6 ms·
Yup, I explicitly had all anaytics turned off. But had a few sites using Cloudflare for caching. Now I'm checking and seeing this on all of them. This is gross
by kevincox 1mo ago
Yup, I explicitly had all anaytics turned off. But had a few sites using Cloudflare for caching. Now I'm checking and seeing this on all of them. This is gross and unacceptable. "Caching" does not mean "modifying my site".
- zx8080 1mo agoMITM attack, that's what it is. Why is this not in the news? Ah, no one cares.
- reaperducer 1mo agoWhy is this not in the news? Good point. There should be a place where hackers can get this kind of news. Some kind of Hacker News place.
- zeafoamrun 1mo agoIt takes a lot of trust to let a CDN be able to terminate TLS traffic for you and this doesn't exactly give the warm fuzzies.
- ironmagma 1mo agoCloudflare is essentially MITM as a service. What else would someone expect?
- chrisweekly 1mo agoAdding a RUM beacon for observability / performance metrics capture, as an opt-out feature for free plans (opt-in for paid plans), is not exactly nefarious. Hopefully/presumably there was some communication before the change was rolled out.
- matherial 1mo agoNo. I was on a free plan for years and found out by accident. It's interesting that you set "nefarious" as the bar. I'd simply call it "sleazy".