Cloudflair is making it extra difficult to login, stay logged in, and sumbit to Saidit today

submitted by SoCo from self.censorship

(title says it all)

all 10 comments
sorted by:
top
newinsightfulfun

[–]LarrySwinger2 3 insightful - 1 fun3 insightful - 0 fun4 insightful - 1 fun -  (4 children)

Not censorship, it's really a side effect of protecting the site from DDOSes. But here's what you do: you go to https://saidit.net/login.compact. There is no cloudflare on that page. You can't log in from that page, it will probably give a 403 error if you try. But loading that page started a browser session. Now you can remove .compact from the URL and cloudflare will let you go through, then you can log in.

(By the way, the idea that this works because a browser session is established is just something I'm inferring, so if anyone could confirm that this description is technically correct, that'd be nice.)

Oh, and you can also enable cookies in your browser. So long as you keep cross-site cookies disabled, your privacy should be kept intact. Or you can keep them disabled entirely but add Saidit to your whitelist.

[–]SoCo[S] 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (3 children)

I'll give that a try next time I start a session.

It is mostly angry at me for using Tor and very strict browser restrictions, but due to that, I notice when things tighten up, as they seem to have done recently. It is hard to nail down specifically, as it seems to be hit or miss based on my exit node and its location.

[–]LarrySwinger2 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (2 children)

Actually, I retried the above method and discovered that it doesn't work these days. They're throttling pretty heavily and I don't think there's much we can do except wait. (It's only by chance I managed to log in in this instance.) An alternative is to use a VPN and log in with a different browser, I recommend Librewolf. You can use an in-browser VPN as well, just go to https://addons.mozilla.org and search for VPN (it should be noted that these are often simply proxies and don't encrypt the connection, and you should double-check that DNS lookups aren't leaking your IP address).

If you insist on using Tor, here's something you could try, although I'm not sure if it works. Go to Tor Browser settings, Privacy & security, scroll down and uncheck "Query OCSP responder servers...", then install an in-browser VPN inside that browser. I believe this will establish an ISP -> Tor -> VPN connection. This is less secure than simply using Tor and the Tor project advices against it, but it's a way to bypass Cloudflare. Do let me know if it works in case you try it.

[–]SoCo[S] 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (1 child)

I couldn't get it to work either.

I've narrowed it down to Cloud Flair not working, when I have extract canvas information enabled, presumably because the specific canvas actions are being blocked. When I completely disable canvas snooping, Cloud Flair throws its hands up and opens the spy-button, which is an iframe that says "verify I am human" or something.

No entrance allowed unless you are de-anonymized...

I can't think of specific technical reasons, but I would suggest that using a VPN with Tor in that way. I'm pretty sure it would make you a ton less secure and doing so with OCSP disable, would open you to man in the middle attacks by both the VPN and the Tor exit node. It really is a really bad privacy and security mess to go that approach.

Yet, you fix hides your Tor exit node from Cloudflare, which is likely getting a super bad trust score from Cloudflare for being Tor.

You cannot bypass Clouflare, ever, they are the DNS provider. Your approach simply makes your IP look a little less risky and Cloudflare doesn't so loudly shake you down.

[–]LarrySwinger2 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (0 children)

Yet, you fix hides your Tor exit node from Cloudflare, which is likely getting a super bad trust score from Cloudflare for being Tor.

You cannot bypass Clouflare, ever, they are the DNS provider. Your approach simply makes your IP look a little less risky and Cloudflare doesn't so loudly shake you down.

Cloudflare doesn't intentionally block Tor nodes, that's just a consequence of their throttling. They've been making the web more accessible for Tor users for years, and although we aren't there yet (Privacy Pass still doesn't seem to function), the web is more much usable than it was 5 years ago.

Anyway, it's very rare that I have trouble accessing websites via a simple browser VPN.

Thanks for emphasizing the risk of disabling validity checks. I knew it was a risk, but needed a workaround. Perhaps FoxyProxy is better for this but I don't know if it will work in Tor Browser.

[–]Vulptex 2 insightful - 2 fun2 insightful - 1 fun3 insightful - 2 fun -  (0 children)

I've been noticing this for the past week or two. At times I'm almost always completely blocked from the site, and the few times I'm not I get "page not found" for the login page, and it's gone from the sidebar. It takes me many reloads before I'm finally able to log in. It doesn't happen all the time, but it's a lot more common than it was.

[–]agent_pecan 2 insightful - 2 fun2 insightful - 1 fun3 insightful - 2 fun -  (0 children)

they have to stop the (((noticing)))

[–]EternalSunset 1 insightful - 2 fun1 insightful - 1 fun2 insightful - 2 fun -  (2 children)

(((Official partner of the WEF. Owner is a WEF member and was an invited speaker in the last conference at Davos.)))

[–][deleted]  (1 child)

[deleted]

    [–]EternalSunset 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (0 children)

    Look at their list of industry members. It's effectively where they get all of their money from, it is almost exclusively made up of major western corporations and banks. There are chinese corporations as well, but they don't make more than 10% of the bulk at all. If you watch their conferences you will mostly see western (or western aligned) business executives and political leaders talking. Their last meeting had 3 or 4 different conferences dedicated to discussing how Russia is bad and evil and how it must be destroyed. Their meeting this year had a closing panel composed of a CNBC anchor, the director of the IMF, the president of the European Central Bank, the head of The Bank of Japan and the finance minister of France.

    It is an organization founded and headed by the financial and business elites of the western powers.

    [–]RandumbZer0 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (0 children)

    Not IME..? Business as Usual for weeks now.