orbot icon indicating copy to clipboard operation
orbot copied to clipboard

Blocked in websites using cloudflares

Open stemy2 opened this issue 3 years ago • 8 comments

Hello,

When orbot is enabled, i can't visit any site using cloudflare without being redirected to a page with a captcha, wich is pretty annoying. Strangely, i don't have a such problem with the tor browser.

Is it possible to make orbot bypass it ?

stemy2 avatar Jan 18 '21 17:01 stemy2

Nothing can be done. Cloudflare just like Wikipedia uses API that Tor Project itself provides to say whether ipv4(v6) address is indeed a Tor exit.

Wikipedia also horribly abuses this and logs ips, no proof from me though about last one. https://github.com/wikimedia/mediawiki-extensions-TorBlock/search?q=tor

The API from them is called Onionoo https://onionoo.torproject.org https://metrics.torproject.org/onionoo.html#examples

ValZapod avatar Jun 06 '21 17:06 ValZapod

You can resist if you like.

This is about Cloudflare, not Tor Project. They are fully responsible for this.

ValZapod avatar Jun 07 '21 10:06 ValZapod

Meanwhile in the last months google gone nuts and does not even allow for a captha anymore and cloudflare also blocks more and more. Horrible. Please stop Onionoo!

ValZapod avatar Feb 18 '22 13:02 ValZapod

I've noticed that if I use Brave with Orbot, I in fact get through many of the "I am not a robot" cloudflare checks without having to solve a captcha. Brave might implement some of the mechanism Cloudflare have offered to reduce the amount of times it asks to prove you are a human.

n8fr8 avatar Feb 18 '22 13:02 n8fr8

of the "I am not a robot" cloudflare checks without having to solve a captcha.

You are wrong, because not a robot was google's captha, but cloudflare does not use google captcha API anymore, they moved to crazy hCaptcha. And no, I was talking about outright an error printing.

ValZapod avatar Feb 18 '22 13:02 ValZapod

Sorry, I just meant the conceptual proof of that... it may not always say "I am not a robot", in fact it is often Cloudflare's HCaptcha.

My point stands, that, when using Brave+Orbot I am reliably able to access most sites I choose to visit without much trouble.

n8fr8 avatar Feb 18 '22 13:02 n8fr8

in fact it is often

If it is google captcha then it is just mimicking Cloudflare, AFAIK. Yeah.

ValZapod avatar Feb 18 '22 13:02 ValZapod