News for hackers. Stuff that matters.

A comment on Threat actor abuses Cloudflare tunnels to deliver remote access trojans. Parent comment

Re:Threat actor abuses Cloudflare tunnels to deliver remote ... by anonym29 on Friday August 02, 2024 @08:54AM (#41138464)
And what do you reckon the chance is that Azure and AWS and GCP are extracting ephemeral TLS session keys for every inbound HTTPS traffic stream bound for their customers, and decrypting every single stream?

The chance that cloudflare is getting access to all incoming traffic in plaintext is 100%.

[ Parent | on HN ]
Re:Threat actor abuses Cloudflare tunnels to deliver remote ... by rfl890 on Friday August 02, 2024 @04:54PM (#41142557)
Didn't mention anything about chances. If these companies wanted they could decrypt all traffic and it's easier than how you said (just swap out a web server binary or something). Although i must admit cloudflare has a worse track record
[ Parent | on HN ]