Hacker Newsnew | past | comments | ask | show | jobs | submit | emilstahl's commentslogin

Keep in mind that your registant details of your .com domain might also be disclosed.

Your domain is at Tucows:

>Tucows Privacy Policy prohibits the release of registrant information without express permission from the registrant except under limited circumstances such as when necessary to comply with ICANN’s Whois publication requirements or when required to comply with law or legal process properly served on Tucows or one of its affiliates.

https://tucowsdomains.com/help/legal-submissions/tucows-inc-...


It's not in my name even there.


Since the post have been taken down and the URL now returns 404, here is an archived copy: https://web.archive.org/web/20240527214609/https://debunking...


You do realize that your ISP/host/transit provider also complies with subpoenas and court orders, right? This doesn’t change anything.


Cloudflare is not that much different:

>Cloudflare requires valid legal process such as a subpoena or a foreign government equivalent of a subpoena before providing this type of information to either foreign or domestic government authorities or civil litigants.

https://www.cloudflare.com/transparency/

>It is our policy to notify our customers of a subpoena or other legal process requesting their customer or billing information before disclosure of information, whether that legal process comes from the government or private parties involved in civil litigation, unless legally prohibited.

https://cf-assets.www.cloudflare.com/slt3lc6tev37/6g60HDCGGk...


That is weaker than NFS. They do not, by default, respond to foreign equivalents of subpoenas:

https://www.nearlyfreespeech.net/help/abuse#foreign


No, Cloudflare is not acting inappropriately at all.

This is standard industry practice, not just in the U.S., but also in Europe and the UK.

Hosting providers, telcos, social media platforms, and other similar entities generally comply with court orders or subpoenas directed at their customers.

It’s uncommon for these companies to challenge such orders unless there’s a very compelling legal reason to do so - i.e. some crazy demand.


CenturyLink/Level3 on Twitter: "We are able to confirm that all services impacted by today’s IP outage have been restored. We understand how important these services are to our customers, and we sincerely apologize for the impact this outage caused."

https://twitter.com/CenturyLink/status/1300089110858797063


I hope they provide a root cause analysis


Based on experience it will probably not public, or at least very limited.

But customers are likely to get one, at least if they request it.


Being it was pretty big, they'll probably make it public.




CNN is absolutely right. Every day I read news that something goes down at CloudFlare. CloudFlare do much more harm than they "fix" with their services.


Source?



Cloudflare status page: Update - Major transit providers are taking action to work around the network that is experiencing issues and affecting global traffic.

We are applying corrective action in our data centers as the situation changes in order to improve reachability Aug 30, 14:26 UTC

https://www.cloudflarestatus.com


“AS396531 "Allegheny Technologies Incorporated" is leaking a better-reachable route for AS13335 "Cloudflare, Inc." towards AS701 "Verizon Business/UUnet" explaining the current LSE going on.”

https://twitter.com/OhNoItsFusl/status/1143117619106652160


> AS396531 - Allegheny Technologies Incorporated

That appears to be a steel/alloys company. Why are they operating BGP equipment?


Any company which operates large factories probably has its own ASN and runs its own networks. Every thing's gotta be internet-enabled these days, and at a certain scale, it becomes cost-effective.


Why not? Pretty much everyone that needs a redundant internet connection (dual ISP) does it.


> Why not?

It seems silly to me that an end user company not providing any network services which only has a 256 IP block has the ability to break a significant portion of the internet with a configuration mistake. There are several ways to setup dual ISPs and routing that don't involve such risk.


You need BGP and provider independent space for your two ISPs to both announce your space. What's the alternative approach?


Don't rely on a single IP routing through multiple ISPs, use DNS.


what? this statement makes no sense from a networking perspective.

thisissue still exists if you break up your IP space, it just makes it far harder to manage.


Most places that are just doing it for that reason won't be advertising anything other than their own /24 or whatever though. You have to fuck up pretty spectacularly (and have your upstream providers do the same) to be able to accomplish what has happened here.


Pittsburgh is a town that (used to be) run by steel. Even a few decades after that dominance, this particular company is still a $4B one on the S&P 400. I'm pretty sure this is the company that my grandfather worked at for decades; his brother did from high school to retirement (except during World War II). They apparently significantly polluted the air in the high school district next to mine ten years ago.

It doesn't surprise me at all that they are still a part of infrastructure, somehow.


They aren't the original leaker.

Update: sorry, I may have been wrong. Hard to see clearly in the fog of BGP.


Can you elaborate?


Seconded. I've received notices from multiple carriers that ASN 396531 is the root cause of the leak.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: