News for hackers. Stuff that matters.

A comment on Cloudflare Turnstile requiring fingerprintable WebGL. Parent comment

Re:Cloudflare Turnstile requiring fingerprintable WebGL by pmontra on Sunday May 31, 2026 @11:59AM (#48346769)
It will not scare away bots but 10 seconds of wait (CPU or only a sleep) will turn away many real users. "This site is so slow, I'll use something else." A kind of reverse captcha.
[ Parent | on HN ]
Re:Cloudflare Turnstile requiring fingerprintable WebGL by Hnrobert42 on Sunday May 31, 2026 @12:33PM (#48347090)
Maybe, the proof of work can run in the background.
[ Parent | on HN ]
Re:Cloudflare Turnstile requiring fingerprintable WebGL by btown on Sunday May 31, 2026 @01:28PM (#48347601)
Or it can run as part of a checkout wizard's "verifying your browser and processing your payment, don't close your tab" step.
[ Parent | on HN ]
Re:Cloudflare Turnstile requiring fingerprintable WebGL by mattstir on Sunday May 31, 2026 @11:29PM (#48352307)
At which point it exists solely to punish real human users? What scraper bot is going through checkout?
[ Parent | on HN ]
Re:Cloudflare Turnstile requiring fingerprintable WebGL by BenjiWiebe on Monday June 01, 2026 @01:37PM (#48360055)
The credit card tester bots go through the checkout process.

PoW wouldn't be a big issue for them though since their volume is much lower.

[ Parent | on HN ]