>Marrying your cousin is less gross than marrying a nonwhite.
  • Welcome. Registering and having your account be approved may take a while since there's only one guy checking and approving accounts and guestposts

Just let _account in already

99% sure he disables it with noscript because hes highkey a schizo
That's common sense, not schizophrenia. You'd have to be dummyed to complete a Cloudflare captcha outside of a VM.
It functions by fingerprinting your browser and comparing that fingerprint with other signals like your user-agent and TLS fingerprint to catch inconsistencies.
I don't mind modern captcha approaches like that, it's more convenient for humans than a traditional challenge and often harder for bots to bypass too, but Cloudflare's implementation is insidious.

https://www.cloudflare.com/turnstile-privacy-policy/
When you click the checkbox, you're consenting to this privacy policy. That's the only reason the checkbox is there. It could run automatically and still be just as effective at blocking bots, but then their data collection wouldn't be legal.
According that privacy policy they collect "a variety of client-side signals (“Signals”) such as client IP address, TLS Fingerprint, User-Agent Header and Sitekey and associated origin.". "associated origin" is particularly important here because it means they're recording which site your fingerprint was sent from alongside the fingerprint itself.

That gets scary pretty quick when you consider that over 60% of websites online today use Cloudflare.
Do a Cloudflare captcha to log into your bank account then do another one to access the soyboy forum? Cloudflare knows that traffic came from the same person. Even a VPN won't save you because they're fingerprinting your browser too.
Really makes you wonder what their motive for offering such a generous free plan is...

how does he even login than? Did he just leave his browser open for all that time.
Noscript allows you to disable JS from certain origins. I'd imagine he blocked JS from Cloudflare but allowed the forum's JS.
 
Isn't that how it works on the shroom? I never have to click it
Might vary based on jurisdiction and whether you've consented in the past. It always prompts me to click the checkbox but I exclusively use VPNs in GDPR countries and clear my cookies between sessions.
 
That's common sense, not schizophrenia. You'd have to be dummyed to complete a Cloudflare captcha outside of a VM.
It functions by fingerprinting your browser and comparing that fingerprint with other signals like your user-agent and TLS fingerprint to catch inconsistencies.
I don't mind modern captcha approaches like that, it's more convenient for humans than a traditional challenge and often harder for bots to bypass too, but Cloudflare's implementation is insidious.

https://www.cloudflare.com/turnstile-privacy-policy/
When you click the checkbox, you're consenting to this privacy policy. That's the only reason the checkbox is there. It could run automatically and still be just as effective at blocking bots, but then their data collection wouldn't be legal.
According that privacy policy they collect "a variety of client-side signals (“Signals”) such as client IP address, TLS Fingerprint, User-Agent Header and Sitekey and associated origin.". "associated origin" is particularly important here because it means they're recording which site your fingerprint was sent from alongside the fingerprint itself.

That gets scary pretty quick when you consider that over 60% of websites online today use Cloudflare.
Do a Cloudflare captcha to log into your bank account then do another one to access the soyboy forum? Cloudflare knows that traffic came from the same person. Even a VPN won't save you because they're fingerprinting your browser too.
Really makes you wonder what their motive for offering such a generous free plan is...


Noscript allows you to disable JS from certain origins. I'd imagine he blocked JS from Cloudflare but allowed the forum's JS.
Internet anonymity has been dead in the water for over a decade, at some point you realize how futile all this bullshit is.
https://ceur-ws.org/Vol-3925/paper12.pdf
 
Last edited:
That's common sense, not schizophrenia. You'd have to be dummyed to complete a Cloudflare captcha outside of a VM.
It functions by fingerprinting your browser and comparing that fingerprint with other signals like your user-agent and TLS fingerprint to catch inconsistencies.
I don't mind modern captcha approaches like that, it's more convenient for humans than a traditional challenge and often harder for bots to bypass too, but Cloudflare's implementation is insidious.

https://www.cloudflare.com/turnstile-privacy-policy/
When you click the checkbox, you're consenting to this privacy policy. That's the only reason the checkbox is there. It could run automatically and still be just as effective at blocking bots, but then their data collection wouldn't be legal.
According that privacy policy they collect "a variety of client-side signals (“Signals”) such as client IP address, TLS Fingerprint, User-Agent Header and Sitekey and associated origin.". "associated origin" is particularly important here because it means they're recording which site your fingerprint was sent from alongside the fingerprint itself.

That gets scary pretty quick when you consider that over 60% of websites online today use Cloudflare.
Do a Cloudflare captcha to log into your bank account then do another one to access the soyboy forum? Cloudflare knows that traffic came from the same person. Even a VPN won't save you because they're fingerprinting your browser too.
Really makes you wonder what their motive for offering such a generous free plan is...


Noscript allows you to disable JS from certain origins. I'd imagine he blocked JS from Cloudflare but allowed the forum's JS.
nerd
 
Back
Top Bottom