alt Hacker News"The walls have ears."
Personally I would be careful about poking this bear so publicly. All it does is accelerate escalation and cause those of us who have been subjected to user-agent discrimination and found our own workarounds even more difficulty.
With the rise of AI, this point may be moot, but this is still a war and anything you make public can and will be used against you.
Replies
This is a war yes but Cloudflare already lost it. Cloudflare bypass is the hello world of bots, they just keep hobbists out, at most.
I really wouldn't worry about this. People are already doing much more advanced, compute cycle intensive cloudflare bypasses with things like playwright + camoufox:
https://github.com/daijro/camoufox
There are various headless antidetect browsers now which are patched at the source code level to avoid headless-browser-detection systems, and to present consistent profiles for things like webrtc/webasssembly capability and other features that looks like a legit normal user agent of someone running MS Edge on Windows 11 on a consumer grade laptop. Or whatever the desired profile is. Often coupled with residential or mobile carrier proxies.
I mean, take a look at this and tell me if you think a cloudflare turnstile stands a chance when you are ready to spend the CPU cycles on running an entire browser and human-behavior simulation stack:
Cloudflare can't win in the long term. The rest of the world just has too much resources compared to them.