this post was submitted on 20 Dec 2023
11 points (82.4% liked)

Privacy

1223 readers
241 users here now

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

founded 1 year ago
MODERATORS
 

cross-posted from: https://links.hackliberty.org/post/609883

This BBC interview has a #Cloudflare rep David Bellson who describes CF’s observations on internet traffic. CF tracks for example the popularity of Facebook vs. Tiktok. Neither of those services are Cloudflared, so how is CF tracking this? Apparently they are snooping on traffic that traverses their servers to record what people are talking about. Or is there a more legit way Cloudflare could be monitoring this activity?

top 6 comments
sorted by: hot top controversial new old
[–] MotoAsh@lemmy.world 10 points 11 months ago

They run a lot of servers that handle traffic and DNS, as well. If someone looks up FB.com, they almost certainly aren't just going to stare at the IP address, but go to the site.

Basically... They're just reading addresses on the envelopes, not opening them up.

[–] Deebster@programming.dev 8 points 11 months ago (1 children)

Oh, it's a podcast. Does anyone have a summary/transcript?

[–] soloActivist@links.hackliberty.org 4 points 11 months ago

Sorry I do not know if BBC interviews are transcribed.

But FWIW it will air again on BBC World Service at 02:32 GMT tomorrow and the next day (which could be useful for those on limited internet connections)

[–] BrikoX@lemmy.zip 2 points 11 months ago (1 children)

They are basically MITM (man-in-the-middle) attack all the traffic that passes through their servers. Most Cloudflare defenders will tell you it's not technically MITM as the site operators gives them permission to do that, but the end result is the same.

Even though sites are encrypted, they hold the decryption key, so they can see all traffic in plain text.

[–] soloActivist@links.hackliberty.org 2 points 11 months ago

I agree.

One of the reasons no one gives a shit is there is never news about CF making use of that MitM position. But I know they hire data scientists and what corp can resist the urge to monetize data they have access to? So I think it’s just a matter of time before they get caught abusing the vast amount of valuable data they have visibility on.

[–] phoneymouse@lemmy.world 1 points 6 months ago

It’s a dns… aren’t they just reporting how many dns look ups they get for Facebook vs TikTok?