LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > LinuxQuestions.org > LQ Suggestions & Feedback
User Name
Password
LQ Suggestions & Feedback Do you have a suggestion for this site or an idea that will make the site better? This forum is for you.
PLEASE READ THIS FORUM - Information and status updates will also be posted here.

Notices


Reply
  Search this Thread
Old 04-27-2019, 06:57 PM   #16
dive
Senior Member
 
Registered: Aug 2003
Location: UK
Distribution: Slackware
Posts: 3,467

Original Poster
Rep: Reputation: Disabled

Tor browser connects.
QB using TTB's user-agent gets a captcha.

They were both going through the same privoxy and tor instance when I tested this.

TTB must be doing something else that advertises what it is, which seems slightly suspicious to me.
 
Old 04-27-2019, 07:02 PM   #17
dive
Senior Member
 
Registered: Aug 2003
Location: UK
Distribution: Slackware
Posts: 3,467

Original Poster
Rep: Reputation: Disabled
And this is me posting from TTB.
 
Old 04-27-2019, 08:23 PM   #18
individual
Member
 
Registered: Jul 2018
Posts: 315
Blog Entries: 1

Rep: Reputation: 233Reputation: 233Reputation: 233
Quote:
Originally Posted by dive View Post
Tor browser connects.
QB using TTB's user-agent gets a captcha.

They were both going through the same privoxy and tor instance when I tested this.

TTB must be doing something else that advertises what it is, which seems slightly suspicious to me.
Yes, there is something different going on. To confirm, check the headers and you'll see this:
Code:
HTTP/2.0 200 OK
date: Sun, 28 Apr 2019 01:21:10 GMT
content-type: text/html; charset=ISO-8859-1
vary: Accept-Encoding
set-cookie: <SNIPPED>
cache-control: private
pragma: private
via: 1.1 google
alt-svc: h2="cflareki4v3lh674hq55k3n7xd4ibkwx3pnw67rr3gkpsonjmxbktxyd.onion:443"; ma=86400; persist=1
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
server: cloudflare
cf-ray: 4ce537c8ca5d9cde-AMS
content-encoding: br
X-Firefox-Spdy: h2

Last edited by individual; 04-27-2019 at 08:35 PM.
 
Old 04-27-2019, 08:33 PM   #19
dive
Senior Member
 
Registered: Aug 2003
Location: UK
Distribution: Slackware
Posts: 3,467

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by individual View Post
Yes, there is something different going on.
I got a 404 on that link. I'll look into it a bit more though.
 
Old 04-27-2019, 08:34 PM   #20
individual
Member
 
Registered: Jul 2018
Posts: 315
Blog Entries: 1

Rep: Reputation: 233Reputation: 233Reputation: 233
Quote:
Originally Posted by dive View Post
I got a 404 on that link. I'll look into it a bit more though.
Add a slash to the end of the URL. That is pretty embarrassing that they can't handle a missing slash.

Last edited by individual; 04-27-2019 at 08:35 PM. Reason: Spelling is hard.
 
Old 04-27-2019, 09:16 PM   #21
dive
Senior Member
 
Registered: Aug 2003
Location: UK
Distribution: Slackware
Posts: 3,467

Original Poster
Rep: Reputation: Disabled
OK.

This is a bit of weird workaround. I wouldn't trust them at all and I certainly don't want my connections going through their onion service.
 
Old 04-27-2019, 11:44 PM   #22
Turbocapitalist
LQ Guru
 
Registered: Apr 2005
Distribution: Linux Mint, Devuan, OpenBSD
Posts: 7,307
Blog Entries: 3

Rep: Reputation: 3721Reputation: 3721Reputation: 3721Reputation: 3721Reputation: 3721Reputation: 3721Reputation: 3721Reputation: 3721Reputation: 3721Reputation: 3721Reputation: 3721
One work-around which can be done from the LQ side would be to offer LQ also as www.torproject.org/docs/tor-onion-service.html.en]an Onion service[/url]. It is almost trivial to set up. That would not require changing anything on ports 443 or 80 which could still go through that vile Cloudflare thing, until a solution is found for that, too. Running an Onion service would then allow reliable access via Tor independently of the other methods.

Edit: more feedback: the link above is getting munged by some processing on LQ. I've posted it correctly several times and it keeps getting re-formatted as you see it above.

Last edited by Turbocapitalist; 04-27-2019 at 11:46 PM.
 
Old 04-28-2019, 12:08 AM   #23
Turbocapitalist
LQ Guru
 
Registered: Apr 2005
Distribution: Linux Mint, Devuan, OpenBSD
Posts: 7,307
Blog Entries: 3

Rep: Reputation: 3721Reputation: 3721Reputation: 3721Reputation: 3721Reputation: 3721Reputation: 3721Reputation: 3721Reputation: 3721Reputation: 3721Reputation: 3721Reputation: 3721
For what it's worth, I was just blocked by clownfare using a direct connection and Chromium version 73.0.3683.75 (Developer Build) in another part of LQ. No need for Tor, clownflare is blocking everybody now. I'm out until that is able to be fixed. For some reason the LQ Suggestions & Feedback section is not blocked.

Last edited by Turbocapitalist; 04-28-2019 at 12:11 AM.
 
Old 04-28-2019, 02:42 AM   #24
ondoho
LQ Addict
 
Registered: Dec 2013
Posts: 19,872
Blog Entries: 12

Rep: Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053
Quote:
Originally Posted by dive View Post
Elinks -> Privoxy -> Tor -> LQ
you did not mention privoxy in your initial post.
since nobody seems to be getting captchas with TOR & LQ, i'd say that is the bit that makes cloudflare balk.
 
Old 04-28-2019, 09:34 AM   #25
dive
Senior Member
 
Registered: Aug 2003
Location: UK
Distribution: Slackware
Posts: 3,467

Original Poster
Rep: Reputation: Disabled
I did say a few posts later that as soon as I set privoxy to connect direct and not through Tor I had no captchas.
 
Old 04-28-2019, 10:08 AM   #26
jeremy
root
 
Registered: Jun 2000
Distribution: Debian, Red Hat, Slackware, Fedora, Ubuntu
Posts: 13,602

Rep: Reputation: 4084Reputation: 4084Reputation: 4084Reputation: 4084Reputation: 4084Reputation: 4084Reputation: 4084Reputation: 4084Reputation: 4084Reputation: 4084Reputation: 4084
We've explicitly whitelisted Tor. Note that we've had some issues with Tor exit nodes and spammers in the past, and will continue to evaluate.

--jeremy
 
Old 04-28-2019, 10:20 AM   #27
dive
Senior Member
 
Registered: Aug 2003
Location: UK
Distribution: Slackware
Posts: 3,467

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by jeremy View Post
We've explicitly whitelisted Tor. Note that we've had some issues with Tor exit nodes and spammers in the past, and will continue to evaluate.

--jeremy
How exactly do you whitelist people? Is it only by IP, or are you actually looking for something in the headers?

I haven't changed any settings here, but for the past couple of days I've been blocked by captchas.
 
Old 04-28-2019, 10:23 AM   #28
jeremy
root
 
Registered: Jun 2000
Distribution: Debian, Red Hat, Slackware, Fedora, Ubuntu
Posts: 13,602

Rep: Reputation: 4084Reputation: 4084Reputation: 4084Reputation: 4084Reputation: 4084Reputation: 4084Reputation: 4084Reputation: 4084Reputation: 4084Reputation: 4084Reputation: 4084
Note that we haven't whitelisted "people" in any way, but have explicitly ensured that Tor exit nodes are not blocked. This only applies after post #26 was posted.

--jeremy
 
1 members found this post helpful.
Old 04-28-2019, 10:28 AM   #29
dive
Senior Member
 
Registered: Aug 2003
Location: UK
Distribution: Slackware
Posts: 3,467

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by jeremy View Post
Note that we haven't whitelisted "people" in any way, but have explicitly ensured that Tor exit nodes are not blocked. This only applies after post #26 was posted.

--jeremy
Thank you, Jeremy.
 
Old 04-28-2019, 10:38 AM   #30
Michael Uplawski
Senior Member
 
Registered: Dec 2015
Posts: 1,622
Blog Entries: 40

Rep: Reputation: Disabled
Quote:
Originally Posted by jeremy View Post
Note that we haven't whitelisted "people" in any way, but have explicitly ensured that Tor exit nodes are not blocked. This only applies after post #26 was posted.

--jeremy
Define Cool.
Ah. No. Its done.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Tor Browser Bundle/Tor and IPTables: Working Solution Sought Nonetas Linux - Security 1 01-14-2018 06:23 PM
LXer: Bug that hit Firefox and Tor browsers was hard to spot-now we know why LXer Syndicated Linux News 0 09-26-2016 09:45 PM
LXer: Tails 2.6 Anonymous Linux Live CD Is Out, Brings Tor 0.2.8.7 and Tor Browser 6.0.5 LXer Syndicated Linux News 0 09-21-2016 01:32 AM
[SOLVED] Blocked sites, all web browsers, Linux and Windows porphyry5 Linux - Security 16 03-03-2013 05:01 PM
How to allow only particular browsers and deny all other browsers in squid3 roopakl Linux - Newbie 8 04-24-2012 10:31 PM

LinuxQuestions.org > Forums > LinuxQuestions.org > LQ Suggestions & Feedback

All times are GMT -5. The time now is 08:34 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration