I remember when hCaptcha was decent. Now it's probably one of the worst in my experience. Blocked fr

I remember when hCaptcha was decent. Now it's probably one of the worst in my experience. Blocked from passing so many times when trying to sign into Discord alone.

AAnay-208 microsoft edge

D5•2/23/25, 8:54 PM

You're using a home network?

DDubz I remember when hCaptcha was decent. Now it's probably one of the worst in my ex...

D5•2/23/25, 8:56 PM

I agree. Captchas are not very difficult to complete thanks to AI, and I think that AI can solve Captchas faster than humans, so we end up having a system that is easy for machines, and difficult for humans while the goal should be the opposite

valkyrie_pilot•2/23/25, 9:16 PM

which, if your site is worth protecting with a captcha, is going to happen

Vvalkyrie_pilot which, if your site is worth protecting with a captcha, is going to happen

DubzOP•2/24/25, 12:40 AM

That's honestly a poor way of looking at it tbh. Captchas are widely used everywhere to help combat spam, not hacks. Not that users can't do anything nefarious, but it's all a cat and mouse game.

DubzOP•2/24/25, 12:44 AM

I say poor way to look at it because it gives similar reasoning to small businesses and non profits not taking their InfoSec seriously because they're not worth going for, which is tge exact reason that makes it worth going for. Easy food. Most malicious attackers don't care where the money comes from, just that they get it. Why chase a $100B company you'll probably never get any inside info in when you can get a few 5-7 figures companies and get you rolling for long term funding to keep getting those same small fishies? Sure, it's not a "big score", but it all adds up.

DDubz I say poor way to look at it because it gives similar reasoning to small busines...

valkyrie_pilot•2/24/25, 1:18 AM

hm? im saying that it shouldn’t be your only layer of protection, and that not having a captcha shouldn’t allow malicious people to do Bad Things

DubzOP•2/24/25, 1:21 AM

I may have misinterpreted what you were saying. My apologies , my fault

sachin gupta•2/24/25, 4:55 AM

Hello Everyone,

’ve configured a Cache Rule in Cloudflare, but it doesn’t seem to be working as expected. I’d appreciate any guidance on troubleshooting the issue.

Crazy Vapor•2/24/25, 7:30 AM

Hello everyone,

Should CloudFlare hide the ECS as the Subnet, that would be great, because ECS is still exposed.

Marcin7711•2/24/25, 8:57 AM

Pomożecie jak wygramy dam wam trochę kasy,ok!Idziemy na full

AAnay-208 Yes

D5•2/24/25, 9:53 AM

Maybe you have a compromised router or IoT device

AAnay-208 Device has an antivirus. Router I dont think because I haven’t noticed anything ...

D5•2/24/25, 9:57 AM

The router could be performing a DDoS without you noticing

AAnay-208 Umm let me login into my router panel. Anything which I should check there?

D5•2/24/25, 9:59 AM

If it's not one from your ISP, you should make sure it's updated

AAnay-208 there isn't any option to update

D5•2/24/25, 11:52 AM

No idea. Could be that the IP is in a blacklist or something

D5•2/24/25, 12:10 PM

Having a BYOIP address requires having a 1k+ enterprise plan?

Isaac McFadyen•2/24/25, 12:22 PM

Correct, BYOIP is ent-only.

Isaac McFadyen•2/24/25, 12:22 PM

And generally it's more than $1k

John Spurlock•2/24/25, 12:23 PM

I see the latest Syntax is all about CF...

https://syntax.fm/show/879/fullstack-cloudflare

Fullstack Cloudflare - Syntax #879

Overview of using Cloudflare Workers and associated services to build fullstack applications

IIsaac McFadyen And generally it's more than $1k

D5•2/24/25, 12:40 PM

Then I'm 100% forced to leave CF :emoti_cry:
I hope the blockings end soon so I can come back

Guilherme J. Akrouch•2/24/25, 2:11 PM

Anyone still having issues with R2 file downloads? Is that issue resolved?

AAnay-208 why "forced" tho?

D5•2/24/25, 2:24 PM

They are blocking Cloudflare here during football matches, so I can't have downtime all weekends during 8h in some big ISPs

D5•2/24/25, 2:25 PM

BYOIP could solve the issue, but I can't pay 1k

AAnay-208 Not exactly, but similar case for me. I'm not able to submit forms in my OWN si...

D5•2/24/25, 2:26 PM

Well, at least it's only happening to you. Not my case, it's affecting hundreds of users

AAnay-208 ya, if I were you, I would have migrated without a second thought. For my curre...

D5•2/24/25, 2:28 PM

The problem is that there's not any comparable alternative to Cloudflare with similar price, performance, etc.

D5•2/24/25, 2:29 PM

So I need to setup my own WAF and "trust" the hosting provider DDoS protection that is worse than the Cloudflare one

AAnay-208 If I were you, I'd just host my app on AWS, and get a cloudfront dedicated ip, w...

D5•2/24/25, 2:31 PM

I can't pay 600$/month plus additional AWS charges

D5•2/24/25, 2:33 PM

Mainly because AWS gives you nothing for that price compared to other providers

AAnay-208 host in aws ec2 + get a static ip attach to load balancer and rely on AWS shield...

D5•2/24/25, 2:36 PM

Maybe I will do a load balancer to a non-aws platform and use AWS as a proxy

D5•2/24/25, 2:36 PM

But the main thing I don't understand, is why Cloudflare (supposedly) isn't blocking the illegal content to avoid all that headache?

AAnay-208 There is a manual review requires to remove the illegal content, which cloudflar...

D5•2/24/25, 2:39 PM

Well, I submitted some requests and they attended them. Slow, but made it.

AAnay-208 If I’m right, some cloudflare ips are blocked from a ISP which is making your do...

D5•2/24/25, 2:40 PM

From multiple ISPs during football matches hours that are not using IPv6 so my domain is inaccessible from there.

D5•2/24/25, 2:41 PM

From what I understand the affected providers are the ones using IPv4 as those IPs are shared with a lot more websites

I remember when hCaptcha was decent. Now it's probably one of the worst in my experience. Blocked fr

Similar Threads