News for hackers. Stuff that matters.
Re:Ask HN: Anyone else frustrated with “secure connection ch... by mattl on Friday April 14, 2023 @07:39AM (#35568319)
What browser/OS are you using? What country are you in? Are you using Tor?
[ Parent | on HN ]
Re:Ask HN: Anyone else frustrated with “secure connection ch... by coldtea on Friday April 14, 2023 @07:52AM (#35568412)
It can happen on both Windows and Mac, with both Chrome/Firefox. I've seen it happen in Western Europe just fine. No Tor.

You don't need to have some "exotic" setup to see this.

https://www.google.com/search?q=cloudflare+browser+check+ann...

[ Parent | on HN ]
Re:Ask HN: Anyone else frustrated with “secure connection ch... by mattl on Friday April 14, 2023 @08:26AM (#35568733)
Do you get a Cloudflare Ray ID on the page when you’re being asked? You can send that to the website admin and ask them to check for you.
[ Parent | on HN ]
Re:Ask HN: Anyone else frustrated with “secure connection ch... by pinko on Tuesday April 18, 2023 @08:42PM (#35622659)
Forgive the dumb question, but what can a friendly website admin do with the Ray ID you send them, that can help you as a user, assuming they put Cloudflare in the middle as a CAPTCHA in the first place for a reason unrelated to you, and still want/need it there?
[ Parent | on HN ]
Re:Ask HN: Anyone else frustrated with “secure connection ch... by mattl on Tuesday April 18, 2023 @08:58PM (#35622792)
They can look up why you were blocked, your ISP, your local POP, the page you were requesting and if it was because of a firewall rule they’ll see that too. Basically everything unique about your request.

So if they’re accidentally blocking people because a firewall rule is misconfigured you’ll let them know.

In a previous job we used Cloudflare and found some of our remote workers were triggering a SQL injection on the website by updating our WordPress blog.

[ Parent | on HN ]
Re:Ask HN: Anyone else frustrated with “secure connection ch... by Cloudef on Friday April 14, 2023 @02:16PM (#35572800)
Linux/Qutebrowser, had to use firefox to access the site. Some sites won't work even in firefox unless I use private window.
[ Parent | on HN ]
Re:Ask HN: Anyone else frustrated with “secure connection ch... by mattl on Friday April 14, 2023 @02:55PM (#35573324)
What's your user agent string on Qutebrowser?
[ Parent | on HN ]
Re:Ask HN: Anyone else frustrated with “secure connection ch... by eerikkivistik on Friday April 14, 2023 @12:21PM (#35571303)
The funniest thing I've seen recently, is government API services that have been put behind Cloudflare. Which means, you literally cannot access them without a browser. Let me reiterate, you cannot use machine-to-machine APIs without a browser.
[ Parent | on HN ]
Re:Ask HN: Anyone else frustrated with “secure connection ch... by switch007 on Friday April 14, 2023 @01:31PM (#35572212)
Do they require an interactive oauth2 flow too?
[ Parent | on HN ]
Re:Ask HN: Anyone else frustrated with “secure connection ch... by eerikkivistik on Friday April 14, 2023 @06:10PM (#35575466)
I’m sure they will now that you suggested it :)
[ Parent | on HN ]
Re:Ask HN: Anyone else frustrated with “secure connection ch... by anthonyhn on Friday April 14, 2023 @02:34PM (#35573080)
Yes, it can be quite frustrating. On my search engine[0] I tag sites that use captcha services and browser checks so that the user has more transparency and can choose to avoid sites that use these services if they want.

[0] https://ichi.do

[ Parent | on HN ]
Re:Ask HN: Anyone else frustrated with “secure connection ch... by VoodooJuJu on Friday April 14, 2023 @08:18PM (#35576422)
What bothers me is the mendacity.

No, you're not checking for a "secure connection". What you're doing is taking a fingerprint, to both deanonymize me and detect if I'm a bot.

[ Parent | on HN ]