[tor-bugs] #24351 [Applications/Tor Browser]: Block Global Active Adversary Cloudflare

[Tor Bug Tracker & Wiki]

#24351: Block Global Active Adversary Cloudflare
-------------------------------------------------+-------------------------
 Reporter:  nullius                              |          Owner:  tbb-
                                                 |  team
     Type:  enhancement                          |         Status:
                                                 |  reopened
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Major                                |     Resolution:
 Keywords:  security, privacy, anonymity, mitm,  |  Actual Points:
  cloudflare                                     |
Parent ID:  #18361                               |         Points:  1000
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by vertigo):

 I'm new to the bug tracker, so I don't know how everything works, but I
 have to say that reading through it there is a lot of childishness and
 arrogance. All the people modifying and closing the ticket need to grow
 up. If you don't agree with it, that's fine, express your reasoning and
 move on.

 I also have to say I'm confused by all the posts by cypherpunks that seem
 to be going back and forth with each other. I'm assuming they're by
 different people and have simply been attributed to cypherpunks for some
 reason, in which case that is a pretty big issue with the tracker, as it
 makes the comments very difficult to read.

 Otherwise, I just want to voice my concern about this issue and thank
 nullius (and cypherpunks?) for raising it and for their contributions.
 Just because some people don't care, doesn't mean everyone feels that way.
 I personally think this is a problem, and while I don't know how, or even
 if, it can be solved, it certainly deserves attention, if for no other
 reason than to inform people. And to those that think a lack of responses
 indicates a lack of interest: perhaps you should open your minds and
 consider other possibilities, such as people simply not being aware of the
 situation. I only just learned of this by chance, and I pay much more
 attention to this sort of thing than most.

 As for trust, I don't trust any corporation, especially large ones, and
 anyone that does after all the times they've betrayed that trust deserves
 whatever happens as a result. And I didn't trust cloudflare even before
 this, and trust them even less now. I don't know if the above responses by
 cloudflarezoey were really done by a cloudflare employee or if it was just
 someone being a smart*ss, but I wouldn't doubt it was an actual
 representative of the company, and that would be not only sad, but
 infuriating, for them to act so unprofessionally, both in what they said
 and, more importantly, having the audacity to close the issue. Frankly,
 that's just all the more reason to not trust them.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24351#comment:83>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online