Cloudflare Verification Loop issues

[BenFenner]

Off-topic:

Endless loop
Ray ID: 9f72103bbab51626
https://imginn.com/sydney_sweeney/

Worked for me. (But potentially still useful info for the CF folks to see a Ray ID that works in this situation.)
Ray ID: 9f7260dc2bb2d644

Edit: I see the post below and will halt reporting any successes.

[Moonchild]

No, they specifically asked for Ray IDs of challenges that have problems. No need to post ones that pass on production.
If you want you can also PM me if you don't want to post the URL and ID publicly.

[BenFenner]

https://imginn.com/sydney_sweeney
Ray ID: 9f742763dda7d65d

"Incompatible browser extension or network configuration" error (HTTP status code 403).

After 10 seconds an XHR request tries again. After another 10 seconds the page reloads, giving a new Ray ID. This repeats forever.

[Kinomoto-san]

Here is what "works" for me to access CF protected pages (ie: https://imginn.com/sydney_sweeney/):


I run Windows 10 64-bits on a Core I5-3360M laptop with the latest version of PM (and no script block or user agent add-ons installed):

1st: Delete all cookies for the affected page that starts with "cf_";

2nd: Type the URL in the address bar and hit "Enter" on the keyboard;

3rd: Wait until the ''Stuck? Troubleshoot'' message appears than wait for PM to become responsive again (if the message do not appears just go to the next step after PM becomes responsive again);

4th: Highlight the URL in the address bar and hit "Enter" on the keyboard (do not use the "Reload current page" button);

5th: With luck, the next CF challenge will show the "Verify you are human" checkbox after PM becomes responsive again (if not keep repeating the 3rd and 4th steps until the checkbox shows up);

6th: You are successfully verified and redirected to the desired page.


PS: You might need to repeat the 3rd and 4th steps several times (it usually works on the 3rd or 4th try). Works for my setup. I do not know for others. This is not an elegant workaround, but it allowed me to access the desired page.

[Sessh]

I can get to the sydney sweeney imginn page without a prompt.

[Night Wing]

I can get to the sydney sweeney imginn page without a prompt.

I can also keep do that now without the CF turnstile showing up.

[frostknight]

Okay. you can go cool your heels and clear your head. see you in a week.

I saw this coming and tried to warn him.

I guess emotions are hard things to hold back...

[Kand_in_Sky]

Endless loop
Ray ID: 9f72103bbab51626
https://imginn.com/sydney_sweeney/

IMGINN is (for now?) without cloudscam,
maybe it has to do with the DNS problems, as said here https://xcancel.com/dok2001/status/2051780920982528488

anyway, the ride continues

endless loop
Ray ID: 9f75438bdafccb19
https://forum.mxlinux.org/

[Night Wing]

anyway, the ride continues

endless loop
Ray ID: 9f75438bdafccb19
https://forum.mxlinux.org/

The ride may continue for you, but it does not for me. After clicking on the link you provided, thanks for that, I went straight to the site without ever encountering the CF turnstile (or whatever they call it). Time it took to get there was less than a second of time.

The MX Linux Forum site is one I visit everyday and on multiple times everyday because MX Linux is my daily driver linux distro I use. At the time of this post, I am using 64 bit (GTK2) linux Pale Moon 34.2.2 running in 64 bit MX Linux 25.1 (Infinity) Xfce.

The only two extensions I have installed in my Pale Moon is uBlock Origin 1.16.6.1 and Zoom Label (1.3) Screenshot/attachment is below. Also note the time I made the screenshot which you can see on the right side of the page under the Board Index toolbar.

[biopsin]

I received a reply finally. They are asking for more information on production that causes issues.

Please let me know the ray IDs of tests that fail, result in a loop, or hang exceptionally long times. Let me know the URL, exact behavior observed, and the ray ID, so I can give them a report of instances that fail.

Endless loop
Ray ID: 9f72103bbab51626
https://imginn.com/sydney_sweeney/

Ok it passes after enabling those observers...

[BenFenner]

endless loop
Ray ID: 9f75438bdafccb19
https://forum.mxlinux.org/

https://forum.mxlinux.org
Ray ID: 9f77ecddc86420b2

"Incompatible browser extension or network configuration" error (HTTP status code 403).

After 10 seconds an XHR request tries again. After another 10 seconds the page reloads, giving a new Ray ID. This repeats forever.

[back2themoon]

https://forum.mxlinux.org/

Took its time here as usual, but ultimately succeeded.

Ray ID: 9f77f3adcb9a6f67 - initial attempt, followed by an auto-refresh.
Ray ID: 9f77f5733ca76f67 - second attempt, second page auto-reload.
Ray ID: 9f77f73f6b436f67 - third, successful attempt (with the mouse click)

Moonchild, please consider asking them:

a) Does the Turnstile require 3p cookie access/permission?
b) Is it affected if the user switches to another tab, or to another program?

I have a feeling that it works better if the "Verifying..." tab stays focused/active the entire time.

[Moonchild]

That may be useful. I've sent it (and the questions) to them as another data point.

[back2themoon]

Forgot to mention that I block 3p cookies (via eMatrix, not Pale Moon Preferences) and the Turnstile still succeeds, whether quickly or extremely sluggishly.

So it's clearly not mandatory, but since the 3p cookie request from challenges.cloudflare.com is always present, it's probably worth asking.

[Kand_in_Sky]

I went straight to the site without ever encountering the CF turnstile (or whatever they call it). Time it took to get there was less than a second of time.

The MX Linux Forum site is one I visit everyday

Maybe that's why, try this
http://ultimatebootcd.com/


btw, new reports:
endless loop on Win7 + PM 34.2.2 (64 bit)
Ray ID: 9f79577d1a05c7e4
http://ultimatebootcd.com/

successful check on Win10 with PM 34.4.0 (64 bit, AVX2)
Ray ID: 9f7959910e90717e
http://ultimatebootcd.com/


both PC same IP,
both PC connected viel LAN cable to the same router (fritz.box),
DSL connection

[Night Wing]

Maybe that's why, try this
http://ultimatebootcd.com/

I had to run a few errands this morning and now I am back.

I have never visited this UltimateBoot site before. So I clicked on the link you wanted me to try. Well, the result (attachment below) speaks for itself with me using 64 bit linux (GTK2) Pale Moon 34.2.2 on MX Linux 25.1 (Infinity) Xfce.

[BenFenner]

http://ultimatebootcd.com

Ray ID: 9f79cb07d8ccbd43
"Verifying..." for 20+ seconds.
Page auto-refreshed.

Ray ID: 9f79ccc0ba2ac17a
[ ] Verify you are human checkbox presented.
Checked box, Verification successful. Requested page displayed.


This is absolute madness just to visit a web site.

[back2themoon]

http://ultimatebootcd.com
This is absolute madness just to visit a web site.

Same as above, two attempts. (Personal, confirmed record is: 3 attempts - could be 4, but wasn't counting at the time.)

Ray ID: 9f7a0711180d6f38 (first attempt, lengthy loop + auto-refresh)
Ray ID: 9f7a08b5ca6d5ef7 (second attempt, shorter loop + mouse click = "success").

[Moonchild]

Thanks for the additional reports. I'm actually having an e-mail back and forth right now with CF about this.

CF stated the following (relaying this here as it is their request to rule some things out)

We looked into them and they're showing load errors (something in the user's setup is blocking our requests before they execute). This is typically caused by content blockers like uBlock Origin, uMatrix, etc. If users are seeing hangs followed by successful solves with manual interaction, I'd recommend having them test with extensions disabled to rule that out.

I indicated that isn't the case, that it happens on a clean profile and with my adblocker disabled and with specific rules to whitelist CF challenges, so it's effectively ruling that out. I also indicated the odd behaviour of Win 7 vs Win 10 on the same LAN/IP/etc.

Other than that, CF's troubleshooter is apparently hanging because of CSP but I've thus far not been given any specific details about what in our CSP is causing these hangs, despite me asking numerous times. Only the painfully obvious "something goes wrong on Goanna that we're not seeing on Blink/Gecko" (yes I was literally told "something"... no indication where to even look; do they even know?)-- what do they expect us to do... start making random changes as shots in the dark, until morale improves? Not how that works.
CSP is pretty straight-forward and they can give me a description if nothing else. They send a policy to use and expect certain behaviour as a result. If our (IMO spec compliant) implementation is behaving differently than what they expect, then what we need is (1) the CSP policy sent, (2) what behaviour they expect, and (3) what they see, instead. But getting that straightforward information out of them is proving about as difficult as extracting a bad tooth from a crocodile.

[Kand_in_Sky]

Only the painfully obvious "something goes wrong on Goanna that we're not seeing on Blink/Gecko"

eh, that's why there are PM users where CF check works and some where it fails; this is all cause of something goes wrong
thank for all the hard work dealing with them @Moonchild

you understand that @NightWing? You pass cloudflare check that means clearly something went wrong...