Cloudflare Verification Loop issues

[j_ds_au]

https://account.jagex.com/oauth2/auth causes Pale Moon to freeze for some 10 seconds and then crash to desktop. Alternatively, it can crash to desktop instantly. Same for everyone?

Using 32bit Pale Moon on 64bit Win 10 LTSC 2019

Same here for all sites that redirect to challenges.cloudflare.com.

Dumb question, but would it be feasible to create a dummy site and redirect requests to 'challenges.cloudflare.com' to this, via a 'hosts' file entry?

Joe.

[Moonchild]

Dumb question, but would it be feasible to create a dummy site and redirect requests to 'challenges.cloudflare.com' to this, via a 'hosts' file entry?

Absolutely, or just block it in your adblocker as some have already done. Note that while this will stop the malicious scripting from hanging your browser, you won't get access to the "protected" website.

[j_ds_au]

Dumb question, but would it be feasible to create a dummy site and redirect requests to 'challenges.cloudflare.com' to this, via a 'hosts' file entry?

Absolutely, or just block it in your adblocker as some have already done. Note that while this will stop the malicious scripting from hanging your browser, you won't get access to the "protected" website.

Thanks MC, but that's not quite what I meant. I meant would it be possible to create a site that could substitute the captcha requests for 'challenges.cloudflare.com', to make sites work again? Effectively, spoofing CF.

Joe.

[cannonmc]

Using Win7 and PM33.6

Last night went to a site I use three or four times a day https://nitter.poast.org/
and got this:

nitter forbid.JPG

Went to their status page https://github.com/zedeus/nitter/wiki/Instances and got this:

nitter cf.JPG

The Cloudflare links would not open in any browser I have, even the one that still allows my other link using an older copy of Edge.

I'm not sure they realise what they have done but they are a difficult organisation to contact

An alternative still works in PM https://xcancel.com/....for now

PS tried nitter.net but it doesn't play inline links

[back2themoon]

Try the "Bypass Cloudflare with Firefox Cookies" extension. Latest version is linked here:

viewtopic.php?f=71&t=32098&start=40#p260064

[therube]

@cannonmc, you can bypass that messsage simply by spoofing your UserAgent string.

I simple set the UA to "hi there" (meaningless, but effective).
And with that, instead of the message, I got a (virtually) black screen (that I can't read for nothing!) & a what seems to be a login box.


(After that, no clue, but a UA change got me at least that far.)

[flamelord]

Using Win7 and PM33.6

Last night went to a site I use three or four times a day https://nitter.poast.org/
and got this:

nitter forbid.JPG

Went to their status page https://github.com/zedeus/nitter/wiki/Instances and got this:

nitter cf.JPG

The Cloudflare links would not open in any browser I have, even the one that still allows my other link using an older copy of Edge.

I'm not sure they realise what they have done but they are a difficult organisation to contact

An alternative still works in PM https://xcancel.com/....for now

PS tried nitter.net but it doesn't play inline links

xcancel is way better than poast anyhow
You should be using that

[cannonmc]

xcancel is way better than poast anyhow
You should be using that

I am now. Had a fun morning going round in circles while I changed all my links. But thank you My Bookmarks add-on. Great help.

Odd Opera event. One link got past Cloudflare and let me in. Another didn't. The only plus I can see with Opera is its built-in VPN for times when a site is blocked from UK.

back2themoon said:

Try the "Bypass Cloudflare with Firefox Cookies" extension

Call me thick but didn't understand whether that was a PM or FF add-on

[back2themoon]

It's a Pale Moon extension. On Firefox, you only have to manually create a bookmark.

[flamelord]

back2themoon would this extension allow me to post on 4chan?
I looked at the instructions and it seemed too confusing/involved for me
Is there a chance this extension will become more automatic in the near future for dummies like me?

[back2themoon]

4chan: No idea, never used it. It doesn't seem to require a Cloudflare check and I don't see a login option to test. If that site is affected by this particular Cloudflare issue, then the extension will probably help. If 4chan has a different issue, then it won't help.

Instructions: they seem confusing/involved, but they are not. It takes less than 5 minutes to setup. I assume you haven't tried?

Full-auto-magic operation: I am not making the extension, but don't hold your breath for that. It's easy enough as it is, don't expect miracles. Follow the instructions and you'll be fine. Ask in the extension topic if you have specific questions about it.

[Mike_Walsh]

Seems to me the reason for all this is fairly obvious. I reckon the reason this works for Chromium-based browsers, etc, is probably because CloudFlare are either in bed with Google.....or they're being 'paid-off' by them.

Perhaps a too-obvious, and too-simplistic explanation for some here, but that's my view.

I confess - as another regular Opera user - unlike cannonmc, I haven't as yet had any 'refusals' from CloudFlare when using that browser. (Nor with Chrome, Chromium, Iron, Slimjet, Vivaldi.....I think y'all get the picture).

Generally, 'zilla-based browsers aren't my primary choice, but I've always liked Pale Moon.It's a fast, lightweight, very 'zippy' browser for day-to-day use that just gets the job done. Current issue notwithstanding, it "does what it says on the tin".

Works for me (99.99% of the time). All credit to the team here.


Mike.

[flamelord]

4chan: No idea, never used it. It doesn't seem to require a Cloudflare check and I don't see a login option to test. If that site is affected by this particular Cloudflare issue, then the extension will probably help. If 4chan has a different issue, then it won't help.

Instructions: they seem confusing/involved, but they are not. It takes less than 5 minutes to setup. I assume you haven't tried?

Full-auto-magic operation: I am not making the extension, but don't hold your breath for that. It's easy enough as it is, don't expect miracles. Follow the instructions and you'll be fine. Ask in the extension topic if you have specific questions about it.

4chan doesn't require login. You just go into a thread and post. They do have a 15 minute timer first time you post that you can bypass with an e-mail address(because the dumb owner is doing dumb stuff) but you don't need to log-in. You don't even need to get your post through to confirm it, you just have to try to post to see if you can get past cloudflare since you have to get past cloudflare for the timer to even start.

Alternatively you can just go to https://sys.4chan.org/captcha to test it.

Well it does seem complex and requiring Firefox cookies seems like a pain in the ass. I'm on Windows 7 too so I would probably have to track the latest build that supported Windows 7.
But thanks for the work anyways.

[back2themoon]

Tried posting but I got an hCaptcha instead, which didn't even work.

That direct link is unusual (i.e. not a standard page), but I think the extension worked. After importing the cookie, I got to the page below (no Cloudflare check) which seems to be the intended result. The user agent was successfully imported (this is done automatically by the extension).

captcha.png

edit: Extension should also work with Waterfox (Classic or whatever it's named). Check the specific thread, can't help you more.

[xlolitadabananax]

Hi Back2themoon, i donno what bypass cloudflare with firefox cookies for palemoon does,
but it does nothing to bypass forced cloudflare before login page should appear
on feabie.com
& i still see cloudflare appearing..

[back2themoon]

You are meant to pass the check AND login in Firefox first, and only then import the cookie by using the extension in Pale Moon. Read the instructions carefully.

Talk about the extension belongs in the extension topic...

[xlolitadabananax]

since your xpi was given on this topic i don't know where the instructions are..
i already installed the xpi on palemoon & loged in firefox, i had to install firefox,
never thought i'd need it again ((

i also saw an option on firefox, if this addon exists for palemoon, it'd be awesome,
so i could just login in chrome & use the site in palemoon, after having imported
passwords only from palemoon with a new addon offering a simple toolbar button to import
the chrome cookie & eventually convert it for use in palemoon ..

[xlolitadabananax]

i saw a toolbar icon for the new xpi.. & added it to the toolbar, it says: Enter url / open url, i added the urls homepage & nothing happens..

[cartel]

Code: Select all

https://www.dignitymemorial.com/en-ca/obituaries/nashua-nh/elaine-levesque-11207521?__cf_chl_rt_tk=odoUAm3aDtTBpfeoTwf09VTLm2XQ2zRGJ8RVFpEQEiU-1740703548-1.0.1.1-aWokGmhgpHdFzKnb7F8UISMCDg4BsTp3T1oBFRrzBow

Code: Select all

https://www.dignitymemorial.com/en-ca/obituaries/nashua-nh/elaine-levesque-11207521

for some reason google is adding this crap to the links in search results

Code: Select all

href="/url?q=https://forums.hfboards.com/threads/raw-and-smackdown-part-4-the-paul-levesque-era.2963071/post-196369315&sa=U&ved=2ahUKEwia2Iivk-WLAxXAlK8BHdoSAGoQFnoECAoQAg&usg=AOvVaw2S2noBNlPTwKhFjE8kOyay"

then if I right click on the link to try and copy it, it changes to a regular link...

this is whats going on I think:
https://stackoverflow.com/questions/763 ... g-htaccess

anyways, that first link crashes the browser instantly, the whole thing, gone.
wtf


this "&sa=U&ved=" crap seems new to me not sure what thats all about

google chrome has that data a different way instead of one big link, it calls it a ping:

Code: Select all

ping="/url?sa=t&source=web&rct=j&opi=89978449&url=https://www.eham.net/article&ved=2ahUKEwjPmMqwmeWLAxVeOjQIHSP3F-UQjBB6BAgPEAE"

https://files.catbox.moe/1j2t5s.wmv

edit**
I see that because I need to use a old user agent because google image search it broken due to the "scroll listener" thing, this "light" image search adds the "&sa=U&ved=" crap where the non light version (thats broken) does not.
I dont know, I got so much other shit to stress out over, I dont need this on top of it

[xlolitadabananax]

looks like the end of palemoon. i even tried to paste cookies files from firefox to palemoon & after a certain period, it turns the logged state to logged off. & also tried to force cloudfare to open simple profiles. time to abandon pm for a lil while & if no serious fix is found, ill eventually uninstall it for good. cause retarded cloudfare won in messing up with systems & ppl, & i dont have time to waste on this endlessly.