logoalt Hacker News

cookiengineertoday at 6:17 AM3 repliesview on HN

With a normal Firefox on desktop on Linux, I get unsolvable recaptchas all the time, especially on cloudflare pages.

Ironically, if I fake instead a chromium to be on Windows (UA and Sec-CH headers), I am allowed most of the time even though my TCP fingerprint must mismatch then.

It's annoying to see what the normal web has become. Can't even read news anymore.

Ironically, all these bot defenses make it easier for bots to scrape their website, but make it harder for actual users to use them.

The only bot defense web app firewall that still works with Firefox seems to be Anubis. Pretty much all others autoflag Linux users as bot users, which feels insane if you think about less web developers must know about how botnets work.


Replies

happymellontoday at 7:12 AM

> With a normal Firefox on desktop on Linux, I get unsolvable recaptchas all the time, especially on cloudflare pages.

I get this with Chrome on MacOS.

I'm becoming more convinced that Cloudflare is the bane of the internet.

dspilletttoday at 11:14 AM

> I get unsolvable recaptchas all the time, especially on cloudflare pages

Repeated problems with cf and similar like this seem to be more common for users behind CGNAT (most mobile users for example). Presumably all the other hosts sharing the same final outgoing address(es), some of which will be running bots either deliberately or because they've been infiltrated by malware, confuse the heuristics that decide how often checks should be made.

notpushkintoday at 8:02 AM

> I get unsolvable recaptchas all the time, especially on cloudflare pages.

If you really mean reCAPTCHA (the one with a “select all squares that have X” kinda challenges), then Cloudflare hasn’t used that for quite a while now. archive.today uses a Cloudflare-looking (old style) page with a reCAPTCHA (and they do serve it quite often), but I don’t think I’ve seen other sites do that.

show 1 reply