Does CloudFlare protect blackhat sites from DDOS attacks?
08.06.2025 02:27
That’s why I refuse to use Cloudflare, even though I have a problem with DDoS attacks. Cloudflare is the living embodiment of the socially irresponsible dudepro Libertarian tech-bro “we deserve to make money and any idea that we should be accountable for our actions is not only wrong but immoral and an infringement of our HUMAN RIGHTS.”
Cloudflare doesn’t care about the content of the site. Unless they receive a court order telling them not to, they will protect absolutely any site with absolutely any content. For years, they protected Rescator dot cc, an infamous Russian [EDIT: Ukranian] site selling stolen credit card information.
The Cloudflare founders, Matthew Prince and Lee Holloway, are super-duper-ultra-mega hardcore Ayn-Rand-worshipping extreme big-L Libertarian dudebros. They believe in absolute free speech, and when I say absolute, I mean absolute. Child pornography? Revenge porn? Illegal drug stores? Carder sites? Isis recruitment sites? They are the sort of Libertarians who believe that all speech with absolutely no restrictions under any circumstances whatsoever should always be permitted.
Has anyone ever made you take off your shirt?
So I sad “does that mean if I told you that you were protecting a child porn site, you wouldn’t do anything?”
When I hear the word “Libertarian,” I think Cloudflare. “If you think we’re serving child porn, contact the FBI. If you don’t have a court order we don’t want to hear about it” is pretty much the living, breathing soul of Libertarian morality. They are the embodiment of Libertarian ideals and all that Libertarians stand for.
I actually got into a huge fight with the Cloudflare head of security on Twitter some years back. I discovered a site selling stolen credit card numbers being protected by Cloudflare, and so I reported it to Cloudflare’s security and abuse department.
When Cloudflare did nothing about it, I went on Twitter and was like “Hey Cloudflare, did you know you’re hosting a criminal site selling stolen credit cards” I got a reply from a person who was (according to his Linkedin profile) the Cloudflare chief of security, basically saying (paraphrased) “Cloudflare is a content distributor and we are not responsible for the content of any sites we protect. If you feel a law is being broken, contact your local law enforcement.”
So yeah, Cloudflare protects any site. Blackhat, white hat, drug sites, child porn, anything goes. They don’t care.
He replied with a rather tart (again, paraphrasing) “If you see a child porn site, contact the FBI. If you don’t have a court order, don’t talk to us, it’s not our problem,” followed by…
What's the difference between “ce”, “ça”, and “cela”, and when do I use each (French)?
Yes. Cloudflare also protects actively criminal sites from DDoS attacks. In fact, Cloudflare will protect any site—drug sites, carder sites, even (according to a Cloudflare tech on Twitter before Cloudflare blocked me) child pornography sites.