5 ms·
Good point. The Cloudflare capthchas I've seen seemed to use Javascript, but maybe it's just incredibly good CSS. Interestingly, while a javascript calculation
by gnud 10y ago
Good point. The Cloudflare capthchas I've seen seemed to use Javascript, but maybe it's just incredibly good CSS.
Interestingly, while a javascript calculation might leak more information to CloudFlare (since they might collect other info beseides the result of a proof-of-work function), it would probably leak less to anyone trying to analyze tor traffic from the outside? Seems to me like it would be harder to correlate the two ends of the tor circuit.
- mikegerwitz 10y agoIt'd be harder to do traffic analysis, yes, though I really wonder why it makes so many requests to begin with. I'd like to see an analysis of the CAPTCHA. Considering that they allow it without JS enabled, I wonder why they'd need any requests at all.
- JumpCrisscross 10y ago> The Cloudflare capthchas I've seen seemed to use Javascript They have a non-JS version, too.