3 ms·
Cloudflare works with Privacy Pass, a browser extension through which you can solve CAPTCHAs in advance to accumulate tokens that let you bypass CAPTCHAs served
by commoner 5y ago
Cloudflare works with Privacy Pass, a browser extension through which you can solve CAPTCHAs in advance to accumulate tokens that let you bypass CAPTCHAs served by participating services (including Cloudflare, but not Google) as you browse the web. One pre-solved CAPTCHA gives you 30 tokens for ReCAPTCHA or 5 tokens for hCaptcha:
https://privacypass.github.io https://privacypass.github.io
I didn't encounter any serious CAPTCHA issues when I tried out Mullvad and Mozilla VPN. Windscribe is probably worse for CAPTCHAs because of its free tier and the lifetime membership that it previously sold for a low price. VPNs that require ongoing paid subscriptions tend to have higher-quality traffic.
- mandarax8 5y agoWhat stops people from just botting the captcha tokens? More captcha's?
- commoner 5y agoThe Privacy Pass server uses key rotation to make the tokens expire after a certain period of time. The documentation also hints at other measures including rate limiting and using a web application firewall: https://github.com/privacypass/challenge-bypass-extension/blob/master/docs/PROTOCOL.md#stockpiling-of-passes https://github.com/privacypass/challenge-bypass-extension/bl...
- Seirdy 5y agoExtensions like this make users more fingerprintable so that kind of defeats half the stated purpose of using a commercial VPN. They also weaken the browser's security model, which is part of the reason why Tor users are told to never install addons.
- jzelinskie 5y agoPrivacyPass is not your average extension. It's got a strong basis in applied cryptographic research and was designed to solve the captcha problem in a safe way for tor. It's now later been adopted by both cloudflare and google, so I'm pretty sure it's well vetted.
- Seirdy 5y agoNone of this changes the fact that using it makes users fingerprintable.