Cloudflare Verification Loop issues

[xissuesx]

it's closed........ translation: they don't give a toss about their abuse after clearly proposing to use supported browsers..
i see no other solution than simulating chrome with minimal data over tests
& a patch, a patch forced by these p...

[Moonchild]

It happened with Google Chrome killing browsers(Opera Presto Engine being a notable victim) by not abiding to accomplished web standards...

With the additional issue that most of the current "web standards" are just descriptions of "what Blink does" because almost all of them are written by Google employees as editors.

[Gemmaugr]

The locked topic is now marked as "solved".. "Solution": Just use a google chromium (and foxium) monoculture browser.

I'm wondering why the 2 misinformation spreading trolls in that thread, and their supporters, are allowed to wreak havoc without moderation stepping in? They were not helpful and spread lies to bait people having issues.

[back2themoon]

Report your problem websites 3-4 times ("The widget keeps looping"). Press Ctrl+F5 to get a different Ray ID. A simple refresh will not change the Ray ID.

Check that website 1-2 days later.

[dinosaur]

An abuse by Cloudflare, again !

I'm not a lawyer, but I wonder if we could sue their ass for trying and imposing a limited range of "compatible browsers", or for their monopoly on the web, or for their privacy threatening practices and opaque private data management (I bet many of the recent EU laws could be used for suing them).

Yet, I tried and understand why their scripts are failing again with Pale Moon, this time (here, I'm using https://janitorai.com/, but any other site with Cloudflare anti-bot measure enabled behaves the same).

The issue seems to be two-folds:

• Their scripts seem to trigger the "Content Security Policy" violation counter-measures in PM:
  CSP.png
  This can be worked around by using about:config and setting security.csp.enable to false.

• However, and once security.csp.enable set to false, and while it allows to get to the check box, you still can't get past it (the verification "freezes" after ticking the box, and after a few seconds you are sent back at the initial stage). Here is the errors I get when the check box appears:
  TypeError.png
  This hints for a "missing" feature in PM's JavaScript engine...

So, maybe this could be "solved" by implementing the missing bits that causes the "TypeError" ?

[flamelord]

It happened with Google Chrome killing browsers(Opera Presto Engine being a notable victim) by not abiding to accomplished web standards...

With the additional issue that most of the current "web standards" are just descriptions of "what Blink does" because almost all of them are written by Google employees as editors.

Yeah yeah I was there, Chrome was popular with dumb normies so that made it trivial for Google to disregard standards and fuck up everything in order to sabotage its competitors.
I was mainly a Opera user then, I held out for as long as I could using 12.18 then switched to Firefox and held on the latest pre-Proton Firefox for as long as I could, switched to Waterfox Classic(yes I'm aware it got bought out later and stuff but I liked the non-Flatshit design) and did the same thing for years and then finally I switched to Pale Moon.
Am really thankful that this browser exists and supports Win7.

I remember like 15-16 years ago you could load like 30 tabs with Opera on a 512mb RAM machine with little slowdown...and that browser was filled with all sorts of features built-in, some of which wouldn't even be available in extension form nowadays(it had built-in IRC client ffs) all that while being crazy light.

It's beyond insane how much Google has fucked up the web, browsers and how much they've held technology back.
Separately HTML5 also felt very underwhelming, it was claimed to be a revolution but Flash was more performant from an end-user perspective.

/sorry for the somewhat off-topic rant
Carry on with the Cloudflare discussion

[flamelord]

I'm wondering why the 2 misinformation spreading trolls in that thread, and their supporters, are allowed to wreak havoc without moderation stepping in? They were not helpful and spread lies to bait people having issues.

They are hired shills.
Probably jeets paid on poverty wages.

[flamelord]

• However, and once security.csp.enable set to false, and while it allows to get to the check box, you still can't get past it (the verification "freezes" after ticking the box, and after a few seconds you are sent back at the initial stage). Here is the errors I get when the check box appears:TypeError.pngThis hints for a "missing" feature in PM's JavaScript engine...

So, maybe this could be "solved" by implementing the missing bits that causes the "TypeError" ?

I can confirm this.
Got the check box but I got an error anyways after I pressed it and then it went back to looping basically.
Tried disabling the other security settings and it didn't help either.

[andyprough]

And now Sourceforge is blocked due to this nonsense. How wonderful.

2025-02-03_09-54.jpg

[Navigator]

I am going to keep using Pale Moon on every site that will let me, and I'll be pointedly reducing my use of any site that does not, but for those cases where I really want to get past this block what is the best alternative? LibreWolf?

[back2themoon]

Post your complaints here, too. Keep it civil, please.

https://sourceforge.net/p/forge/site-support/26494/

[back2themoon]

Off-topic:

Sent an email... ... to Martin Brinkmann at Ghacks.net.

I don't know what happened with Martin Brinkmann. Perhaps another "Tobin victim"? He has stopped mentioning Pale Moon altogether.

Not saying he's obliged to or anything of course, but the latest article on his new, personal website is that "You can now play Block Breaker on Google".

I've always liked his articles and since the new website "Core focus is Software, Privacy, and Security", I'd expect better.

[back2themoon]

And now Sourceforge is blocked due to this nonsense. How wonderful.

SourceForge should now work.

[moonbat]

Off-topic:

I don't know what happened with Martin Brinkmann. Perhaps another "Tobin victim"? He has stopped mentioning Pale Moon altogether.

Nothing to do with Tobin, given Martin wasn't on this forum and has his own website
He hasn't mentioned it in years; the last time I think was when Firefox extension support was dropped in 2022 and it led to a lot of complaints.

[back2themoon]

Off-topic:

Nothing to do with Tobin, given Martin wasn't on this forum and has his own website

But Tobin was on Ghacks. - In any case, it doesn't matter.

[Moonchild]

Off-topic:
There are a few possible reasons why this changed but I won't discuss them in public. Tobin isn't one of them, though.

[moonbat]

Off-topic:
He wasn't a regular there. And anyway Martin himself rarely responds to comments.

[digitalaudiorock]

And now Sourceforge is blocked due to this nonsense. How wonderful.

SourceForge should now work.

Wow. Reading that sourceforge forum thread, this as much bad news as it is good. I was hoping they might have the clout to get CF to actually fix this. Apparently sourceforge just altered their sites rules to let Palemoon though(?) but for us that fixes nothing but sourceforge.

I genuinely can't believe that CF just closed that thread on their community forum like that. I'm even more pissed that they seem totally fine with all the lying sack-of-s*** trolls that posted there, specifically because they troll on CF's side!...and this is who everyone appears to be making the official gatekeepers of the web. Welcome to the walled garden I guess. FFS.

[andyprough]

And now Sourceforge is blocked due to this nonsense. How wonderful.

SourceForge should now work.

And it does. Any idea what happened? Is Cloudflare back allowing Pale Moon across the boards again?

Edit: Just read @digitalaudiorock's post. So this was just Sourceforge dropping the check for Pale Moon?

I think I'll install Seamonkey and Falkon and a bunch of off-beat browsers and see if any of them are working with Cloudflare at all. I'm assuming most of them are not. I'll use the same sourceforge link for downloading MX Linux: https://sourceforge.net/projects/mx-lin ... o/download

Falkon - Cloudflare challenge causes endless loop behavior
Luakit (webkit browser) - Passes Cloudflare challenge successfully
Seamonkey - Cloudflare challenge causes endless loop behavior
IceCat - Cloudflare challenge causes endless loop behavior
Waterfox - Passes Cloudflare challenge successfully
Mullvad - Passes Cloudflare challenge successfully
Basilisk - Cloudflare challenge causes endless loop behavior
Browservice (running an instance of the Chromium Embedded Framework inside a Pale Moon tab) - Passes Cloudflare challenge successfully

So I'd say roughly 50% of non-mainstream browsers, and 100% of non-mainstream browsers that aren't direct forks of either chromium or Firefox, are going to fail this new Cloudflare gatekeeping regime. Although the allowance of the one webkit browser to pass is odd - Cloudflare must have special rules in place to make sure they never ever piss off the Apple Safari users.

[BenFenner]

It might help to communicate Pale Moon's native user-agent to Sourceforge, not just the Firefox-compatible one. That way they can have both "doors" open...