Cloudflare Verification Loop issues

Post by **Gemmaugr** » 2026-06-03, 08:37

Sessh wrote: ↑
2026-06-03, 01:39
Just saw this and figured it was relevant. I wonder if CF is gonna make a bunch of changes soon to mess things up again for us... but they're not having a good time if bots can now solve CF challenges.

Could be the reason we've seen in increase in sites gated by cloudflare these last months. Though people have been able to bypass these even before, like moterhaker and feder cr.. ..

It will be .."interesting".. to see what CF does, with their downsized crew and reliance on AI now. I really hope it doesn't come to Digital ID/Age Verification stuff!

I'm sure a few crafty people know of some ways to mitigate against bots. I think MC has even stated as much.

jouven · Post by **jouven** » 2026-06-03, 12:12

Sessh wrote: ↑
2026-06-03, 01:39
Just saw this and figured it was relevant. I wonder if CF is gonna make a bunch of changes soon to mess things up again for us... but they're not having a good time if bots can now solve CF challenges.

Clipboard01.jpg

They need to constantly scrap the rpcs3 website to build "another AI slop chatbot" right?, oh wait but then the story changes to DDos. If you can't see what's going after reading the last paragraph... you might need a course on propaganda.

Sessh · Post by **Sessh** » 2026-06-04, 14:17

Well, go on then. Bots aggressively scraping websites can cause what is perceived as a DDoS. Also they thank CF for their systools... which are failing to stop 75% of bot traffic, so not sure that's a good promo or advertisement for their services if that's what you're getting at. Not like TenCent doesn't do this stuff.

UCyborg · Post by **UCyborg** » 2026-06-18, 21:27

Can anyone access https://windowsreport.com/? Doesn't even want to check the browser, just blocks it...

back2themoon · Post by **back2themoon** » 2026-06-18, 21:39

Yes, went right in with no CF check.

UCyborg · Post by **UCyborg** » 2026-06-18, 22:27

Presumably you don't use native user agent?

Post by **Gemmaugr** » 2026-06-19, 00:03

I use Native user-agent and still get blocked by WindowsReport. Have been for a long time. I'm pretty sure I made a post about it before.

Yup. Found it: https://forum.palemoon.org/viewtopic.ph ... 23#p274806

back2themoon · Post by **back2themoon** » 2026-06-19, 07:13

UCyborg wrote: ↑
2026-06-18, 22:27
Presumably you don't use native user agent?

Correct, I use the default.

UCyborg · Post by **UCyborg** » 2026-06-19, 08:56

Guess I'll just add an override and call it a day then.

Post by **Moonchild** » 2026-06-19, 09:59

UCyborg wrote: ↑
2026-06-19, 08:56
Guess I'll just add an override and call it a day then.

That's what you sign up for when going Native. You'll have more work adding Site-Specific UA Overrides.

UCyborg · Post by **UCyborg** » 2026-06-19, 10:34

There aren't a whole lot of sites that I visit and such incidents are relatively rare. So I just advertise Native one when possible and going with an override otherwise.

back2themoon · Post by **back2themoon** » 2026-06-19, 11:21

I always assumed that Pale Moon would become more "noticeable", if all users applied the same setting i.e. the current default. Wouldn't picking Native/Gecko lead to even more user agent "fragmentation"?

I have tried Native in the past, and I'd certainly prefer to keep it that way "ideologically", but further compatibility issues is the last thing I need...

UCyborg · Post by **UCyborg** » 2026-06-19, 12:10

When I made that decision, for the sites that I personally visited, it seemed more likely that them seeing "Firefox" would break them rather than the other way around because they then assumed Firefox features that Pale Moon lacked. And I have one site that requires specific Firefox version for it to work in Pale Moon.

Seeing there would be issues either way, I just default to "the right" way and make exceptions otherwise. But if you want to "blend in", you don't want "PaleMoon" at all in user agent. But then, who knows how many other factors are there that make it stick out like a sore thumb.

blue_dragon · Post by **blue_dragon** » 2026-07-13, 04:53

they made the Cloudflare verification hang on Pale Moon once again. it hangs forever & requires me to force restart

i wish there was a law to send all the web developers who dont care about Pale Moon to prison

Post by **andyprough** » 2026-07-13, 06:02

blue_dragon wrote: ↑
2026-07-13, 04:53
they made the Cloudflare verification hang on Pale Moon once again. it hangs forever & requires me to force restart

Force restart your computer?? Which website? When was this?

blue_dragon · Post by **blue_dragon** » 2026-07-13, 06:27

andyprough wrote: ↑
2026-07-13, 06:02

blue_dragon wrote: ↑
2026-07-13, 04:53
they made the Cloudflare verification hang on Pale Moon once again. it hangs forever & requires me to force restart
Force restart your computer?? Which website? When was this?

force restart the browser. also setting security.csp.enable to false prevents the loop but verification still fails thanks to all those subhuman developers waste of oxygen worse than a mosquito working in Cloudflare inc

i hope Cloudflare gets bankrupt so this situation never happens again. the world will be a much better place without them anyways

patrick-g · Post by **patrick-g** » 2026-07-13, 06:49

Hi,

I confirm, every site protected by CloudFlare hangs with Pale Moon and Basilisk since this morning.
The "I'm human" check box doesn't appear and the spinning test restart again and again.
The browser UI is completely frozen except during a very brief moment when the test restart.
No change in browser since yesterday when it worked, in the case of Basilisk it's even the same session (I don't shut it down since yesterday morning).

Pale Moon info :

Basilisk Info :

KlarkKentThe3rd · Post by **KlarkKentThe3rd** » 2026-07-13, 07:03

The problem is back again for me. No forced restart required, Cloudflare just doesn't work. I can close the tab just fine.

Problem was not there yesterday.

blue_dragon · Post by **blue_dragon** » 2026-07-13, 07:07

the funny thing is that the hanging issue is because eval was blocked because of CSP, so disabling CSP fixes the hanging (but verification still fails)

but when eval is blocked because of csp, it keeps bloating the RAM over 200 MB (when high_water_mark=128) or even over 2GB (when high_water_mark=3072) which truely proves that the web devs in Cloudflare are truely world top idiots that doesnt even know how to handle very basic errors properly

blue_dragon · Post by **blue_dragon** » 2026-07-13, 07:16

KlarkKentThe3rd wrote: ↑
2026-07-13, 07:03
The problem is back again for me. No forced restart required, Cloudflare just doesn't work. I can close the tab just fine.

Problem was not there yesterday.

can you send some feedback to https://challenges.cloudflare.com/cdn-c ... to/failure ?

when i try i get "An unknown error occurred. Please try again later." does those mosquitos seriously dont even want to get any feedback?

Pale Moon forum

Cloudflare Verification Loop issues

Re: Cloudflare Verification Loop issues

Re: Cloudflare Verification Loop issues

Re: Cloudflare Verification Loop issues

Re: Cloudflare Verification Loop issues

Re: Cloudflare Verification Loop issues

Re: Cloudflare Verification Loop issues

Re: Cloudflare Verification Loop issues

Re: Cloudflare Verification Loop issues

Re: Cloudflare Verification Loop issues

Re: Cloudflare Verification Loop issues

Re: Cloudflare Verification Loop issues

Re: Cloudflare Verification Loop issues

Re: Cloudflare Verification Loop issues

Re: Cloudflare Verification Loop issues

Re: Cloudflare Verification Loop issues

Re: Cloudflare Verification Loop issues

Re: Cloudflare Verification Loop issues

Re: Cloudflare Verification Loop issues

Re: Cloudflare Verification Loop issues

Re: Cloudflare Verification Loop issues