Cloudflare connection test loops endlessly

[Paul B. Gallagher]

Lately, some sites produce the following on loading, which loops
endlessly until SM prompts me to continue/debug/stop the script:

[begin quote]

Checking if the site connection is secure
<website> needs to review the security of your connection before proceeding.

RayID <alphanumeric hash>
Performance and security by Cloudflare
<https://www.cloudflare.com/?utm_source=challenge&utm_campaign=j>

[end quote]

If I disable javascript, it prevents the endless loop, but instead I get
a prompt:
(!) Enable JavaScript and cookies to continue

Can we hope for this to be fixed soon? M$ Edge 109 passes the test and
grants access.

Example: <https://ww1.dramacool9.pw/six-flying-dragons-episode-45/>
(worked fine yesterday)

Thanks.

--
War doesn't determine who's right, just who's left.
--
Paul B. Gallagher

[Nuno Silva]

On 2023-04-06, Paul B. Gallagher wrote:

> Lately, some sites produce the following on loading, which loops
> endlessly until SM prompts me to continue/debug/stop the script:
>
> [begin quote]
>
> Checking if the site connection is secure
> <website> needs to review the security of your connection before proceeding.
>
> RayID <alphanumeric hash>
> Performance and security by Cloudflare
> <https://www.cloudflare.com/?utm_source=challenge&utm_campaign=j>
>
> [end quote]
>
> If I disable javascript, it prevents the endless loop, but instead I
> get a prompt:
> (!) Enable JavaScript and cookies to continue
>
> Can we hope for this to be fixed soon? M$ Edge 109 passes the test and
> grants access.
>
> Example: <https://ww1.dramacool9.pw/six-flying-dragons-episode-45/>
> (worked fine yesterday)

It'd not be the first time Cloudflare screwed their Browser
Challenge. Last time they started requiring the Origin: header and it
triggered and endless loop too (as absence of Origin: sent it to square
zero again over and over).

Later reverted when somebody finally managed to get through. (Which
means someone from Cloudflare learned about it from a Hacker News
comment, as their customer support just kept dismissing this as
"unsupported, go away"...)

But to see what's going on I need to get a challenge here. Does anyone
know if Cloudflare has a demo page of some sort for this kind of
challenge? (ww1.dramacool9.pw does not show me a challenge here, at least
not right now)

--
Nuno Silva

[Nuno Silva]

So I got a cloudflare challenge at another site now, and this might have
been just a coincidence, but once I changed the UA string setting to
"Identify as Firefox" (Edit->Preferences->Advanced->HTTP Networking) it
passed the challenge... so if you're still getting such a challenge, can
you give this a try?

It may well be just a coincidence, or it might depend on site-specific
settings, but I'm mentioning it just in case it isn't.

--
Nuno Silva

[Paul B. Gallagher]

Nuno Silva wrote:

So I got a cloudflare challenge at another site now, and this might
have been just a coincidence, but once I changed the UA string
setting to "Identify as Firefox" (Edit->Preferences->Advanced->HTTP
Networking) it passed the challenge... so if you're still getting
such a challenge, can you give this a try?

I tried that, restarted SM just in case before testing, no joy. FWIW, I have SM set to clear private data on restart (including cache and cookies).

It may well be just a coincidence, or it might depend on site-specific
settings, but I'm mentioning it just in case it isn't.

I also tried the override string "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:86.0) Gecko/20100101 Firefox/86.0," both alone and in combination with "Identify as Firefox," restarting SM each time before testing, but no joy.

Anything else I should look at? I don't think it could it be rejecting my Windows 7 since I get the same result with a Windows 10 computer running SM 2.53.15 and the same prefs other than today's test parameters.

-- 
War doesn't determine who's right, just who's left.
--
Paul B. Gallagher

[Paul B. Gallagher]

Nuno Silva wrote:

> So I got a cloudflare challenge at another site now, and this might
> have been just a coincidence, but once I changed the UA string
> setting to "Identify as Firefox" (Edit->Preferences->Advanced->HTTP
> Networking) it passed the challenge... so if you're still getting
> such a challenge, can you give this a try?

I tried that, restarted SM just in case before testing, no joy. FWIW, I
have SM set to clear private data on restart (including cache and cookies).

> It may well be just a coincidence, or it might depend on site-specific
> settings, but I'm mentioning it just in case it isn't.

I also tried the override string "Mozilla/5.0 (Windows NT 6.1; Win64;
x64; rv:86.0) Gecko/20100101 Firefox/86.0," both alone and in
combination with "Identify as Firefox," restarting SM each time before
testing, but no joy.

Anything else I should look at? I don't think it could it be rejecting
my Windows 7 since I get the same result with a Windows 10 computer
running SM 2.53.15 and the same prefs other than today's test parameters.

[Paul B. Gallagher]

Nuno Silva wrote:

> So I got a cloudflare challenge at another site now, and this might
> have been just a coincidence, but once I changed the UA string
> setting to "Identify as Firefox" (Edit->Preferences->Advanced->HTTP
> Networking) it passed the challenge... so if you're still getting
> such a challenge, can you give this a try?

I tried that, restarted SM just in case before testing, no joy. FWIW, I
have SM set to clear private data on restart (including cache and cookies).

> It may well be just a coincidence, or it might depend on site-specific
> settings, but I'm mentioning it just in case it isn't.

I also tried the override string "Mozilla/5.0 (Windows NT 6.1; Win64;
x64; rv:86.0) Gecko/20100101 Firefox/86.0," both alone and in
combination with "Identify as Firefox," restarting SM each time before
testing, but no joy.

Anything else I should look at? I don't think it could it be rejecting
my Windows 7 since I get the same result with a Windows 10 computer
running SM 2.53.15 and the same prefs other than today's test parameters.

[Jack Warkentin]

Hi Paul

To me, the key statement in your post was

> On 2023-04-06, Paul B. Gallagher wrote: M$ Edge 109 passes the test
> and grants access.

I have noticed more and more websites say "we don't support seamonkey",
perhaps not in so many words, but by their behaviour when you try to
access them. But when I use Firefox ESR these websites work just fine.

This has been my experience on my Debian Gnu/Linux system.

Regards

Jack

Jack Warkentin, phone 902-404-0457, email jw...@eastlink.ca
39 Inverness Avenue, Halifax, Nova Scotia, Canada, B3P 1X6

[Ant]

On Sun, Apr 16, 2023 at 04:04:02PM -0300, Jack Warkentin wrote:
> Hi Paul
>
> To me, the key statement in your post was
>
> > On 2023-04-06, Paul B. Gallagher wrote: M$ Edge 109 passes the test
> > and grants access.
>
> I have noticed more and more websites say "we don't support seamonkey",
> perhaps not in so many words, but by their behaviour when you try to access
> them. But when I use Firefox ESR these websites work just fine.
>
> This has been my experience on my Debian Gnu/Linux system.

Windows 10 for me. :(
--
"I will exalt you, my God the King; I will praise your name for ever and ever. Every day I will praise you and extol your name for ever and ever." --Psalm 145:1-2. Is spring break & winter over yet? :) (Orthodox) Easter again! Beat Grizzlies, Lakers!
Note: A fixed width font (Courier, Monospace, etc.) is required to see this signature correctly.
/\___/\ Phil./Ant(Dude) @ phi...@earthlink.net / a...@zimage.com
/ /\ /\ \ http://aqfl.net & http://antfarm.home.dhs.org
| |o o| |
\ _ / Please kindly use Ant nickname & URL/link if crediting.
( )