[criddell]

Cobalt didn’t say the DDOS was evil, they said:

“bytedance's scraper was specifically built to go around cloudflare & other web security solutions, which is just genuinely evil”

So I would say it’s a fair comparison.

[dewey]

> built to go around cloudflare

Then they either didn't set up CF correctly or they just use the mode in most headless browsers that bypasses default CF protection when CF is not in attack mode.