Live data from Hacker News

Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

news.ycombinator.com

261–270 of 312 posts

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#262
post #13

> The "unsubscribe" button in Indeed's job notification emails leads me to an impassable Cloudflare challenge. That's a CAN-SPAM act violation. FTC: "Tell recipients how to opt out of receiving future marketing email from you. Your message must include a clear and conspicuous explanation of how the recipient can opt out of getting marketing email from you in the future. Craft the notice in a way that’s easy for an or…

Unfortunately the government seems to have given up on enforcing the CAN-SPAM act. If they actually enforced it spam companies like Salesforce would face massive fines.

You can press charges yourself and get lawyer fees for your efforts. Probably not worth it, but you don't need the government to do this.

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#263
post #256

Earlier quoted context omitted.

It advances the conversation because it refutes the argument that "It's not the users fault" brought up a few comments ago, by using the balaclavas in bank analogy.

It refutes nothing, it attempts to place the blame for cloudflare incompetence at the feet of a user who has done nothing wrong.

Replied in the other comment. In short: if someone wears a balaclava to a bank, would you say that person also "has done nothing wrong"?

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#264

Earlier quoted context omitted.

Their problem. They are not entitled to make it other people's problem.

They solved their problem. No matter how upset you are about it, the rest of the matter is your problem.

Though in this case it is legally their problem as unsubscribe links are protected by law in the US.

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#265

Just tried to disable User-Agent in Firefox by setting general.useragent.override to an empty string and Cloudflare captcha become impenetrable. Cloudflare actively blocks attempts to improve privacy :(

You don't want that to be an empty string - you would be one of the few people in the world with that value and thus easy to identify. You instead want that string to be exactly the same as everyone else in the world (no matter what the real User-Agent really is). there should be about 50 different contents of the entire header possible for everyone in the world.

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#266

The problem is that any solution so far proposed for this is very privacy-unfriendly. For example, Google proposed https://github.com/explainers-by-googlers/Web-Environment-In... and this was shot down by privacy advocates (for very good reasons). So basically the choice for website operators is either to fight the bots and accept that their service will be unusable for some subset of their users or not fight the bot…

> either to fight the bots and accept that their service will be unusable for some subset of their users or not fight the bots, which will lead to their service becoming unusable for everyone. 2/3 of the issues OP listed would not make the service unusable for anyone if the botcheck were removed. 1. What would be the problem with allowing "bots" to opt out of receiving marketing emails? Why do I need to be a human to…

Just an idea, what if malicious bots started unsubscring thousands of email addresses to harm your business.

Even if you send a confirmation email afterwords that's potentially millions of emails you are sending because of bots.

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#268
post #221

Vaguely related, youtube is lately doing a lot of unnecessary forced logouts & reconfirm password. I'm literally on a static IP. On the same computer & browser. With the same cookies. Not accessing anything particularly sensitive. There is no way in hell they don't know precisely who I am & that its me.

Is it possible your account is being attacked in the background?

Possible I guess. It is yubikeyed though so would need to be a pretty sophisticated attack

Re: Tell HN: Impassable Cloudflare challenges are ruining my browsing experience

#269
post #263

Earlier quoted context omitted.

It refutes nothing, it attempts to place the blame for cloudflare incompetence at the feet of a user who has done nothing wrong.

Replied in the other comment. In short: if someone wears a balaclava to a bank, would you say that person also "has done nothing wrong"?

In short, just answering this question (which as stated in the other comment is not the issue), yes that person has t done anything wrong. There is no offence for wearing hats in banks.
Post reply on HN