(#3p5hajq) Alright, I don't want to spam anymore. I could reference /etc/ and a meaningless file in /etc/, but I was unable to reference the passwd file. Just another Cloudflare MITM job.

(#3p5hajq) @mckinley I'm happy to give you my IP which you can shoved in your `/etc/hoste`

(#3p5hajq) @prologic I tried several different Tor circuits before I logged in and didn't get a captcha once. Let's see if I can talk about /etc/hosts now.

(#3p5hajq) @mckinley 🥳

(#3p5hajq) /etc/passwd

(#3p5hajq) @prologic Success!

(#3p5hajq) /etc/

(#3p5hajq) @prologic I appreciate that but it's not necessary. I'm using *the amnesic incognito live system* anyway, so it would be a chore to enable the admin *secret text* and edit *the hosts file* on every boot. Most *orange cloud*-enabled *common net* sites I try to use over *the onion router* give me a lot more trouble.

(#3p5hajq) /etc/asdf

(#3p5hajq) PS I've sent of an Email to support to see if I can just disable the WAF entirely. At this point I don't think it buys much value for projecting my infra 😅 I only require Cloudflare in front of my infra to protect it from assholes that _might_ want to DDoS either my infra directly or that of my ISP's Network (has happened before). If I can still have DDoS protection without the WAF, I'll disable it.