Delivery-Date: Mon, 15 Sep 2014 16:43:13 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.9 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED,
	RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 559711E0BCB;
	Mon, 15 Sep 2014 16:43:11 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 02AAE23F0C;
	Mon, 15 Sep 2014 20:43:07 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 580C52377A
 for <tor-talk@lists.torproject.org>; Mon, 15 Sep 2014 20:43:03 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at eugeni.torproject.org
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id W3r909Dnvzoo for <tor-talk@lists.torproject.org>;
 Mon, 15 Sep 2014 20:43:03 +0000 (UTC)
Received: from jessica.everdot.org (unknown [IPv6:2001:470:1f0b:1c12::1])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by eugeni.torproject.org (Postfix) with ESMTPS id 2836123639
 for <tor-talk@lists.torproject.org>; Mon, 15 Sep 2014 20:43:03 +0000 (UTC)
Received: from mail.everdot.org (primail.everdot.org [IPv6:2001:470:dc2e:5::2])
 (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
 (No client certificate requested)
 by jessica.everdot.org (Postfix) with ESMTPS id 5CE80FA0790
 for <tor-talk@lists.torproject.org>; Mon, 15 Sep 2014 22:42:37 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
 by mail.everdot.org (Postfix) with ESMTP id 6866191230DE
 for <tor-talk@lists.torproject.org>; Mon, 15 Sep 2014 22:42:36 +0200 (CEST)
X-Virus-Scanned: amavisd-new at everdot.org
Received: from mail.everdot.org ([127.0.0.1])
 by localhost (everdot.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id P81yhfNbbXun for <tor-talk@lists.torproject.org>;
 Mon, 15 Sep 2014 22:42:30 +0200 (CEST)
Received: from meilong (unknown [IPv6:2001:470:dc2e:2:683a:6bf5:df00:16ff])
 (using SSLv3 with cipher ECDHE-RSA-AES128-SHA (128/128 bits))
 (No client certificate requested)
 by mail.everdot.org (Postfix) with ESMTPSA id DB4899122E20
 for <tor-talk@lists.torproject.org>; Mon, 15 Sep 2014 22:42:29 +0200 (CEST)
Date: Mon, 15 Sep 2014 22:42:24 +0200
From: =?ISO-8859-1?B?1nl2aW5k?= Saether <oyvinds@everdot.org>
To: tor-talk@lists.torproject.org
Message-ID: <20140915224224.71bed7bf@meilong>
In-Reply-To: <541739B5.4070103@gmx.com>
References: <541739B5.4070103@gmx.com>
X-Mailer: Claws Mail 3.9.0 (GTK+ 2.24.24; x86_64-pc-linux-gnu)
Mime-Version: 1.0
Subject: Re: [tor-talk] more sites requiring captchas from Cloudfare (using
 Google API?)
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============2340649984455144395=="
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

--===============2340649984455144395==
Content-Type: multipart/signed; micalg=PGP-SHA1;
 boundary="Sig_/k1FEPNSp_p+w/ufLOaG+keO"; protocol="application/pgp-signature"

--Sig_/k1FEPNSp_p+w/ufLOaG+keO
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

> These captchas recently started appearing (more often) on all kinds
> of sites.   By far the most common name that pops up associated with
> this security is "Cloudfare," but also some others.
> Aside from being forced to allow scripts in NoScript from Cloudfare
> for the captcha to work (or which ever one it is), it also seems to
> require allowing scripts from... Google.com.

I too have noticed the Cloudflare annoyance on a wide variety of sites
lately (not sure if more sites use Cloudflare or if Cloudfare has begun
asking for a captcha in more cases).

The only solution would be to ask/get Cloudflare to stop doing this so
we will probably just have to live with it. Perhaps someone from the
Tor project could talk to them - but it could be that they have
experienced a lot of abuse and have their reasons (still, you get this
captcha when trying to get to the site, it's not something that only
shows up if you do a HTTP POST or something like that).

I just want to say this to webmasters and website owners: What actually
happens is that I click a link, see the Cloudflare "captcha" message,
interpret the message as "This site is broken when accessed through
Tor, oh well" and CLOSE THE TAB or click "Back".

I am not sure this is something most corporations would care about
since Tor users tend to block their (javascript-using) advertisements
anyway but webmasters, know that I am probably not the only one who
will go somewhere else instead of enabling JavaScript from a bunch
of places & typing in a silly captcha

--Sig_/k1FEPNSp_p+w/ufLOaG+keO
Content-Type: application/pgp-signature; name=signature.asc
Content-Disposition: attachment; filename=signature.asc

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iEYEARECAAYFAlQXTzMACgkQNBSJHnwv/KpDQQCgkNxNOulsvjaRwGts0tmiQg10
+xwAoJQ0Rrfoy30vh1IWBFbDdrn2MX1l
=B9Ot
-----END PGP SIGNATURE-----

--Sig_/k1FEPNSp_p+w/ufLOaG+keO--

--===============2340649984455144395==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

--===============2340649984455144395==--

