Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

news.ycombinator.com

Post reply on HN
Print view View original

121–130 of 312 posts

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#121

Post by mdaniel »

Animats wrote: post #13

> The "unsubscribe" button in Indeed's job notification emails leads me to an impassable Cloudflare challenge. That's a CAN-SPAM act violation. FTC: "Tell recipients how to opt out of receiving future marketing email from you. Your message must include a clear and conspicuous explanation of how the recipient can opt out of getting marketing email from you in the future. Craft the notice in a way that’s easy for an or…

I would suspect that OP is choosing the webpage out of convenience but that there is a List-Unsubscribe: header hiding in the raw version of the email, cheerfully nuking the FTC complaint. Now, demonstrating that the List-Unsubscribe worked is left as an exercise to the reader, but let's be honest, it's the same with the web page variant with bonus points for those pages usually ending it "yeah, we'll get around to it is 364 business days" or some shit

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#122

Post by frereubu »

People are focusing on your very non-standard setup, but I've experienced this - less than you to be sure - on a standard MacOS setup with Firefox and only uBlock Origin installed. If I switched to Chrome without uBlock Origin it worked. This was on the English National Ballet's ticketing website.

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#123

Post by therealmarv »

I do NOT like it at all but I just want to show a way how it works with Cloudflare and to make it painless with them. Basically fully assimilating to them because Resistance is Futile ;)

1) Privacy Pass Extension

Install Privacy Pass Client Extension in your browser, here for Chrome https://chromewebstore.google.com/detail/silk-privacy-pass-c...

2) Use Cloudflare Warp (which is a VPN by Cloudflare basically, it's free):

https://one.one.one.one/

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#124

Post by veeti »

theamk wrote: post #57
stonogo wrote: post #32

Earlier quoted context omitted.

what is the advantage here over just running 'firefox -ProfileManager' and making a clean profile?

All host info not accessible via X11 protocol is hidden, for example font list, is replaced with generic one. For even more protection, run VNC server with common resolution in the container and connect to it using VNC viewer. In this case firefox provides a super generic profile (latest debian with mesa GPU), making this browser very hard to distinguish from others. This has some downsides however: First, you cannot…

Isn't it suspicious bot-like behavior to only have the bare minimum fonts installed? :-)

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#125

Post by luckylion »

scarface_74 wrote: post #71
Hizonner wrote: post #68

Earlier quoted context omitted.

Because they are standards compliant and you aren't, and you are legally required to provide an unsubscribe service or whatever without undue barriers around it.

For unsubscribe - yes. Everything else - no. But if I am using standards and they have an ad blocker that blocks some of the functioning of my site, am I also required to test my site against that?

> Everything else - no.

I'd include _everything_ important in the "yes" category. If I cannot access the customer panel to update settings or notify them of a bug that is affecting me because I'm using Firefox ("works for 95% of users"), they're just not keeping up their end of the contract.

Remember, 95% excludes everything but chromium/webkit-engines.

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#126

Post by casenmgreen »

Cloudflare works much, much better than Google - Google captchas for me, on Tor, are flatly impossible, always. They never let get through, no matter whether you get them right or wrong. You always get "try again".

The problem I do have with CF is their captchas seem to require human interaction on the page, and this makes getting through them problematic when you open half a dozen tabs, and each loads a CF captcha, and you have to move the mouse around for ten seconds just to get the captcha to load, and loading is not reliable. Often you need to reload the page. It's this type of performance, and poor performance, which is breaking web-pages for me.

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#127

Post by natch »

ghjfrdghibt wrote: post #42
kauegimenes wrote: post #7

Can't you have a normal firefox profile for such cases? Do you have any javascript filters? I bet the issue must be related to configs messing with the JS runtime.

The issue is scummy companies like cloudflare which are causing these issues. If your software is blocking legitimate users then your software is shit at its job. It's not the users fault.

Agreed, but I think the point was that the user has a workaround. Use a standard browser for the like five minutes it might take to unsubscribe from these mailing lists, a one-time operation per business, done.

If on the other hand unsubscribing from mailing lists is not the true use case and we are actually being asked to help a bot bypass safeguards… then Cloudflare is doing a great job here.

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#128

Post by jeffbee »

casenmgreen wrote: post #126

Cloudflare works much, much better than Google - Google captchas for me, on Tor, are flatly impossible, always. They never let get through, no matter whether you get them right or wrong. You always get "try again". The problem I do have with CF is their captchas seem to require human interaction on the page, and this makes getting through them problematic when you open half a dozen tabs, and each loads a CF captcha,…

That sounds like a feature. Tor is for abuse, so you don't want Tor people hanging around on your page.

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#129

Post by ghxst »

shiomiru wrote: post #17
solardev wrote: post #2

You're collateral damage in the web's war against bots :( Unfortunately, I think the Cloudflare challenges are designed to filter out users similar to your profile... once you stray far enough from the norm, it just looks like a bot / suspicious traffic to them. Statistically there's not enough users like you (privacy-conscious Linux users on nonstandard browsers) for them to really care enough to do anything about i…

The sad part is that it's trivial to get around CF's bot protection if you're writing a bot (just use curl-impersonate and buy residential IPs), but it's pretty much impossible to bypass as a human if their magical black box doesn't like your browser and/or IP address.

This is great for bypassing the server side bot detection but not the client side one, where it will attempt to verify the integrity of your browser environment.

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#130

Post by salzig »

Animats wrote: post #13

> The "unsubscribe" button in Indeed's job notification emails leads me to an impassable Cloudflare challenge. That's a CAN-SPAM act violation. FTC: "Tell recipients how to opt out of receiving future marketing email from you. Your message must include a clear and conspicuous explanation of how the recipient can opt out of getting marketing email from you in the future. Craft the notice in a way that’s easy for an or…

Thanks for that note. I receive „spam“ by a US based Car Rentel/Leasing Company, cause they prevent me from unsubscribing because i am in European IP-Range (geo-blocking). Especially „nice“ cause they send me contract specific details of one of their customers, who misspelled his email address.
Post reply on HN