5 ms·

I'm getting the same issue. I also use CDN from cloudflare for my personal sites...and this is making me reconsider using it. Giving cloudflare the benefit of

by kop316 6y ago

I'm getting the same issue. I also use CDN from cloudflare for my personal sites...and this is making me reconsider using it. Giving cloudflare the benefit of the doubt, what could trip this is: 1) the site is getting higher than average visits (tripping the anti-DDoS flag for the CDN) 2) I went without javascript on, so they think I am just a bot. EDIT: after giving it the benefit of the doubt, the captha didn't work for me at least 4 times. That is unacceptable.

snazz 6y ago
I think that the site backend is having trouble keeping up with the load and the owner turned on Cloudflare’s Under Attack mode, thinking that this was a DDoS. This doesn’t look like the behavior I’ve seen when Cloudflare does it automatically. It’s smart enough to know that HN is not a DDoS.
- judge2020 6y ago
  A common question on the CF forum is a requests/second trigger for either enabling Under Attack mode or enabling a Firewall rule that triggers the full hCaptcha page. This is most likely what happened here. [This is usually done by counting requests/second at the origin then using the CF API to enable the firewall rule or change the security level)
- kop316 6y ago
  I have an add-on that removes referrer strings...but when I disabled that I get the same issue. When I checked it on my phone (Android, mobile Firefox with the same add-ons), I was able to go fine.
cuspycode 6y ago
I got the same CAPTCHA, running Firefox 68.4.1 on Linux. Normally when this kind of thing happens, I just close the tab and move on with my life. But this time I tried opening with Chromium instead (version 76.0.3809.100) and then no CAPTCHA was required. Neither browser has Privacy Pass, so why are they treated differently?
- deleted 6y ago
  [deleted]
- tfigment 6y ago
  So you have script blocker on both and configured same way? I get captcha requests on my firefox with umatrix due to aggressive blocking.
  - cuspycode 6y ago
    No blockers, just using the built-in privacy/incognito modes.
celsoazevedo 6y ago
This depends a lot on the "Security Level" (Firewall > Settings) we pick on Cloudflare's settings for our site. On my sites I set it to "essentially off", only ips with really bad reputation see the captcha.
- kop316 6y ago
  Thanks for the note on that. I'm still new to using cloud flare.

by kop316 6y ago

snazz 6y ago

I think that the site backend is having trouble keeping up with the load and the owner turned on Cloudflare’s Under Attack mode, thinking that this was a DDoS. This doesn’t look like the behavior I’ve seen when Cloudflare does it automatically. It’s smart enough to know that HN is not a DDoS.

judge2020 6y ago
A common question on the CF forum is a requests/second trigger for either enabling Under Attack mode or enabling a Firewall rule that triggers the full hCaptcha page. This is most likely what happened here. [This is usually done by counting requests/second at the origin then using the CF API to enable the firewall rule or change the security level)
kop316 6y ago
I have an add-on that removes referrer strings...but when I disabled that I get the same issue. When I checked it on my phone (Android, mobile Firefox with the same add-ons), I was able to go fine.

cuspycode 6y ago

I got the same CAPTCHA, running Firefox 68.4.1 on Linux. Normally when this kind of thing happens, I just close the tab and move on with my life. But this time I tried opening with Chromium instead (version 76.0.3809.100) and then no CAPTCHA was required. Neither browser has Privacy Pass, so why are they treated differently?

deleted 6y ago
[deleted]
tfigment 6y ago
So you have script blocker on both and configured same way? I get captcha requests on my firefox with umatrix due to aggressive blocking.
- cuspycode 6y ago
  No blockers, just using the built-in privacy/incognito modes.

celsoazevedo 6y ago

This depends a lot on the "Security Level" (Firewall > Settings) we pick on Cloudflare's settings for our site. On my sites I set it to "essentially off", only ips with really bad reputation see the captcha.

kop316 6y ago
Thanks for the note on that. I'm still new to using cloud flare.