It is not enabled by default, but conveniently it's toggled on if you accept the ACR terms of service - including if you select "agree to all" - during TV setup and/or when downloading or updating any apps.
Full Strict just means that CF verifies your origin cert against actual CAs (or the private CA they issue you a cert for). "Full" means they don't verify the certificate authority of your origin, which technically is _a lot worse_ because that means you could be getting silently MITMd by some middlebox, since Cloudflare will accept whatever self-signed certificate your origin presents.
For almost all of Cloudflare's features. CDN, WAF, and all the compute features require seeing, storing, and caching content in plaintext. CF doesn't have much of a value proposition if all they're doing is handling Layer 3/4 DDOS prevention (most DDOS hits even back in 2015 were done on the protocol layer, or at least most DDOSes that actually showed up or impacted the underlying service).
Tangentially related, the archive.is / archive.today / etc site host used to block anyone using 1.1.1.1 DNS because 1.1.1.1 doesn't send an eDNS subnet to the authoritative DNS server. It accomplishes nothing except annoying actual users.
incredibly weird first comment to post on HN, especially when nothing about this has anything to do with any configuration. the entire thing is about cloudflare's outsized role in controlling connectivity on the internet, which is very real.
just sort of a general complaint about how much the internet relies on cloudflare and what that means. massive point of failure, erratic browser checks & outright blocking, surveillance
Idk, I have a strong feeling Apple is not doing ACR or covert recording themselves, and the OS provides some strong guarantees that you know when the mic is active.
Read the complaint and it is pretty shaky, notably it seems to say that, because wake word detection is not 100% accurate (as in, 0 margin for error), Apple should advertise "we are recording your conversations covertly" just because the phone can sometimes trigger wake word detection on something that isn't the wake word (hey siri).
Also Reuters reports " and disclosed these conversations to third parties such as advertisers." but I don't actually see that in the initial complaint interestingly.
You're conflating "predictable" with "reproducible".
"Predictable" assumes there is an observer making a guess, but we all live by the knowledge that our assumptions may be wrong. We care less about that, and more about whether the system behaves consistently.
Consistent behavior is either a bug or a feature depending on what was expected. The system just is, man, and that's what we need.
"Nobody sits like this rock sits. You rock, rock. The rock just sits and is. You show us how to just sit here and that's what we need."
Only need JS for the Datadome domains in order to get the Datadome cookie. No JS is required to read economist.com and ad blockers do not need to be disabled
reply