News for hackers. Stuff that matters.
Re:Cloudflare is turning off the internet for me by dijit on Tuesday January 21, 2020 @03:04PM (#22110916)
It appears that setting it to the same as Chromes does indeed work!

for context this is what I had set (and, for quite some time it was working): "Mozilla/5.0 (X11; Linux x86_64; rv:57.0) Gecho/20100101 Firefox/57.0"

Ironically I set this so that I could continue logging in to google. Since I had been unable to log in to google-apps without setting this user agent string.

What did it fail on? the mis-spelling of "Gecho"?

Re:Cloudflare is turning off the internet for me by jimrandomh on Tuesday January 21, 2020 @06:58PM (#22113133)
It's the severely-outdated Firefox version number. Spambots and crawlers sometimes have user-agent strings corresponding to very old browsers, because they were set once when the bot was created and then never updated. On an unrelated site that I run, we get a lot of traffic with user agent strings corresponding to implausibly-old browsers, and it's ~100% bots.
Re:Cloudflare is turning off the internet for me by SilasX on Tuesday January 21, 2020 @07:20PM (#22113287)
November 2017 is “severely outdated”?

https://www.mozilla.org/en-US/firefox/57.0/releasenotes/

Re:Cloudflare is turning off the internet for me by nrb on Tuesday January 21, 2020 @07:42PM (#22113414)
Two full years for an evergreen web browser, which contains probably the largest surface area for software exploits of anything on the machine? I’d argue absolutely yes.

As others have echoed, this is probably a huge marker for malicious bots to Cloudflare.

Re:Cloudflare is turning off the internet for me by jlokier on Wednesday January 22, 2020 @11:52AM (#22119237)
The evergreen browser is a thing, but the idea that everyone can trivially upgrade those browsers is promulgated as true when it's a bit of a myth.

It is sometimes expensive for people to upgrade browsers, called evergreen by developers so they can avoid annoying support expenses for a few percent of people.

I had a phone running a Mozilla browser, which received updates until it didn't any more.

Then the only way to upgrade browser was to purchase a new smartphone.

Unfortunately it was a superb device with no newer replacement, so to upgrade browser I had to downgrade my smartphone for other uses, and pay the cost of an expensive new smartphone despite not really wanting one. But sites saw it as "you are running an old Firefox, you obviously can trivially upgrade".

I still have a perfectly great old Android tablet running an old version of Chrome which cannot be updated. Other than website compatibility, everything on it that it is used for is still working flawlessly. Perfect screen, sound, wifi, memory, battery.

For now, enough sites work on it that I still use it. That can be replaced easily with another tablet, but it is disappointing to have to spend cash and throw away a working product to e-waste, just to replace it with a functionally identical device because of the way the software treadmill works. (It doesn't have to work like that, it's a choice made by developers collectively.)

Re:Cloudflare is turning off the internet for me by SilasX on Wednesday January 22, 2020 @12:21PM (#22119646)
Yes, plus one of FF's upgrade slipped in the change that ignored your setting on "allow unsigned extensions" which broke a vital UX app I had been maintaining after it got abandoned (pentadactyl: I had gotten so used to clicking links from the keyboard that it was really frustrating when I suddenly couldn't; fortunately there have been similar projects since that carried the torch).

I mean, they said they gave long notice for the change, but I didn't think that a browser that "empowered users" and "gave them control of their machines" would ever do that. I mean, if every change has to be approved by Mozilla, why not just shrink wrap the browser and make me get it from Microsoft at Best Buy?

https://www.youtube.com/watch?v=taGARf8K5J8

Re:Cloudflare is turning off the internet for me by giancarlostoro on Tuesday January 21, 2020 @08:02PM (#22113525)
Even a month of no updates to browser is a bad idea.
Re:Cloudflare is turning off the internet for me by CodesInChaos on Wednesday January 22, 2020 @12:40PM (#22119905)
Between the huge and complex attack surface and being exposed to a huge number of untrusted websites, running a browser without security updates is pretty risky. So I'd call any unsupported browser "severely outdated".

Long term support (ESR) Firefox releases are supported for about 15 months from release. And even that means using a major version that old, not a point version that old. Firefox 57 wasn't even an ESR, so it went out of support a couple of months after release.

Re:Cloudflare is turning off the internet for me by stubish on Tuesday January 21, 2020 @07:54PM (#22113480)
Most certainly, like any complex app that needs to interact with potentially hostile services.
Re:Cloudflare is turning off the internet for me by The-Compiler on Tuesday January 21, 2020 @04:00PM (#22111504)
I always recommend setting custom user-agents for a problematic page instead of setting them globally.

For the Google issue, qutebrowser v1.9.0 does that already, see https://github.com/qutebrowser/qutebrowser/issues/5182

Re:Cloudflare is turning off the internet for me by anthk on Tuesday January 21, 2020 @09:45PM (#22114088)
So can do Falkon :)

Having a Chrome UA is a MUST on webkit based browsers if you want Google's taxing services such as Earth/Maps/Gmail and so on being faster and smoother than ever. Seriously.

Once you open Street View on luakit/vimb with a Chrome UA, the diff is night and day.

Re:Cloudflare is turning off the internet for me by The-Compiler on Wednesday January 22, 2020 @05:42AM (#22116300)
I tried with Street View im vimb. I don't see any difference - it's slow to the point of being almost unusable, while it works fine in qutebrowser.
Re:Cloudflare is turning off the internet for me by anthk on Wednesday January 22, 2020 @06:02PM (#22123024)
on ~/.config/vimb/config

    set hardware-aceleration-policy=always

    set webgl=true
Re:Cloudflare is turning off the internet for me by The-Compiler on Thursday January 23, 2020 @03:55AM (#22125966)
That seems to help, but I still don't see a difference with/without a Chrome UA.
Re:Cloudflare is turning off the internet for me by anthk on Thursday January 23, 2020 @12:04PM (#22129252)
Try a mobile Chrome UA, such as the one for a recent Galaxy Tab.
Re:Cloudflare is turning off the internet for me by migueldemoura on Tuesday January 21, 2020 @03:21PM (#22111095)
That User-Agent won't trigger the block page you were experiencing.

No clue about the issues with Google, perhaps some feature detection going on?

Re:Cloudflare is turning off the internet for me by The-Compiler on Tuesday January 21, 2020 @04:01PM (#22111513)
Nope, it's Google trying to ban "embedded browser frameworks" - see https://github.com/qutebrowser/qutebrowser/issues/5182 for details.
Re:Cloudflare is turning off the internet for me by GoblinSlayer on Wednesday January 22, 2020 @07:52AM (#22117071)
I used straight firefox and was still banned just fine. It didn't start in 2019 either. Chrome is their cash cow, if you don't use it, you're a liability.