281–290 of 335 posts
So basically the point of the article is this: there are no perfect tools. Not sure why this article got so much traction. It's like complaining that airport security checks your bags when you have gun-shaped objects inside it.
It appears that you may have made some modifications to your user agent string. If you revert your user agent to the one provided by default by your browser vendor everything will be fine.
Possible reason why it UA matters: https://blog.cloudflare.com/monsters-in-the-middleboxes/
Earlier quoted context omitted.
I think if your business helps 20,000,000 groups of people talk to each other (sites), you get to once or twice be like, "Ok, you guys are clearly murderers plotting murders, can you go do it somewhere else?" Haha.
I think this goes out the window when you have a bad actor making claims as follows: >The tipping point for us making this decision was that the team behind Daily Stormer made the claim that we were secretly supporters of their ideology. I am no fan of Cloudflare; as an expat, their service just makes my life increasingly frustrating as I have to go through hoops and perform circus tricks just to look at the bouquet…
This was not true as far as I know at least. I heard that some random dude in their forum made the claim.
Earlier quoted context omitted.
Possible reason why it UA matters: https://blog.cloudflare.com/monsters-in-the-middleboxes/
I find it very annoying that the authors thought it would be cute to use another full name for MITM.
Cloudflare is also making TOR quite useless.
[Nitpick: it's Tor not TOR]
Earlier quoted context omitted.
That User-Agent won't trigger the block page you were experiencing. No clue about the issues with Google, perhaps some feature detection going on?
Nope, it's Google trying to ban "embedded browser frameworks" - see https://github.com/qutebrowser/qutebrowser/issues/5182 for details.
The problem presented by services like ReCaptcha and Cloudflare is a tough nut to crack. They're silently embedded in a huge portion of modern websites, and the average user will never even know about them. But it seems to be way too easy for them to blanket-ban or serve an absurd amount of captchas to powerusers, linux gurus, privacy geeks, or anyone with the wrong combination of browser+addons. And the failures (as…
Yeah, you can't really talk about downsides of Recaptcha/Cloudflare without also acknowledging the extreme amount of malicious actors and abuse on the internet. We're in a "this is why we can't have nice things" predicament and you have malicious actors to thank for that, yet most people on HN only seem capable of attacking the few affordable solutions to that problem. I'm even down with the theory that Cloudflare is…
But recaptcha bas been broken for years now by several different means. At this point, it is so broken it's almost a scam (and just another way for Google to get personal data from as many website as they can).
Earlier quoted context omitted.
> Part of the reason why everyone is trying to detect bots is because bots will very, very rapidly eat up your bandwidth and CPU time. It is? Thought bot detection was only done during registration etc. to stop them from sending spam etc. to real users. If anything the javascript world we live in helps combat this. You need insane resources on the client just to have a page open. Several orders of magnitude more than…
In that case, an IP or IP block throttling is good enough. Except then there are those pesky CGNATs to handle including Chinese Great Wall. Anyway, high profile spammers will emulate enough of the browser to render any measure based on browser anomaly detection worthless. Including using a headless browser. The only way to defeat them would be too put some quite computationally intensive JS operation... (On par with…
Seems highly unrealistic.
Earlier quoted context omitted.
It really hits home the point of how shitty the web has become. Ad companies and malware distributors come up with bad and worse ways to interfere with my browsing, and the “good guys” need to match with increasingly invasive and fragile anti measures. Sort of like having to take of your shoes when you board a plane. If that’s what it takes, isn’t it just better to stay home?
> Sort of like having to take of your shoes when you board a plane. If that’s what it takes, isn’t it just better to stay home? Removal of shoes, 'naked' full body scanners, these are all terrible, and I tell myself every time it isn't worth the hassle. The reality is that as much as I hate it, I'm still flying every other week. I'm also on the Internet daily. I don't see that changing.