3 ms·
HN also makes it hard to connect from Tor... "Prove you're legit" and the captcha never lets you through, even after solving it right. This is a common problem
by logn 12y ago
HN also makes it hard to connect from Tor... "Prove you're legit" and the captcha never lets you through, even after solving it right. This is a common problem with Cloudflare sites. Cloudflare is an enormous security hole as it is and it's making it worse by actively working against Tor and making SSL certs largely untrustable (if they weren't already).
- dang 12y agoAre you sure you're up to date on that? Captcha for new account creation on HN is either mostly turned off or completely so, and last I tested it, Google had made RECAPTCHA doable by humans again. HN's restrictions on Tor IPs are only for brand new accounts. That's because of past abuses by trolls. Even then, we routinely override the restriction for accounts that are obviously legit. Anyone who sees a case of this (i.e. legit noob comments that are dead) should email us. In most cases we fix them immediately.
- logn 12y agoIt's happened while I've been logged in too. However, I've also taken other measures to randomize user agent, screen size, etc and to set referrer to the site's root (and disable Google Analytics). I thought I tested it without those extra mods but I'll double check and reply to my comment when I can confirm. Aside from HN however, I am positive that Cloudflare completely blocks vanilla Tor browsers from many of their properties.
- dang 12y agoSounds good. But please email hn@ycombinator.com as well if you have findings you want to make sure we see. Replying in a comment is fine, of course; it's just hit-and-miss as far as bringing something to our attention goes.
- logn 12y agoTor works OK on HN. It was one of the other unique browser settings I had that was triggering captcha.