Hacker News new | ask | show | jobs
by doctorpangloss 37 days ago
hacker news when discovering that apple deployed WEI, for ages, with beloved IT company Cloudflare, affecting hundreds of millions of users: "aww, you're sweet"

hacker news when reading that google is doing the same thing for the rest of the userbase: "hello, human resources?"
3 comments
Dylan16807 37 days ago
I thought that cloudflare system worked on any hardware and the tokens are anonymous. Did that change at some point? If it didn't change, then yeah it should get a very different reaction!

(Edit: it looks like the new system is still private and still interlinked with the old system that lets you use any hardware? I think?)

Also I don't know how you could have missed the widespread criticism of apple and especially cloudflare on this site.

link
doctorpangloss 37 days ago
apple has blessed cloudflare WAF with backend access to the apple ID service tokens that they manage for things like iMessage authenticity

I think it has also blessed Amazon's WAF

Cloudflare has a turnstile product that i'm sure uses this apple IDS token

Mobile Safari generally is not shown Cloudflare captchas or similar because of Apple-Cloudflare cooperation. it's not complicated.

Apple calls it a "Personal Access Token" but that makes it sound more like a DRM scheme - which it sort of is, it is managing your right to a free-as-in-beer access scheme - than a broad web integrity environment solution

link
michaelcampbell 37 days ago
Were you attempting to give us an example of the Goombah Fallacy? Because this is a picture perfect one.
link
raincole 37 days ago
Really. I think HN hates Cloudflare with (quite unjustified if you ask me) searing passion.
link
dakolli 37 days ago
In 2008, the Department of Homeland Security (DHS) contacted Unspam Technologies, asking, "Do you have any idea how valuable the data you have is?" The DHS' email served as the impetus for Cloudflare, a technology company Prince co-founded with Holloway and fellow Harvard Business School graduate Michelle Zatlyn the following year.

https://en.wikipedia.org/wiki/Matthew_Prince#:~:text=In%2020...

They're literally a government surveillance program larping as a private company, many such cases.

link