Re:Two vulnerabilities in Zoom could lead to code execution
by cuspycode on Sunday June 07, 2020 @08:27AM
(#23446885)
I got the same CAPTCHA, running Firefox 68.4.1 on Linux. Normally when this kind of thing happens, I just close the tab and move on with my life. But this time I tried opening with Chromium instead (version 76.0.3809.100) and then no CAPTCHA was required. Neither browser has Privacy Pass, so why are they treated differently?
Re:Two vulnerabilities in Zoom could lead to code execution
by tfigment on Sunday June 07, 2020 @08:59AM
(#23447013)
So you have script blocker on both and configured same way? I get captcha requests on my firefox with umatrix due to aggressive blocking.
Re:Two vulnerabilities in Zoom could lead to code execution
by cuspycode on Sunday June 07, 2020 @09:09AM
(#23447069)
No blockers, just using the built-in privacy/incognito modes.
Re:Two vulnerabilities in Zoom could lead to code execution
by snazz on Sunday June 07, 2020 @08:27AM
(#23446884)
I think that the site backend is having trouble keeping up with the load and the owner turned on Cloudflare’s Under Attack mode, thinking that this was a DDoS. This doesn’t look like the behavior I’ve seen when Cloudflare does it automatically. It’s smart enough to know that HN is not a DDoS.
Re:Two vulnerabilities in Zoom could lead to code execution
by judge2020 on Sunday June 07, 2020 @08:49AM
(#23446967)
A common question on the CF forum is a requests/second trigger for either enabling Under Attack mode or enabling a Firewall rule that triggers the full hCaptcha page. This is most likely what happened here.
[This is usually done by counting requests/second at the origin then using the CF API to enable the firewall rule or change the security level)
Re:Two vulnerabilities in Zoom could lead to code execution
by kop316 on Sunday June 07, 2020 @08:49AM
(#23446968)
I have an add-on that removes referrer strings...but when I disabled that I get the same issue.
When I checked it on my phone (Android, mobile Firefox with the same add-ons), I was able to go fine.
Re:Two vulnerabilities in Zoom could lead to code execution
by celsoazevedo on Sunday June 07, 2020 @08:57AM
(#23447005)
This depends a lot on the "Security Level" (Firewall > Settings) we pick on Cloudflare's settings for our site.
On my sites I set it to "essentially off", only ips with really bad reputation see the captcha.
Giving cloudflare the benefit of the doubt, what could trip this is:
1) the site is getting higher than average visits (tripping the anti-DDoS flag for the CDN)
2) I went without javascript on, so they think I am just a bot.
EDIT: after giving it the benefit of the doubt, the captha didn't work for me at least 4 times. That is unacceptable.