3 ms·

But Cloudflare have removed CAPTCHAs

lxgr 1y ago
Not sure if you're joking, but if you're not: Congratulations on using a very "normal/safe" OS/browser/IP. I get captchas daily, without using any VPN and on several different IPs (work, home, mobile). The only crime I can think of is that I'm using Firefox instead of Chrome.
- Symbiote 1y ago
  Since a few days ago, I've been getting Captchas hourly or more. It's probably because I use Firefox on Linux with an ad blocker. For my part, I've ensured we don't use Cloudflare at work.
  - kelvinjps10 1y ago
    I use firefox on linux with an ad blocker and cloudfare works fine
  - DanOpcode 1y ago
    It must depend on something else. Firefox & Linux have always worked fine for me, I cannot remember when I last got restricted by a Cloudflare captcha.
  - dotnet00 1y ago
    Using Linux is rare among the general public, but very normal among the kind of person who may find themselves working at Cloudflare or at a potential cloudflare partner/customer. I don't really buy the argument that they're pushing more captchas to you just because of using Firefox on Linux with an ad blocker.
    - fsflover 1y ago
      https://news.ycombinator.com/item?id=42577076 https://news.ycombinator.com/item?id=42577076
- sealeck 1y ago
  https://blog.cloudflare.com/end-cloudflare-captcha/ https://blog.cloudflare.com/end-cloudflare-captcha/
  - Sebguer 1y ago
    Managed challenges are just CAPTCHA by another name.
  - lxgr 1y ago
    It's not much consolation to me if I'm one of the 25% still being challenged. The world really has more than enough heuristic fraud detection systems that most people aren't even aware exist, but make life miserable for those that somehow don't fit the typical user profile. In fact, the lower the false positive rate gets, the more painful these systems usually become for each false positive. I'm so tired of it. Sure, use ML (or "AI") to classify good and evil users for initial triaging all day long, but make sure you have a non-painful fallback.
- sitzkrieg 1y ago
  my residental ip of years (which is not shared or cgnat) was recently flagged by cloudflare for who knows why. if you are asking, you havent seen when cloudflare thinks you are something else. cloudflare are not the good guys because they give people free cdn and ddos protection lol
- SchemaLoad 1y ago
  I use a VPN and firefox and I get some extra captchas but not enough to be annoying. And you don't have to do anything more than tap the checkbox. Meanwhile a bunch of "security" products other websites use just flat out block you if you're on a VPN. Other sites like youtube or reddit are in between where they block you unless you are logged in. Cloudflare is the least obtrusive of the options.
  - lxgr 1y ago
    No, the least obtrusive option is the one you don't even notice because it actually works (or offers a non-painful secondary flow when it doesn't).
- const_cast 1y ago
  Really? Because I'm on Debian, with Firefox, with a VPN active 24/7 and I almost never get Captchas. I do get those "checking your browser" pages often but they just stick around for maybe half a second then redirect.
1oooqooq 1y ago
you forgot /s (the people not getting the joke, yes the new system don't make you train any image recognition dataset, but they profile the hell out anything they can get their hand on just like google captcha and then if you smell like a bot you're denied access. goodbye)

lxgr 1y ago

Not sure if you're joking, but if you're not: Congratulations on using a very "normal/safe" OS/browser/IP. I get captchas daily, without using any VPN and on several different IPs (work, home, mobile). The only crime I can think of is that I'm using Firefox instead of Chrome.

Symbiote 1y ago
Since a few days ago, I've been getting Captchas hourly or more. It's probably because I use Firefox on Linux with an ad blocker. For my part, I've ensured we don't use Cloudflare at work.
- kelvinjps10 1y ago
  I use firefox on linux with an ad blocker and cloudfare works fine
- DanOpcode 1y ago
  It must depend on something else. Firefox & Linux have always worked fine for me, I cannot remember when I last got restricted by a Cloudflare captcha.
- dotnet00 1y ago
  Using Linux is rare among the general public, but very normal among the kind of person who may find themselves working at Cloudflare or at a potential cloudflare partner/customer. I don't really buy the argument that they're pushing more captchas to you just because of using Firefox on Linux with an ad blocker.
  - fsflover 1y ago
    https://news.ycombinator.com/item?id=42577076 https://news.ycombinator.com/item?id=42577076
sealeck 1y ago
https://blog.cloudflare.com/end-cloudflare-captcha/ https://blog.cloudflare.com/end-cloudflare-captcha/
- Sebguer 1y ago
  Managed challenges are just CAPTCHA by another name.
- lxgr 1y ago
  It's not much consolation to me if I'm one of the 25% still being challenged. The world really has more than enough heuristic fraud detection systems that most people aren't even aware exist, but make life miserable for those that somehow don't fit the typical user profile. In fact, the lower the false positive rate gets, the more painful these systems usually become for each false positive. I'm so tired of it. Sure, use ML (or "AI") to classify good and evil users for initial triaging all day long, but make sure you have a non-painful fallback.
sitzkrieg 1y ago
my residental ip of years (which is not shared or cgnat) was recently flagged by cloudflare for who knows why. if you are asking, you havent seen when cloudflare thinks you are something else. cloudflare are not the good guys because they give people free cdn and ddos protection lol
SchemaLoad 1y ago
I use a VPN and firefox and I get some extra captchas but not enough to be annoying. And you don't have to do anything more than tap the checkbox. Meanwhile a bunch of "security" products other websites use just flat out block you if you're on a VPN. Other sites like youtube or reddit are in between where they block you unless you are logged in. Cloudflare is the least obtrusive of the options.
- lxgr 1y ago
  No, the least obtrusive option is the one you don't even notice because it actually works (or offers a non-painful secondary flow when it doesn't).
const_cast 1y ago
Really? Because I'm on Debian, with Firefox, with a VPN active 24/7 and I almost never get Captchas. I do get those "checking your browser" pages often but they just stick around for maybe half a second then redirect.

1oooqooq 1y ago

you forgot /s (the people not getting the joke, yes the new system don't make you train any image recognition dataset, but they profile the hell out anything they can get their hand on just like google captcha and then if you smell like a bot you're denied access. goodbye)