Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Blocked by Cloudflare

jrhawley.ca

Post reply on HN
Print view View original

361–370 of 473 posts

Re: Blocked by Cloudflare

#361

Post by azalemeth »

sam0x17 wrote: post #344
1vuio0pswjnm7 wrote: post #312

Earlier quoted context omitted.

The heuristics used to attempt to differentiate between a so-called "bot" and a "human" are, IMHO, inadequate as long as there are "humans" that are allegedly mistaken for "bots" and blocked. "Use Chrome" is not a solution. A person using Firefox or some other non-Google software is still a "human". But not according to these brilliant "site protection" schemes. What level of false positives is acceptable. Using JS t…

Furthermore, all bots worth their salt as far as threats go enable js and do everything they can to appear like a normal browser.

I'd love to know if puppeteer passed that test (probably). I have had exactly this problem many, many times and it is incredibly frustrating.

Re: Blocked by Cloudflare

#363

Post by doctor_radium »

adammartinetti wrote: post #65
AegirLeet wrote: post #13

I've had the exact same problem for a while. Here are some of the sites I've been unable to access (found by searching for "just a moment" in my browser history): - https://gitlab.com/users/sign_in - https://steamdb.info/login/ - https://www.zabbix.com/forum/ - https://casetext.com/ - https://namemc.com/login - https://spinroot.com/ - https://camelcamelcamel.com/ It's really annoying and Cloudflare is apparently doin…

Would you be willing to share a rayID you see during one of these looping challenges? I'm the PM for Cloudflare's challenge platform, and we'd love to look into this. RayIDs contain no PII so you can share publicly, or feel free to drop me an email at amartinetti at cloudflare. We'll also release a reporting mechanism soon, so in the future you can let us know when you see these issues and we can react to them quickl…

all from Opera Mini:

- https://gitlab.com/users/sign_in 7f3e45c3cebfb90f

- https://steamdb.info/login/ 7f3e4a04bf7a0e39

- https://www.zabbix.com/forum/ 7f3e4b681f8f1cc6

- https://casetext.com/

7f3e4cab4af40b05

- https://namemc.com/login 7f3e4debdf6cb7f1

- https://spinroot.com/ loads normally, no delay or blocking

- https://camelcamelcamel.com/ loads normally, no delay or blocking

Adammartinetti, I appreciate your interest in doing this, but would love to hear that CF maintains a giant white board in the developer area with the name of every TLS 1.3 web browser known to mankind (the same data on a Group Policy-enforced internal home page would be even better), to reinforce the idea that it takes more than Google to make the world go round.

Personally, I'll add myself to the list of people who think you've created a game you can never win, and thus shouldn't be playing.

Re: Blocked by Cloudflare

#364

Post by midasuni »

ghujiliooo wrote: post #291
Dalewyn wrote: post #225

Earlier quoted context omitted.

>CF is basically handing over your website in return for some less work on your part. The older you get, the more valuable being able to just dump your shit on other people becomes.

Quite the opposite for me. The older I get (42 now) the less patience I have for people who sacrifice freedom for convenience. You're ruining it for my children when you do this.

I’m a similar age. My view of tech was shaped by sites like slashdot and the thought processes which went into that culture, but put control of my equipment as the important part. It was an eye opener when I entered the workforce and found tech people who genuinely loved the Microsoft eco culture, which makes sense given how much stuff was built for IE only.

I wonder how world views were shaped with those entering the industry post GFC and with google and aws on the ascendency.

Re: Blocked by Cloudflare

#365

Post by midasuni »

LoganDark wrote: post #292
waithuh wrote: post #207

Earlier quoted context omitted.

I seriously never get people that love CF (or any company for that matter). Praising 1.1.1.1, giving it free advertising. CF is basically handing over your website in return for some less work on your part. I get the advantages of it (like less engineer credits wasted, less server maintaining work and probably cost, faster) but actively giving it free PR just doesnt fit right with me. Pay your bucks and sit. They are…

I don't praise 1.1.1.1 because it's just a DNS server. My firewall's set to redirect all DNS queries there. It works fine. Could've used 8.8.8.8 instead, but I trust CloudFlare slightly more.

There’s aeverql other providers none of whom are as large as cloudflare - including quad-9 and opendns, and of course your own ISP

Re: Blocked by Cloudflare

#366

Post by midasuni »

ocdtrekkie wrote: post #307
antonvs wrote: post #152

Earlier quoted context omitted.

Security conscious and privacy conscious aren't the same thing, although there's overlap. I can be concerned about the security of my system without caring about whether I'm being targeted for ads.

This is untrue, but frequently misunderstood: Privacy and security are two facets of the same problem. If you don't have security, your privacy is at risk. If you don't have privacy, your security is at risk. Case in point: Many of those targeted ads contain malware. :)

Do you have any evidence of your claim.

Re: Blocked by Cloudflare

#367

Post by rixthefox »

Andrex wrote: post #293
dcow wrote: post #84

So many privacy nuts use Chrome and don't realize this: > What about Google Chrome? > I tried all of the above in Firefox. So I naturally tried to access the same page in Google Chrome to see if I’d still be blocked. Thankfully, I wasn’t. > But of course I wasn’t because Chrome doesn’t have the same privacy- and security-enhancing designs that Firefox does. Chrome will happily collect as much private information abou…

Easy to say don't use Chrome, harder to say don't use Cloudfare. And if we're taking things to task for monopolizing a market and being a threat to the future of the open internet, I'd say Cloudfare is and will always be a bigger threat. The moment the Cloudfare dictatorship becomes less benevolent, everyone is gonna feel it.

> The moment the Cloudflare dictatorship becomes less benevolent…[]

In my eyes they have already done that. ICYMI I highly suggest checking out their response and subsequent blog post around the Kiwifarms incident.

That whole debacle was enough to prove to me they learned nothing and are going to continue down this path. I migrated web services and closed my account with them shortly after that whole thing.

Cloudflare routinely ignores abuse reports for its network and takes no responsibility for the utter garbage being carried across their network. It’s almost comical how they so desperately cling to the claim that they are “just a dumb pipe” on one side of the house and on the other a “serious security vendor” who is “protecting the web” while blocking out users simply for the “crime” of trying to preserve their privacy.

If they wanted to convince me they had the web’s best interest at heart they wouldn’t host half the sites they do. They would actually respond to abuse reports and take abusive websites offline rather than wait for it to hurt their bottom line and reputation before taking action but they don’t.

Re: Blocked by Cloudflare

#368

Post by doctor_radium »

adrr wrote: post #63
zer8k wrote: post #12

Any time a large portion of internet traffic is controlled by a single source it brings problems like this with it. All cloudflare has to do is arbitrarily decide who and who can't use the internet and effectively their word becomes law. Like most things it starts with an innocent premise (e.g. "an easy way to stop bad actors") and ends up extended to any number of arbitrary things. Worse, the argument from privacy a…

You don’t pay Cloudflare money nor are you customer. The customers are the sites that pay them money to protect their infrastructure. The customers have many choices in CDN/WAF providers and Cloudflare isn’t even largest, Akamai is. Fastest growing CDN is cloudfront. There is healthy competition so why would anti trust laws apply?

Maybe some kind of public nuisance law applies then? Akamai knows their place and doesn't tell me to go pound sand when I'm trying to read somebody's obituary. Incidentally:

legacy.com

Ray ID: 7f3e7bad3afbb731

That's the difference to me.

Re: Blocked by Cloudflare

#369

Post by bombolo »

Andrex wrote: post #293
dcow wrote: post #84

So many privacy nuts use Chrome and don't realize this: > What about Google Chrome? > I tried all of the above in Firefox. So I naturally tried to access the same page in Google Chrome to see if I’d still be blocked. Thankfully, I wasn’t. > But of course I wasn’t because Chrome doesn’t have the same privacy- and security-enhancing designs that Firefox does. Chrome will happily collect as much private information abou…

Easy to say don't use Chrome, harder to say don't use Cloudfare. And if we're taking things to task for monopolizing a market and being a threat to the future of the open internet, I'd say Cloudfare is and will always be a bigger threat. The moment the Cloudfare dictatorship becomes less benevolent, everyone is gonna feel it.

Website owners can just stop using cloudflare though…

Re: Blocked by Cloudflare

#370

Post by 3LazTjBv-f »

jwatte wrote: post #179
dcow wrote: post #84

So many privacy nuts use Chrome and don't realize this: > What about Google Chrome? > I tried all of the above in Firefox. So I naturally tried to access the same page in Google Chrome to see if I’d still be blocked. Thankfully, I wasn’t. > But of course I wasn’t because Chrome doesn’t have the same privacy- and security-enhancing designs that Firefox does. Chrome will happily collect as much private information abou…

I don't quite understand the "ads it deems necessary for me to see" comment. You will always get ads on sites that serve ads. The thing the tracking might do, is change which particular ads you get. The right solution to that, is to use an ad blocker, and to pay for sites that have an ad-free alternative. Also, fingerprinting isn't always "bad" -- any business who takes credit cards online, wants to try to exclude pe…

> business who takes credit cards online, wants to try to exclude people who will commit fraud

How bad is it nowadays? Can't you just enforce 3DS2?

Post reply on HN