News for hackers. Stuff that matters.
Re:Cloudflare’s CAPTCHA replacement with FIDO2/WebAuthn is a... by catillac on Friday May 14, 2021 @09:08AM (#27153835)
I’m really sorry, but you appear to be the CTO of Cloudflare, which makes your not knowing the ins and outs of the problem already and basic questioning of it seem like sealioning.[1]

[1] https://en.m.wikipedia.org/wiki/Sealioning

Re:Cloudflare’s CAPTCHA replacement with FIDO2/WebAuthn is a... by jgrahamc on Friday May 14, 2021 @09:12AM (#27153868)
I do not understand what the parent means by a "distributed search engine" and I do not know what problem they are facing.
Re:Cloudflare’s CAPTCHA replacement with FIDO2/WebAuthn is a... by viraptor on Friday May 14, 2021 @09:18AM (#27153938)
https://yacy.net/ for example. Each interested node does indexing and serving some chunk of the results.

Or in practice - each node quickly runs into a CloudFlare captcha preventing it from indexing content for a few hours/days. Since CF fronts a lot of the useful internet these days, it means it's effectively working against distributed indexing with its current captcha solution.

Re:Cloudflare’s CAPTCHA replacement with FIDO2/WebAuthn is a... by jgrahamc on Friday May 14, 2021 @09:20AM (#27153964)
Thanks. I'll bring this to the attention of the bots and DDoS teams.
Re:Cloudflare’s CAPTCHA replacement with FIDO2/WebAuthn is a... by jimktrains2 on Friday May 14, 2021 @11:51AM (#27155563)
Yacy is 18 years old and not exactly obscure. If your bots team is unaware of it it's because they've chosen to be ignorant of it.
Re:Cloudflare’s CAPTCHA replacement with FIDO2/WebAuthn is a... by joepie91_ on Friday May 14, 2021 @09:18AM (#27153944)
A search engine which is not run centrally by one organization on infrastructure in a known network, but rather something like YaCy where individual users run crawler nodes on networks that vary over time.

Which makes "contact us for an exception" a no-go, as the relevant source IPs will constantly be changing.

Re:Cloudflare’s CAPTCHA replacement with FIDO2/WebAuthn is a... by vntok on Friday May 14, 2021 @11:33AM (#27155355)
Yeah, I certainly don't want those crawlers anywhere near my servers. Block by default and allow site admins to unblock should they want to seems like the best way. It is also already how it works with Cloudflare.