As a user of an unsigned Firefox fork, Turnstile has ruined a moderate portion of the Internet for me. The way Cloudflare doesn’t think twice about eroding user freedoms, for the sake of a gate that can be trivially bypassed with solvarr or similar, is deeply disturbing. They are no longer a force for good on the web.
Am I reading it right, the widget is seen 5B times per day, and they recruited 8 people for testing to make sure their “redesign would work for everyone”…?
Will this also be accompanied by a global Turnstile outage like all the other Cloudflare services that get touched? If they end up vibeslopping the redesign like they did with this article, it may just happen.
> We recruited 8 participants across 8 different countries, deliberately seeking diversity in age, digital savviness, and cultural background.
> 5 out of 8 points versus just 3 for "I am human." For the verifying state, it was even more dramatic — 7.5 versus 0.5.
n × p >= 5? (Sample size and margins of errors. Is 5:3 even meaningful or is this rather random personal preference?) Apparent splitting of missing or inconclusive data points? (7.5 vs. 0.5 out of a total of 8 subjects.) What kind of (social) research is this supposed to be?
We needed a new account on $MAJORSITE and we just could not get trough the captcha - I know, it's getting insane - In the end, we gave up, and just told $AI to make the account for us.
Something is going seriously wrong on the internet.
I'm not to fire people usually but this long report shows that there are probably too many persons too well paid with nothing to do at Cloud flare.
Because that is a lot of energy spent too have done advance research for an UI that is basic (just a checkbox), not particularly great and common before and after cloudflare...
And a personal rant, I don't understand how they can be proud of themselves when you see the wasted time and energy supported by users to browse the pages that are being Cloudflare.
Imagine this billions of "click-wait" uselessely done by users everyday worldwide
I'm very vastly in a minority here, but I can't help but feel uncomfortable that the general internet is converging towards explicity verifying humanity and addressing everyone as human. I liked it a lot better when everything was agnostic - I'd verify "I'm not a robot", I'd interact with other "users", etc... "On the Internet, nobody knows you're a ribbon dog."
Now, websites ask me to verify "I'm human", networks and services are starting to address their users as specifically "humans", and discourse is almost always about whether something or other is written by a "human" instead of just not slop.
I get that reality is what it is, but it just feels icky.
"Our Turnstile widget and Challenge Pages are served 7.67 billion times every single day. That's not a typo. Billions. This might just be the most-seen user interface on the Internet."
Or it might not
The majority of the traffic on the internet is from so-called "bots"
If a "bot" hits this "interface" does that count as being "seen"
The web's failing, its inability (unwillingness) to accept non-interactive use (no good for advertising), is Cloudflare's success
A strange thing to celebrate. MITM'ing the majority of the web for "security". Could there be a better way
Another source of amusement is the "You've been blocked" Cloudflare page showing the user's IP address and suggesting contacting the site operator might solve the problem
The truth is that sending an acceptable user-agent header value solves the problem
"You" are not being blocked (Cloudflare does not who "you" are), your IP address is not being blocked, the _request_ you sent was blocked because of crude heuristics
If a site operator wants a certain header value (why) then it should publish the list of acceptable values
Send another request with an acceptable header value and the requests succeeds. It appears "you" are not blocked, same IP address, same living, breathing, thinking person sending the request
17 comments
[ 4.1 ms ] story [ 40.8 ms ] threadI'm not reading this.
I can't be the only one.
It's slow and annoying, AI overview is good enough for me most of the times so that added time I bet makes websites lose a lot of visits.
> 5 out of 8 points versus just 3 for "I am human." For the verifying state, it was even more dramatic — 7.5 versus 0.5.
n × p >= 5? (Sample size and margins of errors. Is 5:3 even meaningful or is this rather random personal preference?) Apparent splitting of missing or inconclusive data points? (7.5 vs. 0.5 out of a total of 8 subjects.) What kind of (social) research is this supposed to be?
We needed a new account on $MAJORSITE and we just could not get trough the captcha - I know, it's getting insane - In the end, we gave up, and just told $AI to make the account for us.
Something is going seriously wrong on the internet.
Because that is a lot of energy spent too have done advance research for an UI that is basic (just a checkbox), not particularly great and common before and after cloudflare...
And a personal rant, I don't understand how they can be proud of themselves when you see the wasted time and energy supported by users to browse the pages that are being Cloudflare.
Imagine this billions of "click-wait" uselessely done by users everyday worldwide
Now, websites ask me to verify "I'm human", networks and services are starting to address their users as specifically "humans", and discourse is almost always about whether something or other is written by a "human" instead of just not slop.
I get that reality is what it is, but it just feels icky.
Or it might not
The majority of the traffic on the internet is from so-called "bots"
If a "bot" hits this "interface" does that count as being "seen"
The web's failing, its inability (unwillingness) to accept non-interactive use (no good for advertising), is Cloudflare's success
A strange thing to celebrate. MITM'ing the majority of the web for "security". Could there be a better way
Another source of amusement is the "You've been blocked" Cloudflare page showing the user's IP address and suggesting contacting the site operator might solve the problem
The truth is that sending an acceptable user-agent header value solves the problem
"You" are not being blocked (Cloudflare does not who "you" are), your IP address is not being blocked, the _request_ you sent was blocked because of crude heuristics
If a site operator wants a certain header value (why) then it should publish the list of acceptable values
Send another request with an acceptable header value and the requests succeeds. It appears "you" are not blocked, same IP address, same living, breathing, thinking person sending the request