161–170 of 172 posts
Earlier quoted context omitted.
It's not about whether your personal use of VPN is legitimate. It's a numbers game. For any successful site that deals in user generated content, moderation is hard and relentless work. If they observe that a high fraction of visitors from AWS / VPN / Tor exit IPs are attackers, they will add countermeasures.
Then in deploying those countermeasures, they should know they're creating (sometimes significant) friction in the experience those legitimate users, who have legitimate reasons for using those tools, have of their site. Well-intentioned or not, the UX sucks, and I generally bail and don't come back if I experience a second Captcha in a session. Find a better solution, or accept that you're driving away eyeballs/reve…
Let's approach this from another angle for a moment - a hypothetical provider with no numbers/revenue; zero, zip.
Where should they start? Do they start by chasing every possible user out there and risk a wave of spam, etc? No, right now - the Cloudflare approach is looking rather attractive despite Cloudflare not needing to advertise these security features far and wide (unlike some VPN providers) because we're talking so much about it.
In the time that this debate will end, the buttons will be clicked, site(s) will be launched and working without problem for the majority of users it will be targeted at. For nearly everyone, this appears to be a much better solution than those that have plagued various online forums and services for years.
So who is going to find a "better" solution? Probably almost nobody. As the other commenter says, it's a numbers game. And that's just business.
Background on tor problems: https://blog.cloudflare.com/the-trouble-with-tor/
Yeah great and I get the Captcha thing, but more than once lately I've been forced to do 8 or 10 of them which is nonsense.
Earlier quoted context omitted.
The plea also goes out to people who have their blogs running through Cloudflare. (For some reason.)
A zero-configuration free CDN is a pretty good reason in my opinion.
Earlier quoted context omitted.
This is great, why isn't this part of the default Tor Browser Bundle?
As I understand it, it is part of the default Tor Browser Bundle. The problem is for people using other browsers with Tor.
Earlier quoted context omitted.
> You have to stop the bots from trying to brute force user accounts and passwords. That shouldn't be an issue if the passwords have enough entropy.
>>> if the passwords have enough entropy. Allow me to optimize your statement. >>> if False
Earlier quoted context omitted.
Yeah great and I get the Captcha thing, but more than once lately I've been forced to do 8 or 10 of them which is nonsense.
Some of them are just plain harder than others. I think the trick is to just do them quickly and not try to think too much. Failure is allowed.
Earlier quoted context omitted.
I'm not sure when you last tried Tor, but it's not that slow these days. I first tried Tor several years ago, and it was so slow I couldn't understand how anyone could bear to use it - but I tried it again recently, and (to my surprise) for general browsing at least, it didn't seem to add any noticeable lag. I wonder if Tor has finally reached critical mass and is ready for more widespread use?
The lag is quite noticeable for me - but it's quite similar to a bottom-5th-percentile internet connection. What was your uplink like when using Tor?