone knew they were guilty. Or open criminals who for whatever reason were unable to face a jury, like many mass shooters. It just doesn’t make sense to say “well the courts never formally convicted them so we have a duty to defend them.”

Sorry if this is long-winded. I am just alarmed by this trend of equating legal standards with social standards.

Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by bitwize on Monday September 05, 2022 @03:03PM (#32727970)
It's not popular if you're complicit in spreading hate for trans people.
Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by _-david-_ on Monday September 05, 2022 @08:02PM (#32730941)
Can you name a website that allows user content that is not "complicit in spreading hate for trans people"?
Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by tibbydudeza on Monday September 05, 2022 @02:51PM (#32727803)
The problem is the site got named in a swatting attack on a GOP House member. That ups the stakes a bit and probably made providing a DDOS service for kiwifarms problematic.
Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by _vvaw on Monday September 05, 2022 @03:07PM (#32728024)
It got named because the alleged attacker called the police and said "it was me, Kiwi Farms user so-and-so." The user in question denied making this call and claimed they had been impersonated. This happened in the midst of the pressure campaign on Cloudflare, to a GOP House member known for jumping the gun who had no prior history with Kiwi Farms. If that's not extremely suspect I don't know what is.
Re:Kiwi Farms is down across all domains as DDoS-Guard termi... by tibbydudeza on Tuesday September 06, 2022 @01:52AM (#32733396)
Agreed it was just unrelated but it made news headlines then old history about keffals , them not helping the police with the Auckland shooter so they became "the baddies".

It simply made Cloudflare's position untenable - they are not piratebay but need customers.