5 ms·

Since the CAPTCHAs trigger based on IP reputation, I assume they're trying to prevent things like automated forum spam, by default for everyone. I don't know if

by tux3 10y ago

Since the CAPTCHAs trigger based on IP reputation, I assume they're trying to prevent things like automated forum spam, by default for everyone. I don't know if there's a setting to avoid challenges even from shady IPs unless the site is under attack, that sounds like it could apply to a lot of websites.

mSparks 10y ago
While obviously useful for the poor souls that live in backwards dictatorships/monarchies like north korea and the uk. i dont personally think tor exit nodes are that great an idea. tor traffic should stay on the tor network.
- roywiggins 10y ago
  I was under the impression allowing people to access the internet at large is explicitly part of Tor's design. If you want something more inward-facing, I2P seems to lean in that direction. I2P's comparison with Tor suggests this too: https://geti2p.net/en/comparison/tor https://geti2p.net/en/comparison/tor Tor: "Designed and optimized for exit traffic, with a large number of exit nodes" I2P: "Designed and optimized for hidden services, which are much faster than in Tor"
  - mSparks 10y ago
    yes, but my point was I think its a "bad" design. It is not part of the internet, if servers want to provide "anonymous" access they can provide a tor address. But if they don't, then accessing a standard webserver via tor is very little different than any of the other means of illegitimately accessing computers. ->web access via tor seems like a lot of effort to provide what is little more than providing "hacking" services against normal webservers. I would much rather see for example: https://thepiratebay.se.onion https://thepiratebay.se.onion where tor contacts the dns for thepiratebay.se to get the underlying onion address to use. much better all round than either going through an exit node (most of which are malicious) to thepiratebay.se or trying to remember uj3wazyk5u4hnvtk.onion or whatever it has changed to now.
blockoperation 10y ago
The CATPCHAs might not appear for everyone, but automated JavaScript challenges seem to be required on some sites regardless of your IP (and without JavaScript, you just get stuck in a refresh loop on the challenge page). It's a real slap in the face to have to enable JavaScript just to gain access to a site, especially if it's a site that doesn't even use JavaScript, or a site that you don't entirely trust. The funny thing is that it's entirely possible to open a bunch of these tabs in the background (e.g. search for 'site:somesitethatusescloudflare' and just middle click some results that interest you for later reading) and forget about them while they sit there refreshing over and over again, until you really do get blocked (assuming they keep track of unanswered challenges like they do for failed ones).

by tux3 10y ago

mSparks 10y ago

While obviously useful for the poor souls that live in backwards dictatorships/monarchies like north korea and the uk. i dont personally think tor exit nodes are that great an idea. tor traffic should stay on the tor network.

roywiggins 10y ago
I was under the impression allowing people to access the internet at large is explicitly part of Tor's design. If you want something more inward-facing, I2P seems to lean in that direction. I2P's comparison with Tor suggests this too: https://geti2p.net/en/comparison/tor https://geti2p.net/en/comparison/tor Tor: "Designed and optimized for exit traffic, with a large number of exit nodes" I2P: "Designed and optimized for hidden services, which are much faster than in Tor"
- mSparks 10y ago
  yes, but my point was I think its a "bad" design. It is not part of the internet, if servers want to provide "anonymous" access they can provide a tor address. But if they don't, then accessing a standard webserver via tor is very little different than any of the other means of illegitimately accessing computers. ->web access via tor seems like a lot of effort to provide what is little more than providing "hacking" services against normal webservers. I would much rather see for example: https://thepiratebay.se.onion https://thepiratebay.se.onion where tor contacts the dns for thepiratebay.se to get the underlying onion address to use. much better all round than either going through an exit node (most of which are malicious) to thepiratebay.se or trying to remember uj3wazyk5u4hnvtk.onion or whatever it has changed to now.

blockoperation 10y ago

The CATPCHAs might not appear for everyone, but automated JavaScript challenges seem to be required on some sites regardless of your IP (and without JavaScript, you just get stuck in a refresh loop on the challenge page). It's a real slap in the face to have to enable JavaScript just to gain access to a site, especially if it's a site that doesn't even use JavaScript, or a site that you don't entirely trust. The funny thing is that it's entirely possible to open a bunch of these tabs in the background (e.g. search for 'site:somesitethatusescloudflare' and just middle click some results that interest you for later reading) and forget about them while they sit there refreshing over and over again, until you really do get blocked (assuming they keep track of unanswered challenges like they do for failed ones).