5 ms·

Much better than infinite Cloudflare captcha loops.

by Hakkin 1y ago

gruez 1y ago
I've never had that, even with something like tor browser. You must be doing something extra suspicious like an user agent spoofer.
- xena 1y ago
  Apparently user-agent switchers don't work for fetch() requests, which means that Anubis can't work with people that do that. I know of someone that set up a version of brave from 2022 with a user-agent saying it's chrome 150 and then complaining about it not working for them.
- megous 1y ago
  Proper response here is "fuck cloudflare", instead of blaming the user.
  - gruez 1y ago
    It's well within your rights to go out of your way to be suspicious (eg. obfuscating your user-agent). At the same time sites are within their rights to refuse service to you, just like banks can refuse service to you if you show up wearing a balaclava.
    - megous 1y ago
      You're assuming too much. I'm not obfuscating/masking anything. I'm just using Firefox with some (to the user/me) useless web APIs disabled to reduce the attack surface of the browser and CF is not doing feature testing. It's not just websites that need to protect themselves. Eg. Anubis here works fine for me, completely out-classing the CF interstitial page with its simplicity.
- praisewhitey 1y ago
  Firefox with Enhanced Tracking Protection turned on is enough to trigger it.
  - gruez 1y ago
    The infinite loop or the challenge appearing? I've never had problems with passing the challenge, even with ETP + RFP + ublock origin + VPN enabled.
    - cookiengineer 1y ago
      Cloudflare is too stupid to realize that carrier grade NATs exist a lot in Germany. So there's that, sharing an IP with literally 20000 people around me doesn't make me suspicious when it's them that trigger that behavior. Your assumption is that anyone at cloudflare cares. But guess what, it's a self fulfilling prophecy of a bot being blocked, because not a single process in the UX/UI allows any real user to complain about it, and therefore all blocked humans must also be bots. Just pointing out the flaw of bot blocking in general, because you seem to be absolutely unaware of it. Success rate of bot blocking is always 100%, and never less, because that would imply actually realizing that your tech does nothing, really. Statistically, the ones really using bots can bypass it easily.
      - xena 1y ago
        Honestly it's a fair assumption on bot filtering software that no more than like 8 people will share an IPv4. This is going to make IP reputation solutions hard. Argh.
      - viraptor 1y ago
        If you want to try fighting it, you need to find someone with CF enterprise plan and bot management working, then get blocked and get them to report that as wrong. Yes it sucks and I'm not saying it's a reasonable process. Just in case you want to try fixing the situation for yourself.
      - gruez 1y ago

Much better than infinite Cloudflare captcha loops.

by Hakkin 1y ago

Much better than infinite Cloudflare captcha loops.

I've never had that, even with something like tor browser. You must be doing something extra suspicious like an user agent spoofer.

xena 1y ago
Apparently user-agent switchers don't work for fetch() requests, which means that Anubis can't work with people that do that. I know of someone that set up a version of brave from 2022 with a user-agent saying it's chrome 150 and then complaining about it not working for them.
megous 1y ago
Proper response here is "fuck cloudflare", instead of blaming the user.
- gruez 1y ago
  It's well within your rights to go out of your way to be suspicious (eg. obfuscating your user-agent). At the same time sites are within their rights to refuse service to you, just like banks can refuse service to you if you show up wearing a balaclava.
  - megous 1y ago
    You're assuming too much. I'm not obfuscating/masking anything. I'm just using Firefox with some (to the user/me) useless web APIs disabled to reduce the attack surface of the browser and CF is not doing feature testing. It's not just websites that need to protect themselves. Eg. Anubis here works fine for me, completely out-classing the CF interstitial page with its simplicity.
praisewhitey 1y ago
Firefox with Enhanced Tracking Protection turned on is enough to trigger it.
- gruez 1y ago
  The infinite loop or the challenge appearing? I've never had problems with passing the challenge, even with ETP + RFP + ublock origin + VPN enabled.
  - cookiengineer 1y ago
    Cloudflare is too stupid to realize that carrier grade NATs exist a lot in Germany. So there's that, sharing an IP with literally 20000 people around me doesn't make me suspicious when it's them that trigger that behavior. Your assumption is that anyone at cloudflare cares. But guess what, it's a self fulfilling prophecy of a bot being blocked, because not a single process in the UX/UI allows any real user to complain about it, and therefore all blocked humans must also be bots. Just pointing out the flaw of bot blocking in general, because you seem to be absolutely unaware of it. Success rate of bot blocking is always 100%, and never less, because that would imply actually realizing that your tech does nothing, really. Statistically, the ones really using bots can bypass it easily.
    - xena 1y ago
      Honestly it's a fair assumption on bot filtering software that no more than like 8 people will share an IPv4. This is going to make IP reputation solutions hard. Argh.
    - viraptor 1y ago
      If you want to try fighting it, you need to find someone with CF enterprise plan and bot management working, then get blocked and get them to report that as wrong. Yes it sucks and I'm not saying it's a reasonable process. Just in case you want to try fixing the situation for yourself.
    - gruez 1y ago