Cloudflare Verification Loop issues

[jouven]

I too confirm that sites with cloudflare challenges work again with PM.

[Drugwash]

If you are only allowing cloudflare.com, it won't be enough. Check the aforementioned scripts.

Actually cloudflare.com, challenges.cloudflare.com and cloudflareinsights.com domains are allowed in both RequestPolicy and NoScript (yes, I know it's hated but got used to it since years ago). HTML5 is allowed on the AHK and GitLab domains. Disabled Redirect Cleaner too. And again, alll these were disabled when running in Troubleshooting mode.

All I can think of is either not all cloudflare CDN servers have been updated [yet], or there's some geofencing on their part. Because until this recent change they had performed which blocked PM and many other browsers I never had any problems in Pale Moon with CF-enabled sites.

OK, sorry, seems that the cloudflare domain had a specific user-agent set in about:config, which made it fail. One of my earlier attempts and finding a solution.
Now both AHK and GitLab work. Darn, this is getting too complicated for me (or me getting too old).

[sidology]

All I can think of is either not all cloudflare CDN servers have been updated [yet], or there's some geofencing on their part.

Can't you just try with a fresh profile? Type about:profiles in the address bar and...

[Drugwash]

All I can think of is either not all cloudflare CDN servers have been updated [yet], or there's some geofencing on their part.

Can't you just try with a fresh profile? Type about:profiles in the address bar and...

Thanks, just found the problem. Sorry for the trouble.

[back2themoon]

...allowed in both RequestPolicy and NoScript (yes, I know it's hated but got used to it since years ago).

Don't know about hate, but I see it's been accused of causing profile corruption and instability. That sounds a lot like "incompatible". I wouldn't use it and wouldn't be surprised if it somehow interferes with Cloudflare.

[Drugwash]

Off-topic:

Don't know about hate, but I see it's been accused of causing profile corruption and instability. That sounds a lot like "incompatible". I wouldn't use it and wouldn't be surprised if it somehow interferes with Cloudflare.

Yeah, I remember some old discussions on that topic. Knock on wood I didn't have any [major] problems that could've been pinned on it, and I've been using it ever since before switching to Linux six years ago - actually even before switching from Win98SE to XP about 2-3 (or more?) years earlier. Old habits die hard, and besides I could never wrap my head around these newer replacements - which I did try at some point in the past. Hopefully it won't give me any grief further on. Anyway, it wasn't its fault now.

[UCyborg]

UCyborg, you said you tried yesterday. Things have changed today.

Today I don't get Cloudflare's captcha on https://steamdb.info/ in any case.

[gepus]

Today I don't get Cloudflare's captcha on https://steamdb.info/ in any case.

Works for me (Pale Moon 33.6.1 x64/Win7).
Tested with both, a clean profile and a modified (internal settings/user.js) one.

[Gemmaugr]

If it passes just because of a simple shallow UA check, then I'm worried about the possible ramifications of bad actors..

While it may be good short-term, how short that term is will largely affect said consequences. Effects that could blow-back on PM as a browser, due to no fault of its users, depending on the time-frame.

Going forward from now, CF's actions and willingness to actually solve it long-term will be tested. If a regress to the previously working state is absolutely out of the question, the proposed Browser Developer Program should outline how hard-line their stance is concerning fingerprinting technologies.

I'd also like to see them address their rogue elements within their own CF Community, which also has a hold over the sub-reddit. The same actors that spread misinfo, shut us down, and locked (mayhap even removed) the thread as solved.

[Goodydino]

I too confirm that sites with cloudflare challenges work again with PM.

They all do not work. I still get the runaround with this site: https://www.fanfiction.net/game/Myst-Riven/
The index page loads, but I still cannot read any of the stories. In fact, the only browser i have that still works with the site is Safari.

[Gemmaugr]

I too confirm that sites with cloudflare challenges work again with PM.

They all do not work. I still get the runaround with this site: https://www.fanfiction.net/game/Myst-Riven/
The index page loads, but I still cannot read any of the stories. In fact, the only browser i have that still works with the site is Safari.

That site works for me, after allowing cloudflare scripts (including Frame ofc). Even tested clicking on a story.

[Drugwash]

[...] https://www.fanfiction.net/game/Myst-Riven/
The index page loads, but I still cannot read any of the stories.

For what it's worth I just tested a minute ago and stories do load for me, challenge is succesful.
Make sure you're not making the same mistake as I did before, having assigned a different user-agent to that domain.
cloudflare.com, challenges.cloudflare.com and cloudflareinsights.com must be allowed in any and all adblockers.
WebGL and hardware acceleration must be enabled too.
Also check if HTML5 is enabled for the domain (not sure if it matters but better be safe).

[Sessh]

Huh.. on a couple sites I run into CF on, it lets me through to the prompt and I can click the box to verify, but it just loops the check again. romhacking.net and strategywiki.org

I have the cloudflare bypass addon disabled and there's no user agents set for them in about:config. I got through to that fanfiction site without even hitting a CF check though.

[Gemmaugr]

Huh.. on a couple sites I run into CF on, it lets me through to the prompt and I can click the box to verify, but it just loops the check again. romhacking.net and strategywiki.org

Neither of these two even gives off a whiff of CF for me. No turnstile and no mention of CF in eMatrix.

[Sessh]

Nevermind figured it out.

[Sessh]

Huh.. on a couple sites I run into CF on, it lets me through to the prompt and I can click the box to verify, but it just loops the check again. romhacking.net and strategywiki.org

Neither of these two even gives off a whiff of CF for me. No turnstile and no mention of CF in eMatrix.

Yeah I had a greasemonkey script still on. I do hit CF checks on both sites though, but I didn't hit one at all on the above fanfiction site. Weird.

[flamelord]

Reporting some weird behavior.
I'm still using my old profile and don't have any anti-CF script going on in ublock.
User agent is set to Firefox compatibility.

I tried to download a translation patch off of Romhacking.net and it gave me the tickbox, I pressed on it and it looped.
No CPU spike or whatever but it looped.
However, when I refreshed the page again and it gave me the tickbox this time it worked and I was able to download it.

So I can now get past CF but it takes some work.

[BenFenner]

User agent is set to Firefox compatibility.

...

So I can now get past CF but it takes some work.

I wager things would go smoother for now with the true PM user-agent string.

[flamelord]

I wager things would go smoother for now with the true PM user-agent string.

Maybe so, but I tested 4chan now(although CF doesn't always show there anymore) it gave me CF tickbox and it worked perfectly smooth.
So I'm fine and am not messing with the user-agent thing.
Let's hope CF doesn't pull these antics anymore.

[biopsin]

Someone give me a site that wont pass the captcha. I just installed "Cloudflare WARP" and need to see if anything changes.

Also try: https://drunkenslug.com/

Tested and it loops as usual. I guess my custom build with npapi disabled, webgl diabled and other tweaks, I can basically forever forget passing this. Anyone have a list of CF protected I can test futher?