Remix.run Logo
pocksuppet an hour ago

The hidden cost, of course, is that the NSA learns everything there is to know about you and your customers. Cloudflare is the LG TV of websites, but it's worse because we've known it has an always-on microphone and speech-to-text for over a decade and we still keep using it for some reason.

esperent an hour ago | parent | next [-]

> The hidden cost, of course, is that the NSA learns everything there is to know about you and your customers

You're replying to a comment talking about migrating from Google, so I assume you're claiming this is more of a risk with Cloudflare than Google (or other American providers like AWS)?

If so, what's your source for that claim?

aranelsurion 7 minutes ago | parent | prev | next [-]

> The hidden cost, of course, is that the NSA learns everything there is to know about you and your customers.

I think it’s fair to assume that for most companies, cost is essentially zero on the company’s side.

thorbutt 43 minutes ago | parent | prev | next [-]

That doesn't seem unique to Cloudflare though

cassianoleal 21 minutes ago | parent [-]

No, but nothing comes close to their breadth and scale.

lukan 33 minutes ago | parent | prev | next [-]

"We've known it has an always-on microphone and speech-to-text for over a decade"

Literally? What is the reference here?

a2ff6eeb0 31 minutes ago | parent [-]

https://allaboutcookies.org/lg-smart-tvs-snooping

lukan 16 minutes ago | parent [-]

Yeah, about those I know, but what about cloudflare?

a2ff6eeb0 12 minutes ago | parent [-]

They hold your tls keys and can decrypt all your traffic. They have to be able to in order to cache appropriately.

kakacik 33 minutes ago | parent | prev | next [-]

If you care about security and specifically NSA, don't use US clouds (owned or hosted), period. There is not a single one they don't have full access to, why should there be one.

Or clouds in general, its all wishful thinking and pinky promises.

CommanderData 29 minutes ago | parent | prev [-]

Is there any evidence of this

bcye 21 minutes ago | parent [-]

Well it is known SSL termination servers are a popular target: https://arstechnica.com/tech-policy/2013/10/new-docs-show-ns...

CommanderData 18 minutes ago | parent [-]

The reputational damage for CF would be intense.

Businesses won't tolerate something like this so I find it hard to believe there is any cooperation between the two entities.

samlinnfer 10 minutes ago | parent [-]

They already terminate TLS at their edge. It takes one secret court order for them to start sending data to the NSA.