6 ms·
Cloudfare wants me to solve a capcha to access the site (firefox). Amazingly, if I turn off ublock origin, the capcha solves itself.
by drewg123 7y ago
Cloudfare wants me to solve a capcha to access the site (firefox). Amazingly, if I turn off ublock origin, the capcha solves itself.
- loeg 7y agoI'm getting the same thing (residential IP on a major home ISP, no weird VPN or Tor exit node / SMTP relay / any reason to have poor IP reputation). I have recently logged in to Google, so it's not that. I checked the console and noticed a warning about a cross-site request to a 3rd party Google attempting to set a cookie and that this behavior would be dropped in future versions of Chrome. I wonder if this is uBO blocking 3rd party cookies.
- martinald 7y agoAre you on cgnat by any chance?
- loeg 7y agoNo.
- panarky 7y agoChrome + uBlock Origin + uMatrix here, and no captcha. The third-party cookie warning in the console is just a deprecation warning, it's not blocking them yet. You can enable the flags to block thrid-party cookies right now in chrome://flags by searching for "cookie".
- jconnop 7y agoFirefox + ublock origin here, no captcha.
- kristianp 7y agoAre you logged into Google, or have been recently?
- jconnop 7y agoYes I have an active google login. It's a sad state of affairs if that's the deciding factor.
- drewg123 7y agoI have an active google login also. I wonder if it was the fact that I'm running firefox on FreeBSD.
- loeg 7y agoChrome on FreeBSD here (I got the captcha as well); could be some kind of user agent test that trips on anything that isn't the big 3.
- dijit 7y agoThat was the case for me 2 weeks ago. I didn’t even get a captcha. https://news.ycombinator.com/item?id=22109969 https://news.ycombinator.com/item?id=22109969
- neurostimulant 7y agoI'm not logged in to google (I only logged in to google on chrome and use firefox for personal browsing) but I do have Privacy Pass extension installed. I haven't see cloudflare captcha for a long time ever since I installed Privacy Pass.
- gruez 7y agoSame here. Firefox (RFP enabled) + ublock origin + VPN + Cookie autodelete (so no google cookies) and no captcha. I suspect it's mostly based on IP reputation.
- tyingq 7y agoIt's regrettable that this is current state. Google equates a login and recent activity with them as being a "legit person". Anything short of that means you're a malicious bot. The traffic dominance of Cloudflare and Google deserves some real independent scrutiny.
- yjftsjthsd-h 7y agoThat's an interesting thought: If Cloudflare didn't exclusively use Google to determine if you're a human, I wouldn't mind them nearly as much.
- techslave 7y agothey don’t. they also have their own cloudflare “token” thing. can’t remember the name of it right now. found it: privacy pass
- loeg 7y agoBeing asked to install arbitrary code to run in browser extension privileged context is perhaps one of the only things they could have done worse than google's captcha.
- tonyztan 7y agoFor what it's worth, the extension is open source: https://github.com/privacypass/challenge-bypass-extension https://github.com/privacypass/challenge-bypass-extension
- AstralStorm 7y agoAnd does not work almost always.
- numpad0 7y agoIs it more important to actually stop bots or to deter kiddies by showing them captchas?