Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

ChatGPT won't let you type until Cloudflare reads your React state

buchodi.com

Post reply on HN
Print view View original

81–90 of 668 posts

Re: ChatGPT won't let you type until Cloudflare reads your React state

#81

Post by 0x3f »

noosphr wrote: post #71
MyNameIsNickT wrote: post #49

Hey! I'm Nick, and I work on Integrity at OpenAI. These checks are part of how we protect our first-party products from abuse like bots, scraping, fraud, and other attempts to misuse the platform. A big reason we invest in this is because we want to keep free and logged-out access available for more users. My team’s goal is to help make sure the limited GPU resources are going to real users. We also keep a very close…

>These checks are part of how we protect our first-party products from abuse like bots, scraping, fraud, and other attempts to misuse the platform. Can you share these mitigations so we can mitigate against you?

It's just Cloudflare. Bypassing it is a whole industry.

Re: ChatGPT won't let you type until Cloudflare reads your React state

#82

Post by amatecha »

ehnto wrote: post #64
lxgr wrote: post #14

It's absurd how unusable Cloudflare is making the web when using a browser or IP address they consider "suspicious". I've lately been drowning in captchas for the crime of using Firefox. All in the interest of "bot protection", of course.

I recently had the insane experience of filling out 15 consecutive captchas, after, I had checked out and entered my payment information into the payment processor widget. I just wanted to submit the order. I was logged in to their website, and the bank even needed a one time code for payment. If the bank is pretty sure I am human then your ecomm site can figure it out surely.

A while back I was buying tickets for a gondola for a trip in Europe and the checkout process failed during payment because their site didn't load their analytics/tracking stuff with proper error-handling, so when my ad-blocker prevented the tracking stuff, their checkout process failed to handle my CC's 2-factor auth and the checkout would fail. Had to contact my CC company and work with the gondola company to tell them what they're doing wrong so they could fix their website code. Pretty sad to know whoever built their stuff actually shipped a checkout flow (for a VERY popular tourist destination) without testing with ad-blockers enabled.

Re: ChatGPT won't let you type until Cloudflare reads your React state

#83

Post by gruez »

everdrive wrote: post #69
MyNameIsNickT wrote: post #49

Hey! I'm Nick, and I work on Integrity at OpenAI. These checks are part of how we protect our first-party products from abuse like bots, scraping, fraud, and other attempts to misuse the platform. A big reason we invest in this is because we want to keep free and logged-out access available for more users. My team’s goal is to help make sure the limited GPU resources are going to real users. We also keep a very close…

It's getting to the point where a user needs at minimum two browsers. One to allow all this horrendous client checking so that crucial services work, and another browser to attempt to prevent tracking users across the web. Nick, I understand the practical realities regarding why you'd need to try to tamp down on some bot traffic, but do you see a world where users are not forced to choose between privacy and function…

>It's getting to the point where a user needs at minimum two browsers. One to allow all this horrendous client checking so that crucial services work, and another browser to attempt to prevent tracking users across the web.

What are you talking about? It works fine with firefox with RFP and VPN enabled, which is already more paranoid than the average configuration. There are definitely sites where this configuration would get blocked, but chatgpt isn't one of them, so you're barking up the wrong tree here.

Re: ChatGPT won't let you type until Cloudflare reads your React state

#84

Post by Imustaskforhelp »

whatisthiseven wrote: post #53
lucasfin000 wrote: post #32

Earlier quoted context omitted.

The real frustrating part is that Cloudflare's "definition" of suspicious keeps changing and expanding. VPN users, privacy-first browsers, uncommon IP ranges, they all get flagged. The people most likely to get caught by these systems are exactly the ones who care most about their privacy, and not the bots that they are apparently targeting.

Which VPNs are people using that actually care about the user's privacy? Most of them don't, sell their home IP to buyers, sell their DNS history to others, etc. Worse, some of them could require invasive MITM cert stuff most users will just click yes through. I have yet to see a use case for VPNs for the casual internet audience, and for a tech savvy user, their better off renting through some datacenter or somethin…

ProtonVPN with bitcoin which you get from a monero swap is a good idea for complete privacy if you want port forwarding.

MullvadVPN is also another great one.

I have heard some good things about AirVPN, but I can absolutely attest for mullvad and to a degree ProtonVPN (Just with Proton, depending upon your threat model, do make the necessary precautions like buying with monero for example)

There are others, but mostly its the 2-3 that I trust.

Re: ChatGPT won't let you type until Cloudflare reads your React state

#87

Post by jgalt212 »

amatecha wrote: post #73
lxgr wrote: post #14

It's absurd how unusable Cloudflare is making the web when using a browser or IP address they consider "suspicious". I've lately been drowning in captchas for the crime of using Firefox. All in the interest of "bot protection", of course.

These days I just close sites that show that "checking if you're a bot" shit. If this is how the web is going to be now, I don't care, I'll just not use it. I didn't need to see that article or post that badly anyways. I'm tired of paying the price for the sociopathic, greedy actions of others. It's especially bad for anyone who uses an open source OS like Linux or *BSD (to the extent many sites just block me automat…

We use Cloudflare to protect our content, but at the same time our machines mostly run Linux / Firefox so it really is quite a frustrating relationship. It really bums me out how much of Turnstile boils down to these two questions:

is it Linux (or similar)?

is it Firefox?

If yes, to one or both, you're blocked! Clearly millions of dollars of engineering talent and petabytes of data collection should be able to come up with something more nuanced than this.

Re: ChatGPT won't let you type until Cloudflare reads your React state

#88

Post by jagged-chisel »

0x3f wrote: post #79
everdrive wrote: post #69

Earlier quoted context omitted.

It's getting to the point where a user needs at minimum two browsers. One to allow all this horrendous client checking so that crucial services work, and another browser to attempt to prevent tracking users across the web. Nick, I understand the practical realities regarding why you'd need to try to tamp down on some bot traffic, but do you see a world where users are not forced to choose between privacy and function…

Meet me in a cafe and I will sign a JWT saying you're not a bot. You can submit this to whoever will accept it.

Sounds like we’re bringing back the PGP key signing parties

Re: ChatGPT won't let you type until Cloudflare reads your React state

#89

Post by dev1ycan »

MyNameIsNickT wrote: post #49

Hey! I'm Nick, and I work on Integrity at OpenAI. These checks are part of how we protect our first-party products from abuse like bots, scraping, fraud, and other attempts to misuse the platform. A big reason we invest in this is because we want to keep free and logged-out access available for more users. My team’s goal is to help make sure the limited GPU resources are going to real users. We also keep a very close…

"abuse like bots, scraping, fraud, and other attempts to misuse the platform"

This has to be a joke, right?

Re: ChatGPT won't let you type until Cloudflare reads your React state

#90

Post by [deleted] »

0x3f wrote: post #79
everdrive wrote: post #69

Earlier quoted context omitted.

It's getting to the point where a user needs at minimum two browsers. One to allow all this horrendous client checking so that crucial services work, and another browser to attempt to prevent tracking users across the web. Nick, I understand the practical realities regarding why you'd need to try to tamp down on some bot traffic, but do you see a world where users are not forced to choose between privacy and function…

Meet me in a cafe and I will sign a JWT saying you're not a bot. You can submit this to whoever will accept it.

[deleted]
Post reply on HN