Comment by kevincox
7 hours ago
Yup, I explicitly had all anaytics turned off. But had a few sites using Cloudflare for caching. Now I'm checking and seeing this on all of them. This is gross and unacceptable. "Caching" does not mean "modifying my site".
Adding a RUM beacon for observability / performance metrics capture, as an opt-out feature for free plans (opt-in for paid plans), is not exactly nefarious. Hopefully/presumably there was some communication before the change was rolled out.
MITM attack, that's what it is. Why is this not in the news? Ah, no one cares.
Why is this not in the news?
Good point. There should be a place where hackers can get this kind of news. Some kind of Hacker News place.