Continued abuse

[Night Wing]

At the time of this posting I am using 64 bit linux Pale Moon 33.9.1 (GTK2) running in 64 bit MX Linux 25 (Infinity) Xfce and I have not had a challenge today from Anubis.

[frostknight]

At the time of this posting I am using 64 bit linux Pale Moon 33.9.1 (GTK2) running in 64 bit MX Linux 25 (Infinity) Xfce and I have not had a challenge today from Anubis.

Today I have gotten at most 1 time today I think.

previous days maybe 2 or 3 depending on how many times i visited the site.

When logged in though, I rarely ever get it.

[Moonchild]

previous days maybe 2 or 3 depending on how many times i visited the site.

As I restarted the services a few times, to make config changes, that would likely influence it.
Also if your IP changes it might re-challenge.

[jobbautista9]

Also if your IP changes it might re-challenge.

This is most likely the reason why one would get more challenges than usual. I switch from mobile data to Wi-Fi and back often in my smartphone, and from experience Anubis will force a challenge if it detects a change in your IP while having the same validation cookie.

[Moonchild]

from experience Anubis will force a challenge if it detects a change in your IP while having the same validation cookie.

Pretty sure that is to prevent cookie-sharing (challenge once, then clone the cookie to bot scripts)

[Bilbo47]

Update seems to be blocking NewsFox as well. Can't find a setting in UI nor in repo docs about javascript.

let the browser solve the Anubis challenge first before having your RSS add-on read the feed.

Although this was not my issue, found that NewsFox JS can be turned on and off under both Options (global / all feeds) and Feed Options (per-feed). Relevant choices are mainly:

• Text
• Web Page
• Web Page (-JS)

Saw this effect work as mentioned during testing. It's like "let the page load once (and pass the challenge) with JS; after that it will load without JS - for the time being."

[Bilbo47]

show the full HTTP request headers

Welp it works correctly after changing [Preferences => Privacy => Accept third-party cookies] from "Never" to "From visited".
It makes sense that any Anubis-style check will require cookies ... but I woulda expected that fact to have been mentioned before the third page of this thread.
Anyway, request headers were found under [Tools => Developer Tools => Network]

1. On the NF psuedo-page chrome://newsfox/content/newsfox.xul, select a feed on Palemooon Forums
2. Select an article
3. Watch the GET traffic

Noticed that the pages were requesting Palemooon to save a cookie, but the browser was set to disallow third-party cookies, and this setting was different in
a blank / testing profile, where NF worked as expected.
Changed the relevant setting, and forum articles now display correctly inside NewsFox.

[back2themoon]

As of today, Anubis blocks me right here on the forum:

Cookies.png

This is on clean PM portable, too. No cookies are blocked. Firefox is allowed. WTF?

[Moonchild]

I've disabled anubis for now. I have no clue wtf is going on. this started after the server maintenance and I have no idea what is causing it.
Are you saying it is blocking Pale Moon specifically now? or all browsers? I didn't test with another browser.

[back2themoon]

It did look like it was blocking Pale Moon before. Only tried Firefox, didn't test much. Now it works, I guess because you disabled it.

[Moonchild]

Once again no idea. If you say Firefox worked but Pale Moon was blocked, then I don't know as they should be treated the same.
I'm asking the server provider what exactly they have done in the maintenance window, as well as anubis community what could cause this.

I really don't need this kind of bs right now.

[Moonchild]

As it turned out, the error was a red herring (but no pointers otherwise). The issue was that because of the maintenance suspending the machine state (not actually shutting down), the clock got seriously skewed which caused issues with setting the cookie. I've filed a bug report with Anubis to hopefully get better feedback for the admin/user in that case.

While I was at it, I adjusted the policies for Anubis a bit to have it be even less in the way on trusted clients. You may not even see it at all now if you're on a featherweight (in terms of anubis weighing the soul of the browser/connection) client.

[Night Wing]

While I was at it, I adjusted the policies for Anubis a bit to have it be even less in the way on trusted clients. You may not even see it at all now if you're on a featherweight (in terms of anubis weighing the soul of the browser/connection) client.

I started seeing this challenge for less than a second of time the last few days, but Anubis always let me through. Saw it again earlier this morning on here. I left and when I returned this time, no challenge.

I know you are very busy at the moment so thanks for taking the time out of your hectic schedule and checking on this. I appreciate it.