Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

news.ycombinator.com

Post reply on HN
Print view View original

131–140 of 312 posts

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#131

Post by scarface_74 »

luckylion wrote: post #125
scarface_74 wrote: post #71

Earlier quoted context omitted.

For unsubscribe - yes. Everything else - no. But if I am using standards and they have an ad blocker that blocks some of the functioning of my site, am I also required to test my site against that?

> Everything else - no. I'd include _everything_ important in the "yes" category. If I cannot access the customer panel to update settings or notify them of a bug that is affecting me because I'm using Firefox ("works for 95% of users"), they're just not keeping up their end of the contract. Remember, 95% excludes everything but chromium/webkit-engines.

Every SaaS company I’ve worked for has had a compatibility matrix where we say what we support. If we lost customers who were running a highly customized Firefox on Linux, so be it.

Every company decides which customers are worth going after.

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#132

Post by omgin »

Try creating a cloudflare.com account and stay logged into it. I.e. every few days go into the cloudflare dashboard.

Don't know if it will help but they use lots of methods to see if you are hostile, and being logged in and authenticated with them can't harm

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#133

Post by ghxst »

veeti wrote: post #124
theamk wrote: post #57

Earlier quoted context omitted.

All host info not accessible via X11 protocol is hidden, for example font list, is replaced with generic one. For even more protection, run VNC server with common resolution in the container and connect to it using VNC viewer. In this case firefox provides a super generic profile (latest debian with mesa GPU), making this browser very hard to distinguish from others. This has some downsides however: First, you cannot…

Isn't it suspicious bot-like behavior to only have the bare minimum fonts installed? :-)

To be fair, Firefox out of the box prevents against font fingerprinting more than Chrome, it's considerably easier to get Firefox to run in a docker container and pass all the client side challenges than Chrome in my experience, you still have a valid point though.

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#134

Post by duskwuff »

PaulHoule wrote: post #90

It's ironic but I was having terrible problems accessing archive.today when I was using Cloudflare DNS (1.1.1.1) that cleared up when I switched to either my ISP's provider or Google's 8.8.8.8. I was not the only one https://news.ycombinator.com/item?id=38063548 What's funny about it is that as a human I get tormented by those things all the time but I have been writing bots since 1999 and have yet to have had CAPTCH…

> I was having terrible problems accessing archive.today when I was using Cloudflare DNS (1.1.1.1)

That's because that web site returns bad results to Cloudflare DNS, ostensibly because they take issue with the way it handles EDNS0. The fact that it fails to work is a deliberate choice by the site operator; it isn't Cloudflare's fault.

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#135

Post by stebalien »

therealmarv wrote: post #123

I do NOT like it at all but I just want to show a way how it works with Cloudflare and to make it painless with them. Basically fully assimilating to them because Resistance is Futile ;) 1) Privacy Pass Extension Install Privacy Pass Client Extension in your browser, here for Chrome https://chromewebstore.google.com/detail/silk-privacy-pass-c... 2) Use Cloudflare Warp (which is a VPN by Cloudflare basically, it's fre…

The privacy pass extension still requires you to pass a cloudlare turnstile which is impossible in some browser configurations. E.g., if you disable browser performance-debugging/timing features (these used to be a vector for Spectre timing attacks).

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#136

Post by duskwuff »

magic_smoke_ee wrote: post #59

I can't use any of the kerbalspaceprogram.com domains because of improper discrimination against IPv6 clients triggered by CloudFlare. Error 1015 Ray ID: .... • xxxx-xx-xx xx:xx:xx UTC You are being rate limited What happened? The owner of this website (wiki.kerbalspaceprogram.com) has banned you temporarily from accessing this website. This sort of monoculture creates an Orwellian SPoF.

That isn't "triggered by Cloudflare". The operator of the web site has deliberately configured it to block your IP range, and Cloudflare is obeying those instructions.

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#137

Post by ghjfrdghibt »

gruez wrote: post #107
ghjfrdghibt wrote: post #103

Earlier quoted context omitted.

It wasn't meant to be taken seriously, I was using it to show the ridiculousness of blaming a user for the shortcomings of cloudflare. But if you like: the arbitrarily blocked user if not at fault, cloudflare is at fault.

>I was using it to show the ridiculousness of blaming a user for the shortcomings of cloudflare. That doesn't advance the conversation, or show that cloudflare should be always as fault, as you seem to imply. Even if people are pro privacy/freedom, I think most wouldn't give the individual (as opposed to the security provider) unlimited leeway, as seen in the bank example.

[flagged]

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#138

Post by duskwuff »

blakeashleyjr wrote: post #8

What I don't understand is why you have to protect areas that require login so harshly? If I can log in, especially with 2-factor, you can safely assume I am not a bot, or you have a larger problem. If I have entered bad credentials 5+ times, okay, you can start backing me off or challenging me. What am I missing? Fail2ban has been around a long time.

> What am I missing? Fail2ban has been around a long time.

Modern threat actors can spread requests out over large pools of source IPs. Rate limiting login attempts by IP isn't an effective means of preventing credential stuffing attacks.

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#139

Post by whimsicalism »

PaulHoule wrote: post #90

It's ironic but I was having terrible problems accessing archive.today when I was using Cloudflare DNS (1.1.1.1) that cleared up when I switched to either my ISP's provider or Google's 8.8.8.8. I was not the only one https://news.ycombinator.com/item?id=38063548 What's funny about it is that as a human I get tormented by those things all the time but I have been writing bots since 1999 and have yet to have had CAPTCH…

the russian archive site and cloudflare have been having a dispute for a while now

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#140

Post by rad_gruchalski »

luckylion wrote: post #125
scarface_74 wrote: post #71

Earlier quoted context omitted.

For unsubscribe - yes. Everything else - no. But if I am using standards and they have an ad blocker that blocks some of the functioning of my site, am I also required to test my site against that?

> Everything else - no. I'd include _everything_ important in the "yes" category. If I cannot access the customer panel to update settings or notify them of a bug that is affecting me because I'm using Firefox ("works for 95% of users"), they're just not keeping up their end of the contract. Remember, 95% excludes everything but chromium/webkit-engines.

If that 5% is 90% of cost to provide the service, forget it. Nobody is going to do a Herculean task to support a niche user.
Post reply on HN