3 ms·

A few GETs spread out the right way and repeated often enough is a DDOS. There's a very good reason why Cloudflare does this. Cloudflare isn't "punishing" anyb

A few GETs spread out the right way and repeated often enough is a DDOS. There's a very good reason why Cloudflare does this. Cloudflare isn't "punishing" anybody, their job is to protect the people that use their service. Tor (or any other open proxy) is a massive source of bogus and/or abusive traffic.

deno 10y ago
Of course they’re punishing legitimate visitors. If there weren’t any humans getting captchas there wouldn’t be any need for captchas in the first place. It wouldn’t be so bad, except Cloudflare doesn’t have any idea what they’re doing. Like the static.domain.tld issue I’ve mentioned—not even documented. This breaks websites in a very, very, bad way. Next we have the lovely security setting called “Essentially-off.” Which does absolutely nothing to the captcha system. Apparently “essentially” means “not really,” according to Cloudflare. Also forget VPN/Tor. I’m getting consistently captchad by Cloudflare just visiting mostly american-only websites from residential networks in Europe. They’re either incompetent or just plain malicious. Right now I’m swaying towards the latter :/