Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Firefox appears to be flagged as suspicious by Cloudflare

lwthiker.com

Post reply on HN
Print view View original

161–170 of 191 posts

Re: Firefox appears to be flagged as suspicious by Cloudflare

#161

Post by schappim »

webmobdev wrote: post #138
rezonant wrote: post #25

This is almost certainly a firewall rule put in place by the operators of that site. My own sites which are protected with Cloudflare do not exhibit this behavior when using Firefox.

Privacy preserving extensions like uBlock Origin, Canvas Blocker, Decentraleyes etc. used in Firefox also trigger the CloudFlare wall of harassment. Some of the actions of these extensions prevent browser fingerprinting and CloudFlare gets easily confused when this happens and unnecessarily triggers a lot of challenges for a user. You can easily get sucked into the blackhole of captchas - sometimes even solving 5+ ca…

>> CloudFlare wall of harassment

You’re right, this is a form of harassment, and it needs to be recognised as such.

Re: Firefox appears to be flagged as suspicious by Cloudflare

#162

Post by kevin_thibedeau »

_HMCB_ wrote: post #159
alaricus wrote: post #145

Earlier quoted context omitted.

Care to back that up with data? The link above is demonstrating the opposite.

Quoted post unavailable.

> The JavaScript Detections (JSD) engine identifies headless browsers and other malicious fingerprints.

Blocking JS is not malicious.

Re: Firefox appears to be flagged as suspicious by Cloudflare

#163

Post by kevin_thibedeau »

adra wrote: post #62
SoftTalker wrote: post #56

Earlier quoted context omitted.

Often, just changing the user agent string so that Firefox appears to be Chrome will let those sites work. I.e. they work fine in Firefox, but are restricted by user agent string checks to reject that browser and/or OS. There are several plugins for Firefox that make this easy.

I've used Firefox and Mozilla for what, 20 years? And I've never bumped into a situation like this. Some very clearly shit internal IT systems had pathetic IE requirements, but never one that said sorry go get chrome

I have a randomized user agent and I occasionally see sites refuse to deliver a page because they think a particular browser won't work.

Re: Firefox appears to be flagged as suspicious by Cloudflare

#164

Post by trog »

Firefox user - have seen this many times. Always assumed it's either NoScript or Firefox's built-in tracking protection meaning there's some pre-existing cooking not set that Cloudflare places from other site visits, or because some script is getting blocked somewhere else.

Re: Firefox appears to be flagged as suspicious by Cloudflare

#166

Post by megous »

I also got perma blocked by cloudflare (no option to override to get access, not even their captcha), because I dared to disable web timing APIs in Firefox at some point in the distant past. (I felt those have no legitimate uses, and I still do)

dom.enable_event_timing / dom.enable_performance_navigation_timing

I only figured what was wrong after a month of no access to gitlab and other websites.

Re: Firefox appears to be flagged as suspicious by Cloudflare

#168

Post by rbut »

tuankiet65 wrote: post #167

I got HCaptcha-ed while using Chromium + uBlock Origin (no other privacy extensions / settings as far as I think). Happens both in normal and incognito mode.

Same HCaptcha in Brave.

I then tried in Firefox and only got the delay mentioned in the article.

Note that I am also browsing via a VPN.

Re: Firefox appears to be flagged as suspicious by Cloudflare

#169

Post by rezonant »

trog wrote: post #164

Firefox user - have seen this many times. Always assumed it's either NoScript or Firefox's built-in tracking protection meaning there's some pre-existing cooking not set that Cloudflare places from other site visits, or because some script is getting blocked somewhere else.

Seeing the cloudflare challenge as a user can happen in any browser depending on the site and it's configuration. A site can choose a security level that requires all visitors to receive a JS/captcha challenge, and sites can make custom firewall rules to require JS/captcha challenges on any of hundreds of different attributes of a particular request using CF's web application firewall tools. One of those attributes is user agent, for instance.

Re: Firefox appears to be flagged as suspicious by Cloudflare

#170

Post by erung88 »

I don't think one can conclude anything with just 1 site being blocked by www.g2.com using Firefox. More tests will show a clearer picture:

What about using another OS?

What about using another IP address?

What about other websites? Is the issue only repeatable with www.g2.com?

What about using mobile phone browser instead?

Post reply on HN