Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Blocked by Cloudflare

jrhawley.ca

Post reply on HN
Print view View original

31–40 of 473 posts

Re: Blocked by Cloudflare

#31

Post by johnklos »

derefr wrote: post #20

If you've ever tried to take apart Cloudflare's various session cookies, MITMed scripts sent for "high integrity" pages (or when in "super bot-fight" mode), etc., you'll have observed that it's basically running a web-worker to heuristically do browser-integrity checking. That is, Cloudflare is trying to run a series of tests that real browsers operated by users pass, but which headless browsers operated by bots will…

How does that explain blocks that happen to less common browsers and/or less common platforms?

Re: Blocked by Cloudflare

#32

Post by everybodyknows »

NicoJuicy wrote: post #14
zer8k wrote: post #12

Any time a large portion of internet traffic is controlled by a single source it brings problems like this with it. All cloudflare has to do is arbitrarily decide who and who can't use the internet and effectively their word becomes law. Like most things it starts with an innocent premise (e.g. "an easy way to stop bad actors") and ends up extended to any number of arbitrary things. Worse, the argument from privacy a…

Everyone forgets that websites become almost unusable because of crawlers and bots. Website owners specifically choose for cloudflare to protect against this, it's not forced upon them by cloudflare.

Website owner complains elsewhere in this topic of blocked users (country-specific):

https://news.ycombinator.com/item?id=37050774

Re: Blocked by Cloudflare

#33

Post by johnklos »

MichaelZuo wrote: post #4

This is a bit tangential to the author's point but it does seem to indicate that IPv6 is mostly pointless for human users for exactly this reason. Since it's so much easier to hide behind a new unique address, compared to IPv4, that any service such as Cloudflare would need to be extremely aggressive in blocking to meet their internal metrics and customer advertised minimum thresholds. So much so that it actually cos…

You're basically saying this behavior is acceptable and should be considered normal and should be expected to become the norm.

If you think IPv6 is mostly pointless, I think you're unaware of the fact that a significant majority of phones already use IPv6 most of the time they're on cellular.

Re: Blocked by Cloudflare

#34

Post by megous »

derefr wrote: post #20

If you've ever tried to take apart Cloudflare's various session cookies, MITMed scripts sent for "high integrity" pages (or when in "super bot-fight" mode), etc., you'll have observed that it's basically running a web-worker to heuristically do browser-integrity checking. That is, Cloudflare is trying to run a series of tests that real browsers operated by users pass, but which headless browsers operated by bots will…

From the PoV of the user it just looks like the website is broken. No exception in the console, contant reload looping of the same page, etc.

Re: Blocked by Cloudflare

#35

Post by sschueller »

NicoJuicy wrote: post #14
zer8k wrote: post #12

Any time a large portion of internet traffic is controlled by a single source it brings problems like this with it. All cloudflare has to do is arbitrarily decide who and who can't use the internet and effectively their word becomes law. Like most things it starts with an innocent premise (e.g. "an easy way to stop bad actors") and ends up extended to any number of arbitrary things. Worse, the argument from privacy a…

Everyone forgets that websites become almost unusable because of crawlers and bots. Website owners specifically choose for cloudflare to protect against this, it's not forced upon them by cloudflare.

I don't agree. Maybe don't run WordPress that makes 100+ dB queries before first page load on some cheap $2 vps.

There are all kinds of tools that you can easily deal with bots and the large DDOS your ISP can handle for you if you are willing to pay for it.

Re: Blocked by Cloudflare

#37

Post by buro9 »

thedanbob wrote: post #16

Just yesterday I realized that I couldn't log into Paypal on Safari or Firefox, only a Chromium-based browser. We're getting deeper all the time into "this site is best viewed in Google Chrome".

I've been experiencing the PayPal one for a while. Firefox on Windows, Linux or Android. Thankfully the app is still signed in, but I've used credit card for things that I have PayPal money just sitting there ready to spend as I can't get into PayPal on Firefox.

Re: Blocked by Cloudflare

#38

Post by kayodelycaon »

delfinom wrote: post #24
NicoJuicy wrote: post #14

Earlier quoted context omitted.

Everyone forgets that websites become almost unusable because of crawlers and bots. Website owners specifically choose for cloudflare to protect against this, it's not forced upon them by cloudflare.

Hah, you know, most crawlers were fine. The only one that actively DDOSed websites was fucking Yandex. It doesn't respect robots.txt and it will actively fight against any rate limits by spawning connections on new IPs the moment one is blocked

Search engine crawlers are a subset of crawlers. Sometimes you’re dealing with aggressive screen-scraping from competitors or various marketing tools.

I’ve had to deal with these things easily bringing sites down.

Re: Blocked by Cloudflare

#40

Post by tamimio »

I was going to assume that the corp VPN is the reason as maybe someone is abusing that connection for something else and it’s getting flagged, but the fact that the site worked using chrome says otherwise.

Will using chromium for such cases work while having Firefox for the rest of sites?

And what’s cloudflare alternative that provides similar services for free including traffic analysis?

Post reply on HN