What does the non-interactive version even do lol
What does the non-interactive version even do lol
FIt let me spam the hell out of my login form without a single rejection
FAt least interactive mode seems to do its job
https://i.gyazo.com/8e5cb93d9206391180e69c4636fea601.mp4
https://i.gyazo.com/8e5cb93d9206391180e69c4636fea601.mp4
SYes it's triggering breakpoint in debugger , but when you continue and click it normally it fails , my problem is total whack it just keeps looping erroring and then verifying and then error
FThat's odd
SI love the black pointer , how can you see it in dark apps
FThat's just how gyazo renders it, it doesn't actually look like that
SWill upload a vid of that whacky turnstile glitch I couldn't find the cause , other than that , in waf challenge, if you leave the page long enough
Sa bluecheckbox will appear
Sinstead of the original turnstile
SWhich is even more weird
Estops bots with as many heuristics it can get without interaction, since youre a real user using a real web browser it will let you pass several times. for the best protection i'd recommend managed mode
S
Swhy after some inactivity time on any waf managed website the turnstile turns blue
Swhy does it still appear
SSthought so too , sadge
Sfor me it appears after 5 mins of inactivity
Sit bugs out
Ssometimes turnstile is crazy too , it gives me a non-stop loop of error-verifiying
Smonkey patching for the root bug
FMakes sense
FI need to implement my own rate limit service anyway
Eyes, rate limits are always good
くI want to block the avoidance of 2captcha, but even if I specify remote ip, it is still possible to pass through.
Is there an alternative way to do this?
Is there an alternative way to do this?
くEven if you enter a string that is not an IP address in remoteip, it will still go through.
く
くThe documentation says that it has not been rigorously tested, but I am concerned that it has not really been tested at all.
くEven if the validation is not rigorous, what validation is being done?
くThanks for the advice. It worked perfectly
FDoesn't seem to do anything on my end, unless I'm just an idiot
SI don't think the turnstile remote IP is a good idea either , so many possibilities, what if user uses a VPN after solving for privacy
SSo many edge cases
SWhat if the user is using 4g and he changed towers that they were connected to , different IP
くIt seems like a rare case, and even if the 4G tower switches and the verification fails once, the user can simply reattempt the verification.
Aany chance the turnstile limit of 10 can be increased some way? When does it go out of beta?
�Hello all, I have this issue
Awell, the turnstile is still limited to 10
Acommunity form says it has.
Abut it's "probably" by some user I suppose, so it seems it is kept at 10
Aas an agency owner that means that I have to go back to the pesky recaptcha
Asince I got a limit on API connections from the system I work with towards CF.
FHuh?
FSomehow letting the tab sit for a couple of days caused it to spawn in a second Turnstyle iframe lol
FWorks fine in a fresh tab
FNo clue what caused that
FThey limit Turnstile to a max of 10 domains then?
FWhat a strange thing to do, that mostly just punishes customers with paid subscriptions
FFree customers have nothing stopping them from just creating multiple accounts to bypass the limit
