This is a most excellent place for technology news and articles.
i think this would be true of basically any large service that had multiple data centers. whichever one catches your data is the one closest to you.
the difficulty is accessing that data even if you can't read it you still have the closest location.
sounds to me like the Internet working as intended. if you want true privacy you need to take extra steps
Agreed. Privacy is always a balance between your threat model and useability. If your general location is enough to put you in danger, hopefully you're already aware of how your data is being sent over the various networks and have measures in place to stay safe.
For most people, knowing very generally where they are isn't especially useful information to anyone with an interest in surveillance.
Not even guaranteed to be the closest data center. It’s not completely out of the ordinary for there to be a faster route available to a data center farther away.
true, true
On the one hand, deanonimization attacks are never entirely avoidable on unhardened targets and this one isn't particularly sophisticated and leaks relatively little information.
On the other hand deanonimization attacks are always bad and it's a good reminder to people of the risks they are taking. This is also slightly non-obvious behavior, even if it makes sense to the technically competent, as something like an IP grabber normally requires user interaction such as clicking a link. It's also a vector that CF might be able to mitigate by patching the ability to query a given cache directly.
they should be able to patch that as long as nothing relies on it working as is
I don't want to be a contrairian, but your cellphone carrier does this non stop. Cloudflare is not a good company, but this is the least of your problems.
You have entirely misunderstood this exploit.
How so? Asking out of curiosity.
I'm not trying to wear a tinfoil hat, but Snowden clearly revealed that the government is easily able to purchase cellphone location data based on GPS and tower data more easily than they can go through the FISA courts.
Ah, thought you meant though metadata. Like a end user snooping through some obscure meta data method (even after cleaning) let's you triangulate something.
Your cellphone provider very likely already sells this data.
I know mine does, because I attended a webinar of a buying company where they explicitly mentioned this.
Another reason why Cloudflare sucks.
oh no, now they nkow I'm in the US North East, assuming I'm not using a VPN...
Another reason to not use Cloudflare. Not that long ago they also "lost the log records" (this incident happened on November 14, 2024). I strongly believe the internet can become better without Cloudflare, especially now basically the whole world is depending on it.
Sorry to see so many people still down vote me. What is wrong with you? The internet has become a joke. Moving all to cloudflare will only make the problem worse.
It is impossible to use most of corpo internet if you block cloudflare. Shit is wild.
Not sure who is down voting you lol
I wish people would respond with a rebuttal so we can move convo forward.
I also have no idea why is down voting me lol. But you are 100% right. Could you imagine in the year 2000 that everything needs to behind Cloudflare in 2025 in order to have a functional internet? This shit is indeed wild.
fuck me lemmy is turning into an absolute reddit-esque cesspool shithole.
i do not understand why people are in here simping for cloudflare (presumably unpaid) do they have money in cloudflare? clearly they don't have a fucking clue whats really going on in the world, but what makes them think they need to actively enforce (ie. downvote people) for pointing out issues with cloudflare??
this is beyond weird.
You don't need a VPN mate...
It ain't a solution but surely would help here
