Cloudflare Verification Loop issues

[Sessh]

For both forum.mxlinux.org and ultimatebootcd.com, I had no issues with CF once I whitelisted the site to allow cookies and adjusted ublock/umatrix to allow CF, then close the window and re-click the link to open a fresh window, no problems passing CF prompt. Certainly does seem to be configuration issues that is giving some folks here problems.

Only difference I am seeing now vs before is that I could allow CF in ublock/umatrix and just reload the page to get the CF prompt to work, but now it seems I have to close the window once adjustments are made and reopen it fresh for the CF prompt to succeed. Minor inconvenience.

[Moonchild]

You pass cloudflare check that means clearly something went wrong...

This just feels like the attached screenshot I saved from Twitter for being so incredibly cringe generic.
"Something is technically wrong. Thanks for noticing!"
(like... how could one NOT notice when the site is unreachable?)

[Night Wing]

you understand that @NightWing? You pass cloudflare check that means clearly something went wrong...

Maybe I can pass the CF checks with my linux Pale Moon where others cannot is because I have............."The Golden Touch".

On a serious side. I do not change things much in my Pale Moon settings which would trigger CF when I visit sites. And when it comes to using my uBlock Origin 1.16.6.1 extension, I am using the default settings in there. I do "not" tinker with the settings in UBO.

And if you look closely at my screenshots I post, look at the last one showing the Ultimate Bookmark CD. You can clearly see at the top right of the screenshot, the uBlock Origin red colored logo is turned "on".

This is the reason why I post many screenshots of sites where you and many others on here are having serious problems getting to the sites in question.

[BenFenner]

I had no issues with CF once I whitelisted the site to allow cookies and adjusted ublock/umatrix to allow CF

Not sure why we should be expected to put up with this. I am a legitimate, human vistor of a web site. I should be able to visit that web site. Cloudflare allowlisted or not.

Someone needs to explain the concept of a false positive to Cloudflare. They claim to be able to handle this situation in their marketing (differentiate between bot versus human), but obviously they cannot.

They are already a man-in-the middle. They can use that instead.

[back2themoon]

Created just now a brand new test profile. Zero extensions and zero Pale Moon settings changes.

Tested 5-6 websites. They all passed the test the same way: in about 15 seconds, in the first attempt. I did not notice any Ray ID refresh. This is a significant improvement over my previous experiences.

So, this might prove something. I cannot say what though. Cloudflare needs to be more specific. Disable content blockers, how? Where? On all websites using the Turnstile? Not going to happen, and I doubt this is the case with other browsers i.e. forcing those users to disable extensions. Is it HTTP Referers? Pale Moon's "Poison canvas data" setting? All of this and more? It's not our job to find out. We are not the ones blocking Web access.

More details and clarity are needed. Also, I could've just been lucky or perhaps Cloudflare made very recent (undocumented, as usual) changes and my test proves nothing. Indeed, I went back to my default profile with all extensions enabled, tested 2-3 different websites and they behaved exactly as above i.e. much better.

In any case, "something in the user's setup is blocking our requests" and "I'd recommend having them test with extensions disabled to rule that out." is not good enough. They need to test and they need to report back as well. I really don't want to start restarting the router to get a different IP for further testing.

[back2themoon]

Ok, sorry for the double post. About this:

Indeed, I went back to my default profile with all extensions enabled, tested 2-3 different websites and they behaved exactly as above i.e. much better.

After some further testing:

a) It does look like this occurred because I had already visited those websites. So, in some way the Turnstile remembered me and made my life easier. I did get the longer, sluggish treatment on never-before visited websites.

b) The Turnstile indeed does work better on a clean profile. It remains noticeably slower than on mainstream browsers, but at least I wasn't counting minutes.

These are not "scientific tests". They prove nothing. Just my personal, careful experiences.

[Kand_in_Sky]

Twitter
"Something is technically wrong. Thanks for noticing!"

slightly OT
Which means mostly Twitter/X is over capacity, and for better experience the addon OldTweetDeck (Chrome/FF) is a musthave
https://github.com/dimdenGD/OldTweetDeck/

[back2themoon]

Don't know about you, but at the moment it behaves much better for me, everywhere. It's done in about 15 seconds on my old SSE2 PC, with no refreshes and renewed Ray IDs.

The only change I made on my end is allowing HTTP Referers from everywhere to *challenges.cloudflare.com/* but I doubt that's what made the difference. Perhaps someone actually worked on it?

[Moonchild]

Perhaps someone actually worked on it?

I would hope so. It's been a crapshoot since Easter.

[Kand_in_Sky]

It's friday! A nice weekend to everyone!
Hopefully nothing goes wrong

cleanprofile.png

[tellu-white]

It still doesn't work for me. I ran a new test with https://www.portablefreeware.com/ and even after 6 minutes, Pale Moon Portable (fresh install) didn't pass the Cloudflare check. In the meantime, the "Ray ID" reseted several times.

I ran another test with Firefox, and in this case the Cloudflare check was successfully passed after 10 seconds.

Both Pale Moon and Firefox are 32-bit versions, and my operating system is Windows 7 - 32-bit.

Screenshots:

01.png

02.png

03.png

04.png

05.png

06.png

07.png

[Gemmaugr]

So, to recap, Biopsin on Linux had to enable Performance Observer and got it working.

The three left are all on Win 7.

32 or 64-bit don't seem to matter, and the only one posting full troubleshooting information was Kand.

It seems to work with a "supported browser" on Win 7..

[Sessh]

FWIW, I am using Pale Moon 64-bit on Win7 with no issues.

[back2themoon]

In the meantime, the "Ray ID" reseted several times.

I hope you are sending all those Ray IDs to Moonchild!

[Kris_88]

It seems that even MS Edge in Windows 8.1 doesn't pass the test now.
For example:
https://www.duino.lk/Related-Accessorie ... splay-Blue

I don't know who Cloudflare is protecting or from what... I get the impression their only goal is to waste my time and fry my CPU.
I've decided to simply avoid websites with this "so-called protection".
Luckily, I can always find the information I need on other sites.

[Night Wing]

@ Kris_88

I clicked on the link you provided. Got the CF challenge. I waited about three seconds and then clicked on the box to put a check mark in it. Waited about another three seconds and the site's page loaded using my 64 bit (GTK2) linux Pale Moon.

[back2themoon]

It seems consistent for people having problems when using Pale Moon on older, unsupported (by Microsoft) OSes like 7 and 8.1. Other browsers seem less affected - if at all.

Perhaps this deserves a question to pass on to Cloudflare?

[tellu-white]

Kris_88 wrote:
It seems that even MS Edge in Windows 8.1 doesn't pass the test now.
For example:
https://www.duino.lk/Related-Accessorie ... splay-Blue

https://forum.palemoon.org/viewtopic.php?f=3&t=32045&start=960#p273775

The Cloudflare check doesn't work for me in Pale Moon either (on Windows 7 - 32-bit). However, the Cloudflare check worked in Firefox 115 - 32-bit, so I was able to open the page in Pale Moon using the add-on "Bypass Cloudflare with Backup Browser Cookies".

Night Wing wrote:
@ Kris_88
I clicked on the link you provided. Got the CF challenge. I waited about three seconds and then clicked on the box to put a check mark in it. Waited about another three seconds and the site's page loaded using my 64 bit (GTK2) linux Pale Moon.

https://forum.palemoon.org/viewtopic.php?f=3&t=32045&start=960#p273778

I'm excited to hear from you about yet another victory among the many you've achieved in your countless battles with Cloudflare checks

[Kris_88]

It's quite obvious that their technology doesn't check whether I'm a bot or not. The only achievable goal is to delay a user's access to the site for a random amount of time. If I really needed a bot, I'd build it from the latest source code of some popular browser, and it would obviously pass Cloudflare's checks. So, for an attacker, this wouldn't be a serious problem. But for regular users, it is.

And, by the way, I have absolutely no doubt that Cloudflare is well aware of all the problems with their scripts, and there's no point in notifying them, reporting Ray ID, complaining, etc. They know everything perfectly well. It just works exactly as intended.

And yes, this isn't just my problem as a user, but more of a problem for the website owners who use this technology. I simply won't visit their sites, look at their ads, or buy anything from them. Thank goodness, there are plenty of online stores, and I can find the information I need elsewhere.

[Night Wing]

I'm excited to hear from you about yet another victory among the many you've achieved in your countless battles with Cloudflare checks

I know some people are saying CF is a royal pain using older computers while also using Pale Moon. But of the three 14" laptop computers I own, two of them are from the year 2012. This makes them both 14 years old. Both also came with 64 bit motherboards.

One is a 14", HP dv4-5113cl model and the other is a 14", HP dv4-5213cl. And both of them can pass the CF challenge too. They both have the same Intel i5 processors in them (Intel Core i5-3210M) with a processor speed of 2.50 along with 16 GB of memory in each one. One originally came with Windows 7 (5113cl) and the other originally came with Windows 8 (5213cl).

They both can handle AVX and I think this has a lot to do with it when using Pale Moon and Pale Moon encounters a site that has a contract with CF. Just a guess on my part. These two laptops are my traveling laptops. My two main computers I use everyday are my two desktop tower computers.