Remove HCaptcha

Status

MarkElf

9+ Year Member
Supreme
Feedback score
27
Posts
1,215
Reactions
1,217
Resources
2
I don't know about others getting flagged for 'unusual network behavior' but I have to verify that I'm a human majority of the time accessing the site. Not sure if it's because I check stupidly frequently and have connected to the site using several ips since I'm in New York and there's wifi everywhere but I noticed this morning that HCapton is being used now and it gave me the world's hardest time picking pictures of a boat, birds, then umbrellas and wasted 10m of my life clicking pictures. Please revert back to the legacy check for being human or clear my account of being flagged for 'unusual network activity.' I, nor anyone else, should have a difficult time accessing the site.
 
Type
Suggestion
Status
Implemented
PebbleHost
High performance, consistent uptime and fast support. Minecraft hosting that just works.

gibzac2

Owner of Gib Developments Studios
Supreme
Feedback score
12
Posts
302
Reactions
39
Resources
0
Please select the correct photos then try again. why.
 

markd

plox.host
Supreme
Feedback score
56
Posts
644
Reactions
394
Resources
0
Lowkey took me 15mins to get in. Looks like it's been reverted though
 

BOOP

Director of Ops @ Zelphra
Supreme
Feedback score
23
Posts
2,384
Reactions
1,095
Resources
0
beep boop beep beep boop!
boop boop beep boop...

boop
Did somebody say boop?
just so this isn't considered a shitpost I gotta give my input,
hCaptcha is retarded and so much more inconvenient
 

YTSupplier

Feedback score
-1
Posts
242
Reactions
58
Resources
0
I hate it, it was telling to pick the pictures that have birds in it.. It might be the drugs or something but I swear to god... half of them look like dinosaurs or people riding bikes.
 

Anish

Developer
Supreme
Feedback score
9
Posts
365
Reactions
176
Resources
0
That is likely because your IP address is dynamic. Every time it changes, it invalidates your clearance. Some changes next week will hopefully fix this.[DOUBLEPOST=1585247095][/DOUBLEPOST]
That occurs during high loads to prevent our platform from being overloaded even more in the event bots get in. This should only occur if you haven't logged in recently, however having your cookies cleared can cause this.

I haven't cleared my cookies, it just asks me each time. Does a new IP override cookies?[DOUBLEPOST=1585268687][/DOUBLEPOST]In there blog post (https://blog.cloudflare.com/supporting-the-latest-version-of-the-privacy-pass-protocol/) Cloudflare has stated that you can use the Privacy Pass extension to bypass these verifications. You install the extension, verify once, and you get 30 "passes" that are automatically applied 30 times to bypass Cloudflare captcha pages. Once those 30 "passes" are used up, you can simply click get more passes, solve one captcha, and you'll get 30 more "passes".

Chrome: https://chrome.google.com/webstore/...jhmfdgkijocedmfjonnpjfojldioehi/related?hl=en
Firefox: https://addons.mozilla.org/en-US/firefox/addon/privacy-pass/
 
Last edited:

Jayson

Supreme
Feedback score
17
Posts
1,258
Reactions
741
Resources
0
hCaptcha is SHIT. Please remove it.
As the captcha is provided by Cloudflare, we unfortunately currently can't adjust that as easily. (Read below)

I use cloudflare's DNS most of the time, and accessing here is a pain with that.
Per my knowledge, using Cloudflare's DNS should not impact your interactions with the captcha. I use it myself.

I haven't cleared my cookies, it just asks me each time. Does a new IP override cookies?[DOUBLEPOST=1585268687][/DOUBLEPOST]In there blog post (https://blog.cloudflare.com/supporting-the-latest-version-of-the-privacy-pass-protocol/) Cloudflare has stated that you can use the Privacy Pass extension to bypass these verifications. You install the extension, verify once, and you get 30 "passes" that are automatically applied 30 times to bypass Cloudflare captcha pages. Once those 30 "passes" are used up, you can simply click get more passes, solve one captcha, and you'll get 30 more "passes".

Chrome: https://chrome.google.com/webstore/...jhmfdgkijocedmfjonnpjfojldioehi/related?hl=en
Firefox: https://addons.mozilla.org/en-US/firefox/addon/privacy-pass/
To make sure the same cookies aren't copied over a botnet, the clearance cookie is only valid for the IP at the time of solving the captcha. This thereby makes you have to solve it again. I'm hoping to change this next week. Also, I use Privacy Pass myself. :) With the changes I have planned, you'll need it less though, but still take advantage of it!

+1 having to do this everytime I enter the site very annoying
A change made today should make captchas less frequent, however, this varies by a browser configuration. Unfortunately, members using incognito mode/private browsing will not be impacted by this.

[Some Extra Information About hCaptcha]
Based on the information I've gathered, a primary motive for Cloudflare moving to hCaptcha is due to how it is privacy-oriented, unlike Google's reCaptcha. Their point is that when doing captchas, Google got free AI training work from visitors so hCaptcha is paying webmasters which use hCaptcha. We do not see the profits from this activity as Cloudflare delievers the captcha. More details about PrivacyPass and hCaptcha are on Cloudflare's blog.
 

Joshua C

Web Developer & Designer
Supreme
Feedback score
106
Posts
1,328
Reactions
470
Resources
0
As the captcha is provided by Cloudflare, we unfortunately currently can't adjust that as easily. (Read below)


Per my knowledge, using Cloudflare's DNS should not impact your interactions with the captcha. I use it myself.


To make sure the same cookies aren't copied over a botnet, the clearance cookie is only valid for the IP at the time of solving the captcha. This thereby makes you have to solve it again. I'm hoping to change this next week. Also, I use Privacy Pass myself. :) With the changes I have planned, you'll need it less though, but still take advantage of it!


A change made today should make captchas less frequent, however, this varies by a browser configuration. Unfortunately, members using incognito mode/private browsing will not be impacted by this.

[Some Extra Information About hCaptcha]
Based on the information I've gathered, a primary motive for Cloudflare moving to hCaptcha is due to how it is privacy-oriented, unlike Google's reCaptcha. Their point is that when doing captchas, Google got free AI training work from visitors so hCaptcha is paying webmasters which use hCaptcha. We do not see the profits from this activity as Cloudflare delievers the captcha. More details about PrivacyPass and hCaptcha are on Cloudflare's blog.
I'm using the cloudflare, but whenever I try to visit a page, it keeps on asking for verification despite me already giving it once.
 

Jami

Yep.
Premium
Feedback score
34
Posts
602
Reactions
239
Resources
0
As the captcha is provided by Cloudflare, we unfortunately currently can't adjust that as easily. (Read below)


Per my knowledge, using Cloudflare's DNS should not impact your interactions with the captcha. I use it myself.


To make sure the same cookies aren't copied over a botnet, the clearance cookie is only valid for the IP at the time of solving the captcha. This thereby makes you have to solve it again. I'm hoping to change this next week. Also, I use Privacy Pass myself. :) With the changes I have planned, you'll need it less though, but still take advantage of it!


A change made today should make captchas less frequent, however, this varies by a browser configuration. Unfortunately, members using incognito mode/private browsing will not be impacted by this.

[Some Extra Information About hCaptcha]
Based on the information I've gathered, a primary motive for Cloudflare moving to hCaptcha is due to how it is privacy-oriented, unlike Google's reCaptcha. Their point is that when doing captchas, Google got free AI training work from visitors so hCaptcha is paying webmasters which use hCaptcha. We do not see the profits from this activity as Cloudflare delievers the captcha. More details about PrivacyPass and hCaptcha are on Cloudflare's blog.
There should be Cloudflare alternatives out there, you should probably look into migrating.
 

Jayson

Supreme
Feedback score
17
Posts
1,258
Reactions
741
Resources
0
I'm using the cloudflare, but whenever I try to visit a page, it keeps on asking for verification despite me already giving it once.
Same, I am not using private browsing or anything always sending me the page constantly
It should only be providing you with a captcha at most when you're logging in or refreshing a page too many times. If you're experiencing something other than this, intentionally don't do one captcha and just open another tab & PM me so that I can look up what's causing it.

There should be Cloudflare alternatives out there, you should probably look into migrating.
Currently, we view Cloudflare as providing some of the most functionality and customizability at their pricepoint, especially when employing their API. If you have any suggestions for other services we may be interested in using, do let us know!
 
Last edited:

Kaneko Sayami

キノ
Supreme
Feedback score
4
Posts
25
Reactions
16
Resources
0
near 7 minutes.....near 7 minutes to get onto the site.

No matter how many times I clicked all the damn right photos it kept asking me to solve and solve.....
 

Plexle

Deactivated
Feedback score
0
Posts
3
Reactions
2
Resources
0
Annoying: yes

But you guys don't realize, reCAPTCHA is very useful when it comes to dealing with Advanced HTTP floods.
There is no bypass besides maybe something like https://privacypass.github.io/

Those simple Javascript Challenges will only do so little during these types of attacks.
 

Jayson

Supreme
Feedback score
17
Posts
1,258
Reactions
741
Resources
0
There is no bypass besides maybe something like https://privacypass.github.io/
Privacy Pass is actually the only thing that'll get you around Cloudflare's captchas - quite literally and intentionally. Privacy Pass is supported by Cloudflare to allow users to interact with captcha systems less and especially due to Google's due to privacy concerns on what they use the data they collect for. That is partially why they moved to hCaptcha - because it is privacy-oriented, however I can't quite say I'm a fan of the algorithms they use.

I personally suggest using it. :)
 

Anish

Developer
Supreme
Feedback score
9
Posts
365
Reactions
176
Resources
0
Status
Top