[dead]
Tell HN: Cloudflare is blocking Pale Moon and other non-mainstream browsers
391–400 of 554 posts
Re: Tell HN: Cloudflare is blocking Pale Moon and other non-mainstream browsers
#392Earlier quoted context omitted.
I think this is on Cloudflare. Perhaps there is a demand for such a service, but it is another to implement it. And this is very bad for a free and therefore safe net. I don't even know which attack vectors an integrity check for a browser could help against. Against infected clients? It is in any way evidently not effective.
There is some political-philosophical irony that the Chinese prefer their government to do the blocking and take away their freedom, while the US prefers their monopolistic capitalistic corporate world to do it. A rose by any other name. Chose your friends carefully.
To trivialize totalitarian regimes that carry out terror against their own citizens, that can outright kill you and whole your family, by comparing them to capitalistic corporate world where, in the worst case, you can simply choose another, less fancy option, is the height of madness.
Re: Tell HN: Cloudflare is blocking Pale Moon and other non-mainstream browsers
#393Earlier quoted context omitted.
Vendors who block iCloud Relay are the worst. I'm sure they don't even know they're doing it. But some significant percentage of Apple users -- and you'd have to think it's only gonna grow -- comes from those IP address ranges. Bad business, guys. You gotta find another way. Blocking IP addresses is o-ver .
> Bad business, guys. You gotta find another way. Blocking IP addresses is o-ver. no, it's still the front line. And likely always will be. It's the only client identifier bots can't lie about. (or nearly the only) At $OLDJOB, ASN reputation was the single best predictor of traffic hostility. We were usually smart enough to know which we can, or can't block outright. But it's an insane take to say network based block…
I don't use iCloud Relay but it seems Apple's ASN would be 'reputable'.
Re: Tell HN: Cloudflare is blocking Pale Moon and other non-mainstream browsers
#394Earlier quoted context omitted.
Vendors who block iCloud Relay are the worst. I'm sure they don't even know they're doing it. But some significant percentage of Apple users -- and you'd have to think it's only gonna grow -- comes from those IP address ranges. Bad business, guys. You gotta find another way. Blocking IP addresses is o-ver .
Well its primarily because the security vendors for say WAFs and other tools list these IPs in the "Anonymizers" or "VPN" category and most typically these are blocked as seldom do you see legitimate traffic originating to your store front or accounts pages from these. Another vendor we use lists these under "hacking tools" So your option as a security professional is to express to your risk management team we allow…
Oh I think we all know that the Endgame is only allowing the approved webbrowser from the approved hardware.
And getting on those lists will be made very expensive indeed...
Re: Tell HN: Cloudflare is blocking Pale Moon and other non-mainstream browsers
#395I just downloaded Palemoon to check and it seems the CAPTCHA straight up crashes. Once it crashes, reloading the page no longer shows the CAPTCHA so it did pass something at least. I tried another Cloudflare turnstile but the entire browser crashed on a segfault, and ever since the CAPTCHAs don't seem to come up again. ChatGPT.com is normally quite useful for generating Cloudflare prompts, but that page doesn't seem…
It uses a hard fork of Firefox's Gecko engine called Goanna, and is independently developed other than a few security patches from upstream. It has considerably diverged from contemporary Firefox so is not comparable.
Seems seriously risky to be running a browser without access to mainstream security patches.
Perhaps it’s secure enough for now due to its obscurity.
Re: Tell HN: Cloudflare is blocking Pale Moon and other non-mainstream browsers
#396As a website owner and VPN user I see both sides of this. On one hand, I get the annoying "Verify" box every time I use ChatGPT (and now due its popularity, DeepSeek as well). On the other hand, without Cloudflare I'd be seeing thousands of junk requests and hacking attempts everyday, people attempting credit card fraud, etc. I honestly don't know what the solution is.
Something like iDeal, which is a payment processing system in the Netherlands. It works so well and is very secure. You get to the checkout page on a website, click a link. If you’re on your phone, it hotlinks to open your banking app. If you’re on desktop, it shows a QR code which does the same. When your bank app opens, it says “would you like to make this €28 payment to Business X?” And you click either yes or no…
What kind of fraud protection does iDeal have for customers?
Re: Tell HN: Cloudflare is blocking Pale Moon and other non-mainstream browsers
#397Earlier quoted context omitted.
> Bad business, guys. You gotta find another way. Blocking IP addresses is o-ver. no, it's still the front line. And likely always will be. It's the only client identifier bots can't lie about. (or nearly the only) At $OLDJOB, ASN reputation was the single best predictor of traffic hostility. We were usually smart enough to know which we can, or can't block outright. But it's an insane take to say network based block…
I don't use iCloud Relay but it seems Apple's ASN would be 'reputable'.
It would appear to be, but only until the bad guys looking to come from reputable ASNs find out about this.
Re: Tell HN: Cloudflare is blocking Pale Moon and other non-mainstream browsers
#398As a website owner and VPN user I see both sides of this. On one hand, I get the annoying "Verify" box every time I use ChatGPT (and now due its popularity, DeepSeek as well). On the other hand, without Cloudflare I'd be seeing thousands of junk requests and hacking attempts everyday, people attempting credit card fraud, etc. I honestly don't know what the solution is.
> On the other hand, without Cloudflare I'd be seeing thousands of junk requests and hacking attempts everyday, people attempting credit card fraud, etc. > > I honestly don't know what the solution is. The solution is good security-- Cloudflare only cuts down on the noise. I'm looking at junk requests and hacking attempts flow through to my sites as we speak.
>Cloudflare only cuts down on the noise.
That sounds like the solution, that sounds like good security.
Re: Tell HN: Cloudflare is blocking Pale Moon and other non-mainstream browsers
#399Earlier quoted context omitted.
For context, this is presumably the Tobin who caused significant tangible damage to the Pale Moon project on his way out. https://forum.palemoon.org/viewtopic.php?t=28265
For additional context it might be wise to include links that can't be edited by the author or webmaster.. While I didn't include links looking BinOC up on the IA isn't difficult to do and I am sure if you want to read the posts of events AS they happened you can look up the other thread. This cited version is the revised version. Moonchild has revised his version of events multiple times in the nine months after. Pf…
Honestly, I couldn't care less. It's one man shouting against another, it's pointless to try finding facts out of that.
But as a simple Pale Moon user, I can say you caused a big enough disruption to the project that even a user who doesn't really pay attention also noticed.
Now you're here again sidetracking the subject at hand with past dramallamas and seemingly getting your pantaloons moist at having stories besides your own also provided. No thanks.
Re: Tell HN: Cloudflare is blocking Pale Moon and other non-mainstream browsers
#400Earlier quoted context omitted.
Do you have the "resist fingerprinting" setting enabled in Firefox? (You can check in about:config)
"privacy.resistFingerprinting" is "true", yes, and it'll stay that way. Why let me solve a puzzle just to block me afterwards anyway?
Maybe the performance of the puzzle also has some undeclared side channels.