5 ms·
> Cloudflare also has a feature to block known AI bots and even suspected AI bots In addition to other crushing internet risks, add wrongly blacklisted as a bo
by MetaWhirledPeas 2y ago
> Cloudflare also has a feature to block known AI bots and even suspected AI bots
In addition to other crushing internet risks, add wrongly blacklisted as a bot to the list.
- throwaway290 2y agoWhat do you mean crushing risk? Just solve these 12 puzzles by moving tiny icons on tiny canvas while on the phone and you are in the clear for a couple more hours!
- gs17 2y agoIf it clears you at all. I accidentally set a user agent switcher on for every site instead of the one I needed it for, and Cloudflare would give me an infinite loop of challenges. At least turning it off let me use the Internet again.
- homebrewer 2y agoIf you live in a region which it is economically acceptable to ignore the existence of (I do), you sometimes get blocked by website r̶a̶c̶k̶e̶t̶ protection for no reason at all, simply because some "AI" model saw a request coming from an unusual place.
- benhurmarcel 2y agoSometimes it doesn’t even give you a Captcha. I have come across some websites that block me using Cloudflare with no way of solving it. I’m not sure why, I’m in a large first-world country, I tried a stock iPhone and a stock Windows PC, no VPN or anything. That’s just no way to know.
- dannyw 2y agoThat’s probably a page/site rule set by the website owner. Some sites block EU IPs as the costs of complying with GDPR outweigh the gain.
- throwaway290 2y agoI saw GDPR related blockage like literally twice in a few years and I connect from EU IP almost all the time Overload of captcha is not about GDPR... but the issue is strange. @benhurmarcel I would check if there is somebody or some company nearby abusing stuff and you got under the hammer. Maybe unscrupulous VPN company. Using a good VPN can in fact make things better (but will cost money) or if you have a place to put your own all the better. otherwise check if you can change your IP with provider or change providers or move I guess... not to excuse CF racket but as this thread shows the data hungry artificial stupidity leaves no choice to some sites
- benhurmarcel 2y agoDoes it work only based on the IP? I also tried from a mobile 4G connection, it’s the same.
- throwaway290 2y agoThis may be too paranoid, but if your mobile IP is persistent and phone was compromised and is serving as a proxy for bots then it could explain why your IP fell out of favor
- EVa5I7bHFq9mnYK 2y agoYou don't get your own external IP with the phone, it's shared, like NAT.
- throwaway290 2y agoDepends on provider/plan
- scarface_74 2y agoI get a different IPv4 and IPv6 address every time I toggle airplane mode on and off.
- deleted 2y ago[deleted]
- JohnMakin 2y agoThese features are opt-in and often paid features. I struggle to see how this is a "crushing risk," although I don't doubt that sufficiently unskilled shops would be completely crushed by an IP/userAgent block. Since Cloudflare has a much more informed and broader view of internet traffic than maybe any other company in the world, I'll probably use that feature without any qualms at some point in the future. Right now their normal WAF rules do a pretty good job of not blocking legitimate traffic, at least on enterprise.
- MetaWhirledPeas 2y agoThe risk is not to the company using Cloudflare; the risk is to any legitimate individual who Cloudflare decides is a bot. Hopefully their detection is accurate because a false positive would cause great difficulties for the individual.
- neilv 2y agoFor months, my Firefox was locked out of gitlab.com and some other sites I wanted to use, because CloudFlare didn't like my browser. Lesson learned: even when you contact the sales dept. of multiple companies, they just don't/can't care about random individuals. Even if they did care, a company successfully doing an extended three-way back-and-forth troubleshooting with CloudFlare, over one random individual, seems unlikely.
- kmeisthax 2y agoThis is already a thing for basically all of the second[0] and third worlds. A non-trivial amount of Cloudflare's security value is plausible algorithmic discrimination and collective punishment as a service. [0] Previously Soviet-aligned countries; i.e. Russia and eastern Europe.
- ls612 2y agoPeople hate collective punishment because it works so well.
- eckesicle 2y agoAnecdatally, by default, we now block all Chinese and Russian IPs across our servers. After doing so, all of our logs, like ssh auth etc, are almost completely free and empty of malicious traffic. It’s actually shocking how well a blanket ban worked for us.
- macintux 2y ago~20 years ago I worked for a small IT/hosting firm, and the vast majority of our hostile traffic came from APNIC addresses. I seriously considered blocking all of it, but I don’t think I ever pulled the trigger.
- dgfitz 2y ago[flagged]
- brianwawok 2y agoThat is not at all the reason for the great firewall.
- TacticalCoder 2y ago> Anecdatally, by default, we now block all Chinese and Russian IPs across our servers. This. Just get several countries' entire IP address space and block these. I've posted I was doing just that only to be told that this wasn't in the "spirit" of the Internet or whatever similar nonsense. In addition to that only allow SSH in from the few countries / ISPs legit trafic shall legitimately be coming from. This quiets the logs, saves bandwidth, saves resources, saves the planet.
- CalRobert 2y agoWe’re rapidly approaching a login-only internet. If you’re not logged in with google on chrome then no website for you! Attestation/wei enable this
- neop1x 2y agoAnd not just a login but soon probably also the real verified identity tied to it. The internet is becoming a worse place than the real world.