Readit News logoReadit News
greyface- · 16 hours ago
If Flock truly believed that the domain name infringes on their trademark, they would file an ICANN UDRP complaint instead of Cloudflare and Hetzner abuse reports.

But they don't, because the former would require them to perjure themselves, and the latter just requires them to lie to a hosting company.

CalChris · 16 hours ago
I wonder if Flock + Cyble can be sued for fraud. There are 5 elements in a fraud:

  Misrepresentation of Fact
  Knowledge of Falsity
  Intent to Induce Reliance 
  Justifiable Reliance 
  Resulting Damages

themafia · 14 hours ago
Cloudflare would have to bring that suit since they were the ones defrauded. The site owners probably can't sue Cloudflare because of their contract. So the site owners probably have to go basic "tortious interference" and be ready to show actual damages.
thayne · 11 hours ago
The "resulting damages" is pretty small though, they just had to move off of cloudflare. I'm not sure it would be worth it, especially if the other side doesn't end up paying their legal costs.
miohtama · 12 hours ago
You would need damages
jeroenhd · 10 hours ago
Knowingly filing false DMCA claims will also perjure them.

However, ICANN has a whole procedure they follow where complaints are fact-checked, whereas DMCA takedowns put an unreasonable burden on hosting providers that requires immediate action, and many hosting providers will take such action automatically to protect themselves.

I doubt they care about perjury. They care about results, and the DMCA gets them exactly that.

The phishing reports are interesting, providers aren't necessarily required to act as fast on those. Although, I suspect companies like Cloudflare who get used by countless phishers will probably also set up some kind of automated anti phishing system.

charcircuit · 10 hours ago
>Knowingly filing false DMCA claims will also perjure them.

You are confusing false claims with filing DMCA requests on behalf of someone you don't have permission from.

>and under penalty of perjury, that the complaining party is authorized to act on behalf of the owner of an exclusive right that is allegedly infringed

A false DMCA request is misrepresentation.

FireBeyond · an hour ago
Not one single person in the history of the DMCA has been prosecuted for perjury related to filing a DMCA claim.
mycall · 13 hours ago
Cloudfare and Hetzner should see this vulnerability of their own making and DO SOMETHING about it.
moktonar · 10 hours ago
Cloudflare is becoming the great firewall of America more and more every day
charcircuit · 9 hours ago
>they would file an ICANN UDRP complaint

Those take on the order of months to go through. Even if they did so, you wouldn't notice until much later. Meanwhile cloudflare and hetzner are faster. If you want to reduce harm by taking down a site you can't just let it stay up for weeks while the ICANN process plays out.

FireBeyond · an hour ago
> But they don't, because the former would require them to perjure themselves, and the latter just requires them to lie to a hosting company.

Doesn't stop anyone with DMCA... DMCA is coming up on almost three decades of being a law, and requires statements made under penalty of perjury.

However many millions (likely billions) of DMCA takedowns issued, who knows how many false/bad faith... I wonder how many have led to prosecutions for perjury, even when filing tens of thousands, en masse...

No need to wonder, the answer is simple. Starts with a "Z" and ends in "ero".

softwaredoug · 15 hours ago
My city just ended our pilot Flock program. I hope others do the same.

But I think the real issue with Flock will be private security. Random Home Depot parking lots, etc.

https://www.29news.com/2025/12/17/charlottesville-ends-flock...

rrix2 · 15 hours ago
The local credit union in Eugene had installed Flock cams at the entrances to all their branches. They took em down after only a few of our community members began protests out front a few branches and emailing with the CU's leadership before our city terminated our contract and removed the cams
overfeed · 12 hours ago
> My city just ended our pilot Flock program. I hope others do the same.

If someone would like to engage in grassroots activism on this, may I suggest the perfect domain: getTheFlockOutOfMyCity.com

LostMyLogin · 12 hours ago
My town in Colorado just did the same. Pretty happy with the result.
_a9 · 18 hours ago
Part 2: Flock and Cyble Inc. Continue to File False Notices

https://haveibeenflocked.com/news/cyble-part2

VladVladikoff · 15 hours ago
> The site’s only input fields accept license plate numbers (which are hashed client-side before transmission and cannot be harvested)

License plates are trivially short, hashing them accomplishes no additional level of privacy if the hashes could be bruted in seconds on an antique GPU.

croes · 11 hours ago
They have indexed publicly available data. The privacy was long gone before you even entered a license plate number. Or do you think other actors didn’t have the same data but without a frontend to show it to you?
VladVladikoff · 4 hours ago
Entering your licence plate into this site gives the operator your geodata/ip address tied back to your licence plate.
hibf · 14 hours ago
Technically true. Flock could present an unfounded argument that I might be brute-forcing my own security and privacy measures.

I think it'd sound pretty dumb.

whatshisface · 14 hours ago
If the security depends on the person it's supposed to be secure against not trying to break it...
TheDong · 13 hours ago
Being able to say "Our server never sees user-input license plate numbers", even though from a technical perspective the hash is just as identifiable, does have value. Even though it offers no additional privacy, it does let non-technically-minded users and so on feel safer, and that's valuable.
rockskon · 11 hours ago
That "value" here lets them mislead policymakers.
63stack · 12 hours ago
The value is being able to mislead your users
mceachen · 6 hours ago
VladVladikoff · 4 hours ago
Well aware of these, however that would not benefit in this case. Their main protection is against pre computed lookup tables. But since the operator needs to be able to lookup the license plate within their own database, then they would not be using either of these. If the operator really wanted to do this in a safe way for the user then the whole database should exist client side.
defrost · 16 hours ago
Related: Flock Said It Does Not Use Dark Web Data. Code Analysis Tells a Different Story - https://news.ycombinator.com/item?id=46341674
latentpot · 10 hours ago
Cyble, with a large team of dark Web researchers based out of India cover that while giving flock plausible deniability
Kim_Bruning · 15 hours ago
If these folks get in trouble, they might try hosting with Freedom.nl . It's +/- the old xs4all crew, and they might be in for some more fun in the 21st century.
cosmicgadget · 15 hours ago
> With the new Divinity game in the works, I decided to do a run as Gale in BG3.

I don't support this decision but I respect it.

Curious what the Cloudflare HNers have to say about this debacle.

seanhunter · 10 hours ago
Everyone knows that it all hinges on why they’re being Gale. If they’re doing it so they can romance Shadowheart then it’s permissable.
badgersnake · 5 hours ago
You can romance Shadowheart as Laezel if you want and they hate each other at the start of the game. Don’t need Gale for that. You can “win” in act 1 with Gale though.
hibf · 15 hours ago
Can't be less than what support has had to say up until now.
manbart · 13 hours ago
Flock is trying their best to usher in dystopia