this post was submitted on 23 Sep 2025
51 points (98.1% liked)

Selfhosted

51863 readers
732 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

The Wikipedia article says Cloudflare has been used to host hate speech, websites with illegal content and forums connected to all sorts of illegal activities. And I see them being used by a lot of decent webservices but shady ones as well.

So my question, can Cloudflare be used for something alike "bulletproof hosting"? Does anyone know if they collaborate with law enforcement or care once someone sends a mail to the abuse contact? Or if there's a way to find information about a Cloudflare protected server for the public?

Hypothetical question, I'm just curious and I thought maybe someone here has first-hand experience with getting their account terminated or reporting content or doing piracy via them or whatever...

you are viewing a single comment's thread
view the rest of the comments
[–] darvocet@infosec.pub 44 points 1 week ago (3 children)

I have experience working in large data centers that provide hosting. What I can tell you is that various government agencies do and will randomly come by the data center with warrants and court orders for things. I've literally had NASA show up (wtf?) and have to pull a server offline while they mirror the hard disk. All very hush hush make excuses to the customer when they open a ticket. Another thing that happens is that the FBI has placed their servers within internal spaces of the network. When they get a court order they can open a ticket with our abuse department and whatever switch port the feds are interested in can be mirrored and sent to their packet capture servers.

[–] Auli@lemmy.ca 1 points 6 days ago (1 children)
[–] darvocet@infosec.pub 4 points 6 days ago

Yea that's the point it didn't make sense. The literal "national aeronautics and space adminiatraton" sent tech and security people to a physical data center to copy a hard drive.

[–] cAUzapNEAGLb@lemmy.world 16 points 1 week ago (2 children)
[–] kambusha@sh.itjust.works 26 points 1 week ago

They wanted their space back

[–] darvocet@infosec.pub 15 points 1 week ago (2 children)

I'll add to this that I'm old - these days in a cloud environment they don't even have to come to the data center to image the hard drive.

[–] madasi@lemmy.dbzer0.com 8 points 1 week ago

Exactly. Most cloud virtualization providers you just take a snapshot of the virtual disk and provide that when requested and the customer never has a clue that is happened. I'd get contacted by our legal department, told that my boss was only to be told that I was working for them for now and no other details, and then directed on what they needed a copy of and how to send it to them.

[–] hendrik@palaver.p3x.de 4 points 1 week ago* (last edited 1 week ago) (1 children)

Thanks for your insight. Reading these stories always makes me feel data should stay on own premises with extra security measures. And yes, on my VPS, imaging the storage is one click and I believe it's done online without any interruption of service. Not that I do a lot of illegal stuff on the internet. But with the current situation in the US and the general overboarding surveillance, I think i'd like to keep their government and agencies out of my emails and personal stuff... (And maybe even what I do publicly and within legal limits.)

Though I didn't ask about privacy here, but anonymity. And I guess selfhosting stuff at home isn't an option either. Everyone can tell my ISP and location to like 30km with that. And link the IP to other activities.

[–] FreedomAdvocate 2 points 6 days ago (1 children)

Email? Lol good luck keeping that secure.

[–] hendrik@palaver.p3x.de 1 points 6 days ago

Sure, email is bad and we don't have any worthy successor. I can only deal with the most problematic aspects. Keep my inbox stored somewhere where people can't just easily go through all my stored mails and I guess it's transport encrypted more often than it's not... But yeah, it's only a little bit and "secure" shouldn't be in one sentence with email, I guess 😟