Slashdot Mirror


Cloudflare Under Fire For Allegedly Providing DDoS Protection For Terrorist Websites

Cloudflare is facing accusations that it's providing cybersecurity protection for at least seven terrorist organizations. "On Friday, HuffPost reported that it has reviewed numerous websites run by terrorist organizations and confirmed with four national security and counter-extremism experts that the sites are under the protection of Cloudflare's cybersecurity services," reports Gizmodo.

"Among Cloudflare's millions of customers are several groups that are on the State Department's list of foreign terrorist organizations, including al-Shabab, the Popular Front for the Liberation of Palestine, al-Quds Brigades, the Kurdistan Workers' Party (PKK), al-Aqsa Martyrs Brigade and Hamas -- as well as the Taliban, which, like the other groups, is sanctioned by the Treasury Department's Office of Foreign Assets Control (OFAC)," reports HuffPost.

"In the United States, it's a crime to knowingly provide tangible or intangible 'material support -- including communications equipment -- to a designated foreign terrorist organization or to provide service to an OFAC-sanctioned entity without special permission," the report continues. "Cloudflare, which is not authorized by the OFAC to do business with such organizations, has been informed on multiple occasions, dating back to at least 2012, that it is shielding terrorist groups behind its network, and it continues to do so." Gizmodo reports: The issue that HuffPost raises is whether Cloudflare is providing "material support" to sanctioned organizations. Some attorneys told HuffPost that it may be in violation of the law. Others, like the Electronic Frontier Foundation, argue that "material support" can and has been abused to silence speech. Cloudflare's general counsel, Doug Kramer, told Gizmodo over the phone that the company works closely with the U.S. government to ensure that it meets all of its legal obligations. He said that it is "proactive to screen for sanctioned groups and reactive to respond when its made aware of a sanctioned group" to which it may be providing services. HuffPost spoke with representatives from the Counter Extremism Project, who expressed frustration that they've sent four letters to Cloudflare over the last two years identifying seven terrorist-operated sites without receiving a reply. Kramer would not address any specific customers or situations when speaking with Gizmodo. He said that's simply company policy for reasons of protecting privacy.

33 of 98 comments (clear)

  1. Counter Extremeism Project by Anonymous Coward · · Score: 1

    I think I would prefer steps being taken to protect me from groups like the "Counter Extremism Project" than any of the groups on that list (as awful as some of them are).

    1. Re:Counter Extremeism Project by Gavagai80 · · Score: 4, Insightful

      Are you implying that you need more protection from an anti-terrorist group than from terrorists who would cheerfully murder you and your children?

      Yes, we do. Unless you're in Syria or Afghanistan or Iraq or another county suffering from the USA's war on terror, terrorists are laughably unlikely to murder you. Granted the war on terror has made them more likely to murder you than before, but it's still absurdly unlikely. You're far, far more likely to be killed by an insect.

      On the other hand, anti-terrorist groups have already robbed us of much of our liberty and are constantly probing for more ways to use the terrorist bogeyman to silence us. Like in this article, trying to further abolish content-neutral services and entrench censors where they can do whatever their masters desire.

      --
      This space intentionally left blank
    2. Re: Counter Extremeism Project by c6gunner · · Score: 1

      Great comment overall; too bad you had to ruin it with this horseshit:

      Syria or Afghanistan or Iraq or another county suffering from the USA's war on terror

      It's hilarious how regreasives have managed to convince themselves that it's not ok to blame Islam, so you blame the US instead. Just amazes me the kind of shit people can make themselves believe when it suits their ideology.

    3. Re: Counter Extremeism Project by c6gunner · · Score: 1

      We absolutely did blame the Jews for Israeli terrorism, and the Muslims for anti-israeli terrorism. But it great that you've managed to pat yourself on the back for whatever point it is that you think you made.

  2. OFAC are not friendly people by vinn01 · · Score: 5, Interesting

    I know something of OFAC. They are not nice, friendly, people. If they actually had a solid case they would be coming down on Cloudflare like a ton of bricks. The fact that they are whining in letters and not prosecuting means they have no case.

    It's not just providing material support, just doing business with anyone on OFAC's list of Specially Designated Nationals (SDN) is a felony. The way the law is written, if anyone sells anything to a person who's on the SDN list, as much as a sandwich or a bottle of water, that's "doing business" and therefore a felony.

    OFAC actually has the fantasy that all businesses in the US will check the ID of every customer and then check the SDN database against the customer's name before doing business with them. Nevermind that there are plenty of people in the world with the same names. And nevermind that it would take 15 minutes to buy a sandwich.

    1. Re:OFAC are not friendly people by bill_mcgonigle · · Score: 3, Insightful

      They don't care if you sold a sandwich. They do care that if you become politically inconvenient later on they can get you off to prison for having sold that sandwich within the statute of limitations.

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    2. Re:OFAC are not friendly people by yodleboy · · Score: 1

      They may very well not have a legal case. Instead they want to use the court of public opinion. Being a government agency, they can slander all they want and get off with a "my bad".

    3. Re:OFAC are not friendly people by rtb61 · · Score: 1, Insightful

      How about we just express the reality.
      US CIA/NSA - "Fuck you Cloudflare, you are stopping us from attacking these countries, fuck off already."
      Cloudflare - "Fuck off CIA/NSA if we don't do it someone else will, do you want us to pay fucking taxes or not, you guys so full of shit."

      The reason the US government does not want international treaties with regard to internet security, so it can continue to attack every single fucking country across the entire globe, is has not even signed internet no attack treaties with supposed allies.

      --
      Chaos - everything, everywhere, everywhen
    4. Re:OFAC are not friendly people by AmiMoJo · · Score: 1

      Looking at the list it does seem a bit much. conservative-headlines.com is just a bunch of links to shitty YouTube channels. Hamas.ps doesn't look particularly bad either, probably no worse than typical western political/military hero memorial sites.

      Seems like the legal bar needs to be set much higher.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
  3. Whatever by nehumanuscrede · · Score: 1, Insightful

    Where does this end exactly ?

    Cloudflare
    The ISP that gets them online
    The guy who sold the computer
    The one who made the website
    Electricity provider to power it all

    Canâ(TM)t go after the one without going after them all . . . .

    Besides, the USG basically defines terrorist as anyone who they donâ(TM)t see eye to eye with. That list changes on a daily basis depending on who they are bombing on amy given day.

  4. Re:"We found some terrorist sites!" by dgatwood · · Score: 2

    Can you confirm it's the terrorist organization running those websites, or some CIA operative who gets intel by running a website for them?

    FTFY.

    --

    Check out my sci-fi/humor trilogy at PatriotsBooks.

  5. Re:Nail them to the wall by Shikaku · · Score: 1

    The entire situation is silly. It's exactly like "X bought water from Y, Y aided terrorism because X is a terrorist!"

  6. Re:What if I run a food cart... by Anonymous Coward · · Score: 1

    ...and I sell them falafels and hummus during lunch? Would I be prosecuted?

    Guy who drove Osama bin Laden around was locked up & beaten in Guantanamo for 8 years incl a full year spent in solitary in a windowless room

  7. Re: What if I run a food cart... by Cmdln+Daco · · Score: 1

    All he did was drive him around?

  8. Re: Known terrorist organizations include by Cmdln+Daco · · Score: 1

    I wouldn't exactly call it a 'government' of Saudi Arabia, though they have had a long successful history of pulling it off. Saud is a family name. It's just a dynasty of arabs who have garnered a lot of support from rich western interests. For a long time now.

  9. DDoS protection from? by AHuxley · · Score: 1

    A nation state that cant cover the banDNWIDTH?

    --
    Domestic spying is now "Benign Information Gathering"
  10. Re:HuffPost is a terrorist website by Gavagai80 · · Score: 1

    The one thing America is extremely bipartisan about is terrorism. Conservatives are actually even worse about it than liberals though, constantly pushing for bigger "defense" budgets and larger scale wars and being more rabidly for the PATRIOT act and the like. Pretending it's a liberal phenomenon is absurd. Censorship advocates publish this terrorist scare in the Huff Post this week but they'll post the same thing on Breitbart next week.

    --
    This space intentionally left blank
  11. Re:not exactly by themusicgod1 · · Score: 1

    They are under fire for not cooperating enough with the big brother

    FTFY

    --
    GENERATION 26: The first time you see this, copy it into your sig on any forum and add 1 to the generation.
  12. Re: What if I run a food cart... by Anonymous Coward · · Score: 1

    All he did was drive him around?

    Don't have all the details but I can tell you he was finally acquitted by the USA of all charges in 2012 by a 3 judge panel.
    The decision vacating his conviction was written by - I shit you not - Judge Brett Michael Kavanaugh.
    Probably after having a few skis with PJ, Bernie and Squi

  13. How many are honeypots by poity · · Score: 1

    for collecting info?

    --
    your thin skin doesn't make me a troll
  14. Cloudflare Under Fire by Narcocide · · Score: 1

    ... again.

    They should just change their name to "Cloudflare Under Fire."

  15. They didn't mention the most obvious terrorist sit by Patent+Lover · · Score: 1

    The People's Front of Judea.

  16. Re: not exactly by c6gunner · · Score: 1

    They are under fire for annoying Huffpoo

    FTFY

  17. I fixed a terrorist car by aglider · · Score: 1

    Am I a terrorist supporter?

    I read some idiotic answers here, am i an idiot?
    (Sure, I am).

    --
    Sent as ripples into the electromagnetic field. No single photon has been harmed in the process.
  18. Cloudflare doesn't seem free-speech friendly by jbn-o · · Score: 1

    Without commenting on the people of OFAC, taking Noam Chomsky's explanation of standing for freedom of speech precisely for views one doesn't like (seen in context in the movie Manufacturing Consent where Chomsky defends Robert Faurrison's freedom of speech while not supporting his thesis—the segment begins around 2h24m21s and Chomsky's concise response about freedom of speech to a questioner is at 2h10m52s), I'm reminded that Cloudflare is the organization that also switched from a position that was content-neutral to picking and choosing whom to do business with based on what Cloudflare was caching. Torrentfreak.com covered this in an article concerning Cloudflare "kicking off" the Daily Stormer from their service according to Cloudflare CEO Matthew Prince: "I woke up this morning in a bad mood and decided to kick them off the Internet." he claimed. This was a radical shift in policy from what Prince claimed about Cloudflare just a few weeks prior, "Even if it were able to, Cloudflare does not monitor, evaluate, judge or store content appearing on a third party website" and "We're the plumbers of the internet. We make the pipes work but it's not right for us to inspect what is or isn't going through the pipes". So apparently Cloudflare was able do precisely what he said it could not do, and Cloudflare did in fact make such evaluations even while Prince apparently misrepresented these facts to the public.

  19. Re:"We found some terrorist sites!" by Pinky's+Brain · · Score: 1

    Or they've simply gone to the FBI each time and heard "just keep doing what you're doing, it's a honeypot".

  20. It's not OFAC in TFS by MikeRT · · Score: 3, Interesting

    It's HuffPo. Therefore SJW-sympathetic. So we can reliably conclude, especially given one of the links has a URL saying "don't call us Nazis just because we take their money" that this is really about building public support for making Cloudflare drop anyone who says things that are politically incorrect. Just another bait and switch.

    Irony is that most of the people contributing to the content in TFS probably support those groups because they're anti-Israel.

    My money is on Cloudflare keeping those sites up because someone in the SIGINT community sent them a notice informing them and saying "please keep them up and send us logs, k thx."

    1. Re:It's not OFAC in TFS by c · · Score: 1

      My money is on Cloudflare keeping those sites up because someone in the SIGINT community sent them a notice informing them and saying "please keep them up and send us logs, k thx."

      Or, just as likely, the government hasn't explicitly ordered them to take them down and Cloudflare's default is to not act until someone with authority tells them they have to. Neither HuffPost nor the Counter Extremism Project are US government agencies and don't get to legally tell anyone to take down anything. I'd ignore them too.

      --
      Log in or piss off.
    2. Re:It's not OFAC in TFS by grep+-v+'.*'+* · · Score: 1

      It's HuffPo.

      Yeah. My default stance is that whatever position they take, mine is 180 degrees (F or C?) off theirs. For a second there I was worried.

      --
      If the universe is someone's simulation -- does that mean the stars are just stuck pixels?
  21. Re: What if I run a food cart... by haruchai · · Score: 1

    however he was released to his home country of Yemen so there's a good chance he's since been killed or died of starvation

    --
    Pain is merely failure leaving the body
  22. Like Patreon: censor repubs protect terrorists by walterbyrd · · Score: 1

    Patreon often blocks even moderate conservatives from using their service.

    But Patreon proudly allows the funding for violent leftist groups.

    >>
    WHAT?! Antifa Groups Are Using Patreon To Fund Violent ‘Insurrection’ Against America

    https://bigleaguepolitics.com/what-antifa-groups-using-patreon-to-fund-violent-insurrection-against-america/

  23. HuffPost and Gizmodo now under investigation by CanadianMacFan · · Score: 1

    In an update to the story both the HuffPost and Gizmodo have both found themselves under investigation by OFAC for bringing the publics attention to these terrorist organizations and their websites.

  24. commentsubject by Falos · · Score: 1

    Cloudflare has been informed on multiple occasions

    So if I send an email to huffpost saying their editor is a bogeyman, "they were informed" and need to take down all his/her content, regardless of the authenticity of my informing.

    If "regardless" is wrong, I'd like to know what measures of regard are required before a rando's email is established as proof of intent.

    Required and ignored, in huffpost's accusation.