🇳🇱
@marathon From wikipedia:
The hacker group UGNazi attacked Cloudflare partially by exploiting flaws in Google's authentication systems in June 2012, gaining administrative access to Cloudflare and using it to deface 4chan.[60][61] From September 2016 until February 2017, a major Cloudflare bug (nicknamed Cloudbleed) leaked sensitive data, including passwords and authentication tokens, from customer websites by sending extra data in response to web requests.[62] The leaks resulted from a buffer overflow which occurred, according to analysis by Cloudflare, on approximately 1 in every 3,300,000 HTTP requests.[63][64]
In May 2017, ProPublica reported that Cloudflare as a matter of policy relays the names and email addresses of persons complaining about hate sites to the sites in question, which has led to the complainants being harassed. Cloudflare's general counsel defended the company's policies by saying it is "base constitutional law that people can face their accusers".[65] In response to the report, Cloudflare updated their abuse reporting process to provide greater control over who is notified of the complaining party.[66]
Cloudflare is cited in reports by The Spamhaus Project, an international spam tracking organization, due to high numbers of cybercriminal botnet operations 'hosted' on Cloudflare services.[67] [68] [69] An October 2015 report found that Cloudflare provisioned 40% of SSL certificates used by phishing sites with deceptive domain names resembling those of banks and payment processors.[70]
Cloudflare suffered a major outage on July 2, 2019,[71] which rendered more than 12 million websites (80% of all customers) unreachable for 27 minutes.[72] A similar outage occurred on July 17, 2020, causing a similar effect and impacting the same amount of sites.[73][74]
