Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

news.ycombinator.com

Post reply on HN
Print view View original

181–190 of 312 posts

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#181

Post by panic »

superasn wrote: post #174

I appreciate you bringing up this issue about the Cloudflare challenges making it hard to browse. I had a similar experience where I couldn't access jsfiddle even without using a VPN. As a result, I switched to a different platform for my coding experiments. JsFiddle used to be my favorite for quickly testing out code snippets. It's a shame that due to Cloudflare hurdles, I've stopped using it and don't plan on going…

One concrete thing we can do is to stop seeing Cloudflare as an easy, unproblematic solution. Bring up issues like this when people suggest using it.

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#182

Post by peanut-walrus »

Dylan16807 wrote: post #171
peanut-walrus wrote: post #167

Earlier quoted context omitted.

Ok, what does the venn diagram of: 1) People who anonymize their IP, use Linux, a browser with noscript, etc 2) People who are OK with having a government issued digital id and having to use it to access the internet ...look like, in your opinion?

Well, proof of having an ID can be done anonymously. Cloudflare even worked on a system for that kind of thing.

Yeah, this is at least being discussed now for eID. Getting it to a point where it is actually usable for everyone and trusted by everyone will not be easy though. But even in the best case, this would cover maybe 5-10% of internet users in 5 years. What do you do with the other 90% ?

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#184

Post by throwaway314155 »

frereubu wrote: post #122

People are focusing on your very non-standard setup, but I've experienced this - less than you to be sure - on a standard MacOS setup with Firefox and only uBlock Origin installed. If I switched to Chrome without uBlock Origin it worked. This was on the English National Ballet's ticketing website.

Same problems here. Mac OS with firefox + ublock origin (and a dns based ad blocker) jams me up. Switching to Safari (with dns ad blocker still on) makes it work

Has become increasingly more common in the past few months across several sites.

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#185

Post by Vampiero »

tonymet wrote: post #162

i recommend everyone test the web with TOR to see how dead the public internet is. Reddit won't respond. Many sites have a 10-minute captcha challenge (e.g. substack). So many sites have deployed countermeasures like Cloudflare, but they aren't actively monitoring the failure mode on those countermeasures. The web is on it's knees and these countermeasures are another nail in the coffin if we don't act fast.

Why would anyone care about how a site displays on TOR aside from privacy nerds?

The average internet user doesn't even know what TOR is. Though they might have heard the words "Dark Web" once or twice.

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#186

Post by modzu »

solardev wrote: post #2

You're collateral damage in the web's war against bots :( Unfortunately, I think the Cloudflare challenges are designed to filter out users similar to your profile... once you stray far enough from the norm, it just looks like a bot / suspicious traffic to them. Statistically there's not enough users like you (privacy-conscious Linux users on nonstandard browsers) for them to really care enough to do anything about i…

it is discrimination

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#187

Post by devops99 »

solardev wrote: post #2

You're collateral damage in the web's war against bots :( Unfortunately, I think the Cloudflare challenges are designed to filter out users similar to your profile... once you stray far enough from the norm, it just looks like a bot / suspicious traffic to them. Statistically there's not enough users like you (privacy-conscious Linux users on nonstandard browsers) for them to really care enough to do anything about i…

[dead]

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#188

Post by bigfatkitten »

KronisLV wrote: post #99
rad_gruchalski wrote: post #34

Earlier quoted context omitted.

Okay. Do that globally. And solve the ddos problem as you’re on it. If you add transparent tls termination, edge, caching, dns… maybe I’ll have a look! I had a guy like that working with me. Blocked every possible tracker, disabled javascript, used some niche browser, proton mail, and then complains that google doesn’t allow him to sign in. I get it, privacy and what not. But the guy was an outlier. Some random blogs…

> Do that globally. We already do a simpler version of that with TLS and HTTPS, there are globally trusted root certs that ship with most OSes and browsers. It's just that we haven't extended the same approach to client certs and identity verification, instead having a bunch of walled gardens and governments running legacy methods of figuring out who someone is, as opposed to various eID mechanisms. If I trust news.y…

> If I trust news.ycombinator.com because I trust ISRG Root X1, I might similarly trust John Doe's iPhone because I trust the government of France's CA, as a hypothetical, as long as the certification chain is valid there.

There are a whole ton of privacy problems with this. I am happy to demonstrate anonymously that I am not a bot, but a random blogger does not need to know that I am John Doe, a citizen of France with national ID number 12345678.

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#189

Post by driverdan »

Animats wrote: post #13

> The "unsubscribe" button in Indeed's job notification emails leads me to an impassable Cloudflare challenge. That's a CAN-SPAM act violation. FTC: "Tell recipients how to opt out of receiving future marketing email from you. Your message must include a clear and conspicuous explanation of how the recipient can opt out of getting marketing email from you in the future. Craft the notice in a way that’s easy for an or…

Unfortunately the government seems to have given up on enforcing the CAN-SPAM act. If they actually enforced it spam companies like Salesforce would face massive fines.

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#190

Post by bigfatkitten »

PaulHoule wrote: post #90

It's ironic but I was having terrible problems accessing archive.today when I was using Cloudflare DNS (1.1.1.1) that cleared up when I switched to either my ISP's provider or Google's 8.8.8.8. I was not the only one https://news.ycombinator.com/item?id=38063548 What's funny about it is that as a human I get tormented by those things all the time but I have been writing bots since 1999 and have yet to have had CAPTCH…

> I mean, what kind of bot wants to pay my electric bill?

None, but they do want to use your electricity company's credit card payment facility to test stolen card numbers.

Post reply on HN