3 ms·
>It could be worse, the main alternative is something like Cloudflares death-by-a-thousand-CAPTCHAs when your browser settings or IP address put you on the wron
by gruez 2y ago
>It could be worse, the main alternative is something like Cloudflares death-by-a-thousand-CAPTCHAs when your browser settings or IP address put you on the wrong side of their bot detection heuristics.
Cloudflare's checkbox challenge is probably the better challenge systems. Other security systems are far worse, requiring either something to be solved, or a more annoying action (eg. holding a button for 5 seconds).
- Dylan16807 2y agoChecking a box is fine when it lets you through. The problem is when cloudflare doesn't let you through.
- imcritic 2y agoSame problem with Google's captchas: solving them doesn't always mean you will be let in. That's outrageous, like isn't that the whole point?
- fmbb 2y agoNo, the whole point is you are helping machine learning training. Doing work for free.
- gruez 2y agoIt really isn't. If they were purely focused on getting training data, they would give more captchas to everyone, not just the users with no google cookies, connecting from VPN, and with weird browser configurations. The fact of the matter is that all those attributes are more "suspicious" than average, and therefore they want to up the cost for getting past the captcha.
- gruez 2y ago>The problem is when cloudflare doesn't let you through. Don't use an unusual browser configuration then, like spoofing user-agents or whatever? If you're doing it for "privacy" reasons, it's likely counterproductive. The fact that cloudflare can detect it means that the spoofing isn't doing a very good job, and therefore you're making yourself more fingerprintable.
- Dylan16807 2y agoThere's a whole lot of things that can count as "unusual" that aren't spoofing, and telling people not to be super vague "unusual" is a terrible solution.
- gruez 2y ago>There's a whole lot of things that can count as "unusual" that aren't spoofing Examples?
- Dylan16807 2y agoAd block, other blocking, third party cookie restrictions, all the stuff firefox changes when you toggle resistFingerprinting. From your other comment "users with no google cookies" and "connecting from VPN". Punishing people for not having Google cookies is probably the most obnoxious one.
- notpushkin 2y agoYeah. A “drag this puzzle piece” captcha style is also relatively easy, but things like reCaptcha or hCaptcha are just infuriating. For pure POW (no fingerprinting), mCaptcha is a nice drop-in replacement you can self-host: https://mcaptcha.org/ https://mcaptcha.org/
- GoblinSlayer 2y agoLooks like mCaptcha is an login captcha, while cloudflare and anubis intercept any access including DDoS.