3 ms·

How HIBP works for users navigating from third world countries: https://imgur.com/a/K5z1X2R https://imgur.com/a/K5z1X2R It's a long .gif file which shows that

How HIBP works for users navigating from third world countries: https://imgur.com/a/K5z1X2R https://imgur.com/a/K5z1X2R It's a long .gif file which shows that cloudflare's website loads just fine, but HIBP is unusable. Thanks Troy and Cloudflare for making this (free) service unusable. It's free, so I shouldn't expect that it works, anyway. Chrome on Linux and no VPN, fwiw.

mananaysiempre 3y ago
>> https://imgur.com/a/K5z1X2R https://imgur.com/a/K5z1X2R > This post may contain erotic or adult imagery. Yeah it’s fucked alright.
- randunel 3y ago
  The "Mature (?)" checkbox is unticked, and there doesn't seem to be a different setting for it.
jiofj 3y ago
[flagged]
- randunel 3y ago
  There's a lot of English and American bias on the internet, I don't know if "stop being poor" is the solution, but I'm definitely trying.
  - jiofj 3y ago
    This has nothing to do with "English and American bias", this is simply the result of most traffic coming from your country being bots because of the amount of compromised machines that there are there.
46Bit 3y ago
That looks like a misconfiguration by HIBP
realusername 3y ago
That's pretty much what I expected would happen, none of those solutions ever worked.
kevincox 3y ago
The "Checking if site connect is secure" message pisses me off so much. They are lying straight to my face. It is about checking if they want to serve me, nothing about the site or my connection.
- fatnoah 3y ago
  This annoys me to no end as well. Whenever I see that message, I just close the window and do something else.
unlog 3y ago
I believe the implementation is buggy, because I almost never see a Cloudflare page and I can consistently see one here when double-clicking the button.
deleted 3y ago
[deleted]
jeroenhd 3y ago
This looks like an obvious misconfiguration, after passing the first quick Cloudflare check you should've been forwarded to a page with the right results. Sounds like Troy needs to fix his API calls. Just out of interest, have you checked if installing Cloudflare's Privacy Pass bypasses the issue?
- macNchz 3y ago
  I’ve encountered this kind of loop on a number of different sites lately, so it may be more than a single misconfiguration. (US residential IP, using Firefox on Linux / Safari on iOS with Private Access Tokens disabled on principle). I’ve just figured it was a fully intentional tarpit, and that I scored too high on some bot heuristic.
  - jeroenhd 3y ago
    It's possible that the loop is just a tarpit, but based on the contents of the blog post I don't think this is intentional on the website's end. I can think of different ways how this could go wrong (i.e. Cloudflare tries to forward the POST request and CSRF/WAF firewalls block the unexpected Cloudflare origin).

mananaysiempre 3y ago

>> https://imgur.com/a/K5z1X2R https://imgur.com/a/K5z1X2R > This post may contain erotic or adult imagery. Yeah it’s fucked alright.

randunel 3y ago
The "Mature (?)" checkbox is unticked, and there doesn't seem to be a different setting for it.

jiofj 3y ago

[flagged]

randunel 3y ago
There's a lot of English and American bias on the internet, I don't know if "stop being poor" is the solution, but I'm definitely trying.
- jiofj 3y ago
  This has nothing to do with "English and American bias", this is simply the result of most traffic coming from your country being bots because of the amount of compromised machines that there are there.

46Bit 3y ago

That looks like a misconfiguration by HIBP

realusername 3y ago

That's pretty much what I expected would happen, none of those solutions ever worked.

kevincox 3y ago

The "Checking if site connect is secure" message pisses me off so much. They are lying straight to my face. It is about checking if they want to serve me, nothing about the site or my connection.

fatnoah 3y ago
This annoys me to no end as well. Whenever I see that message, I just close the window and do something else.

unlog 3y ago

I believe the implementation is buggy, because I almost never see a Cloudflare page and I can consistently see one here when double-clicking the button.

deleted 3y ago

[deleted]

jeroenhd 3y ago

This looks like an obvious misconfiguration, after passing the first quick Cloudflare check you should've been forwarded to a page with the right results. Sounds like Troy needs to fix his API calls. Just out of interest, have you checked if installing Cloudflare's Privacy Pass bypasses the issue?

macNchz 3y ago
I’ve encountered this kind of loop on a number of different sites lately, so it may be more than a single misconfiguration. (US residential IP, using Firefox on Linux / Safari on iOS with Private Access Tokens disabled on principle). I’ve just figured it was a fully intentional tarpit, and that I scored too high on some bot heuristic.
- jeroenhd 3y ago
  It's possible that the loop is just a tarpit, but based on the contents of the blog post I don't think this is intentional on the website's end. I can think of different ways how this could go wrong (i.e. Cloudflare tries to forward the POST request and CSRF/WAF firewalls block the unexpected Cloudflare origin).