This is yet another example of Cloudflare centralizing the web. I’m tired of this. Sure the only previously viable solution was ReCAPTCHA from Google. But it’s Google. I depend on them for search. And, sure, their business model depends on them being able to track me online. But I know them. And it’s hard for me to live without them. So I’m ok with depending on them, but I worry about further centralization of the In…
Turnstile: privacy-preserving alternative to CAPTCHA by Cloudflare
41–50 of 82 posts
Re: Turnstile: privacy-preserving alternative to CAPTCHA by Cloudflare
#42As much as I _despise_ modern ReCAPTCHA, I have always been able to pass the challenge eventually; it has never flatly rejected me with no recourse. If I made a mistake or was insufficiently human for it, I got a new challenge and tried again. There are apocryphal stories of Google tar-pitting users with it, but I have never seen it in action. If this judges the browser more than the user, what do I do when the brows…
Re: Turnstile: privacy-preserving alternative to CAPTCHA by Cloudflare
#43This is yet another example of Cloudflare centralizing the web. I’m tired of this. Sure the only previously viable solution was ReCAPTCHA from Google. But it’s Google. I depend on them for search. And, sure, their business model depends on them being able to track me online. But I know them. And it’s hard for me to live without them. So I’m ok with depending on them, but I worry about further centralization of the In…
But yes, no one is perfect, but at end of the day i really prefer your business model that does not need break users privacy.
Re: Turnstile: privacy-preserving alternative to CAPTCHA by Cloudflare
#44Also Cloudflare: Tracks and fingerprints everyone, and blocks anyone who hardens their browser ("First we run a series of small non-interactive JavaScript challenges gathering more signals about the visitor/browser environment. Those challenges include proof-of-work, proof-of-space, probing for web APIs, and various other challenges for detecting browser-quirks and human behavior. As a result, we can fine-tune the difficulty of the challenge to the specific request.").
Re: Turnstile: privacy-preserving alternative to CAPTCHA by Cloudflare
#45Can’t CAPTCHA be integrated into the browser? Can’t the browser vouch for the user?
and trust me, this technology is not in the interest of the user, especially if the user wants free (as in freedom) and open internet.
Re: Turnstile: privacy-preserving alternative to CAPTCHA by Cloudflare
#46Cloudflare: "Cloudflare has a long track record of investing in user privacy, which we will continue with Turnstile." Also Cloudflare: Tracks and fingerprints everyone, and blocks anyone who hardens their browser ("First we run a series of small non-interactive JavaScript challenges gathering more signals about the visitor/browser environment. Those challenges include proof-of-work, proof-of-space, probing for web AP…
Re: Turnstile: privacy-preserving alternative to CAPTCHA by Cloudflare
#47For Cloudflare employees going through this thread, the linked "Turnstile Developer Documentation" link [1] in the Turnstile dashboard is returning a 404. [1]: https://developers.cloudflare.com/turnstile/
Re: Turnstile: privacy-preserving alternative to CAPTCHA by Cloudflare
#48This is yet another example of Cloudflare centralizing the web. I’m tired of this. Sure the only previously viable solution was ReCAPTCHA from Google. But it’s Google. I depend on them for search. And, sure, their business model depends on them being able to track me online. But I know them. And it’s hard for me to live without them. So I’m ok with depending on them, but I worry about further centralization of the In…
Erm, hello, hCAPTCHA[1] ?!?
Can't remember when they started, but I certainly jumped ship to hCAPTCHA what is now many years ago now.
Privacy protection is stated there on their homepage as their key differentiator with ReCAPTCHA.
Re: Turnstile: privacy-preserving alternative to CAPTCHA by Cloudflare
#49Earlier quoted context omitted.
I've had to go a few rounds with the photo match. Where I usually get tarpitted is by Cloudflare. I'll pass the (automated) CAPTCHA, the page will reload (still as if I had passed), and … it'll be another CAPTCHA. I'm pretty sure these usually amount to a passive-aggressive demand for cookies/storage, but I just vote with my browser & go back/somewhere else.
Cloudflare deep down greatly discriminates against shared IPs. If you have a real honest-to-goodness IPv4 address that doesn't change, you'll hardly ever encounter anything. But if you are behind any sort of carrier-grade NAT or otherwise sharing IPs, you're a second-class netizen, sucks to be you.
Re: Turnstile: privacy-preserving alternative to CAPTCHA by Cloudflare
#50Earlier quoted context omitted.
Cloudflare deep down greatly discriminates against shared IPs. If you have a real honest-to-goodness IPv4 address that doesn't change, you'll hardly ever encounter anything. But if you are behind any sort of carrier-grade NAT or otherwise sharing IPs, you're a second-class netizen, sucks to be you.
I'm behind your typical non-CGNAT residential NAT, for v4. (Was v4 only for the longest time, but Verizon just recently rolled out a v6… so we'll see if that changes anything, I guess.)