Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

>Cloudflare is choosing between "platforming the bad guys" and "censoring free speech".

Unless they provide hosting services, this seems a little distorted. Cloudflare is a DDoS protection service, not a platform. For nearly as long as there have been laws, there has been a general understanding that even the worst of us are entitled to the protection of the laws. Even Bill Cosby was entitled to his Fifth Amendment rights when he was given immunity for his infamous testimony. I don't see why Cloudflare's role should be seen differently; they have become the online anti-DDoS police, in the face of an Internet woefully under-equipped to manage such attacks.

Only in the case of the Daily Stormer, who deliberately turned Cloudflare's neutral role against them by saying "Cloudflare supports us", does there seem to be an exception, because they can't pretend to be truly bound by the law. But calling this "platforming" is basically playing into the hands of people running DDoS attacks.

Kiwifarms's hosts platform them. Cloudflare protected them. The difference is important. I don't know what happened exactly, so I can't comment on it, but I'm interested to find out what happened over the last two days.



I feel the "not providing hosting services" argument doesn't really hold water. If the content is only accessible over the internet when I connect to Cloudflare, it sure feels like they are providing hosting. Sure, they only provide a proxy ... which is a copy of the content on their servers, which is hosting.

Obviously Cloudflare wouldn't be willing to provide the name of the company doing the actual hosting for very good reasons. However, this makes it impossible to make the hosting provider aware of what they are hosting. I don't think a lot of hosting providers want to willingly host neonazi sites, however when set up behind Cloudflare, it is quite likely they have no idea they are hosting neonazi sites to begin with.

If CF was "just" DDoS protection, it does seem quite reasonable that CF should not be obligated to do any moderation. However, the service they provide comes with quite a bit more: instant production-grade global web hosting (caching) infrastructure and ability to hide your backend infrastructure from the general public.


>If CF was "just" DDoS protection, it does seem quite reasonable that CF should not be obligated to do any moderation. However, the service they provide comes with quite a bit more: instant production-grade global web hosting (caching) infrastructure and ability to hide your backend infrastructure from the general public.

You're contradicting yourself here. Those services you described in the second sentence are what is necessary for DDoS protection. Likewise, when cops arrest me for throwing a paint ballon at Richard Spencer, it's not because they're acting as his personal security detail. It's because I broke the law.

>However, this makes it impossible to make the hosting provider aware of what they are hosting.

Again, this is simply harassment prevention. If the hosting provider wants to know what is on their service, they can just look. It's not like Cloudflare is providing an encrypted service to keep hosts from knowing what is on their servers. It's just preventing people from harassing the host about it. Law enforcement can walk right through Cloudflare if they want, it's vigilantes who are stymied.

>If the content is only accessible over the internet when I connect to Cloudflare

It's accessible through TOR, IIRC.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: