eupolicy.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
This Mastodon server is a friendly and respectful discussion space for people working in areas related to EU policy. When you request to create an account, please tell us something about you.

Server stats:

205
active users

#cloudflare

5 posts5 participants0 posts today
diesUndDasMitTassen 🇺🇦<p>„Es wird bestätigt, dass Sie ein Mensch sind. Das kann einige Sekunden dauern". Nein. Das will ich nicht lesen, brauche diesbezüglich auch keine externe Einschätzung, deswegen kommen Sites, die diese Funktion vor einem Besuch in solcher Manier ausspielen ab sofort auf die Sperrliste 🤷‍♂️ Vielleicht schau ich in einem Jahr noch mal vorbei, aber eher nicht, denn bisher habe ich alle einmal aufgegebenen Services entweder gar nicht vermisst, oder vergleichbaren Ersatz gefunden 🙂 <a href="https://mastodon.social/tags/cloudflare" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>cloudflare</span></a> <a href="https://mastodon.social/tags/internet" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>internet</span></a></p>
Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://social.wake.st/@liaizon" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>liaizon</span></a></span> <em>not shure if <a href="https://infosec.space/tags/ClownFlare" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ClownFlare</span></a> are cowards or unpaid bills</em></p><p><a href="https://infosec.space/tags/CloudFlare" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CloudFlare</span></a> has way too much traffic in their core network!</p>
Eugenus Optimus 🇺🇦<p>I want this warning to reach anyone who is thinking about using <a href="https://social.ujeenator.net/tags/cloudflare" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>cloudflare</span></a><br><br>**When you use <a href="https://social.ujeenator.net/tags/cloudflare" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>cloudflare</span></a> proxy feature**, you are not just sharing your data with <a href="https://social.ujeenator.net/tags/cloudflare" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>cloudflare</span></a> - **100% of your site traffic is decrypted into plaintext** as it transits through <a href="https://social.ujeenator.net/tags/cloudflare" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>cloudflare</span></a> servers; this means they technically have direct access to any sensitive data submitted from user to website and from website to user, such as** emails, passwords, names, credit card numbers, etc.**<br><br>While there have been no leaks or evidence that <a href="https://social.ujeenator.net/tags/cloudflare" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>cloudflare</span></a> is used for surveillance (yet), but:<br><br>1. They provide the technical capabilities for this to happen: decrypted traffic is centralized with a single provider worldwide and is automatically analyzed (currently claimed to be only by the DDoS firewall).<br><br>2. I know no other cloud service that provides so many features for free at once; they offer:<br>- Free 1.1.1.1 secure public DNS resolver (with DoH)<br>- Free authoritative DNS<br>- Free CDN.<br>- Free AI bot protection.<br>- Free DDoS protection.<br>- Zero-margin domain pricing.<br><br>This makes me suspicious: customers are being attracted by a “free cake”, and we don’t know who is paying for it.<br><br><a href="https://social.ujeenator.net/tags/surveillanceeconomy" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>surveillanceeconomy</span></a> <a href="https://social.ujeenator.net/tags/surveillancecaptalism" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>surveillancecaptalism</span></a> <a href="https://social.ujeenator.net/tags/datasurveillance" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>datasurveillance</span></a> <a href="https://social.ujeenator.net/tags/surveillance" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>surveillance</span></a></p>

"Perplexity’s accusations aren’t exactly fair, either. One argument that Prince and Cloudflare used for calling out Perplexity’s methods was that OpenAI doesn’t behave in the same way.

“OpenAI is an example of a leading AI company that follows these best practices,” Cloudflare wrote. “They respect robots.txt and do not try to evade either a robots.txt directive or a network level block. And ChatGPT Agent is signing http requests using the newly proposed open standard Web Bot Auth.”

Web Bot Auth is a Cloudflare-supported standard being developed by the Internet Engineering Task Force that hopes to create a cryptographic method for identifying AI agent web requests.

The debate comes as bot activity reshapes the internet. As TechCrunch has previously reported, bots seeking to scrape massive amounts of content to train AI models have become a menace, especially to smaller sites.

For the first time in the internet’s history, bot activity is currently outstripping human activity online, with AI traffic accounting for over 50%, according to Imperva’s Bad Bot report released last month. Most of that activity is coming from LLMs. But the report also found that malicious bots now make up 37% of all internet traffic. That’s activity that includes everything from persistent scraping to unauthorized login attempts."

techcrunch.com/2025/08/05/some

TechCrunch · Some people are defending Perplexity after Cloudflare ‘named and shamed’ it | TechCrunchIn a debate likely to get louder as AI agent usage grows, some people say Perplexity crawling blocked websites isn't a simple matter.

KIMissbrauch

Cloudflare wirft dem KI-Anbieter ##Perplexity vor, sich mit undeklarierten Crawlern Zugang zu gesperrten Websites zu verschaffen.

Trotz robots.txt-Verboten und IP-Blockaden soll Perplexity mit wechselnden User-Agents und IPs Inhalte verdeckt auslesen.

Das wäre eine Verletzung etablierter Webstandards und Missachtung von Website-Präferenzen.

blog.cloudflare.com/perplexity

The Cloudflare Blog · Perplexity is using stealth, undeclared crawlers to evade website no-crawl directivesPerplexity is repeatedly modifying their user agent and changing IPs and ASNs to hide their crawling activity, in direct conflict with explicit no-crawl preferences expressed by websites.

»Tarnen und Täuschen – Perplexity umgeht gezielt Sperren und greift geschützte Inhalte ab:
Cloudflare hat Perplexity eine Falle gestellt – und die KI-Suchmaschine ist sofort hineingetappt. Das Vorgehen ähnle jenem nordkoreanischer Hacker, sagen Kritiker«

Die anderen KIs werden diesbezüglich sicherlich nicht viel anders sein. Somit wird verschlüsselte Übertragungen um so wichtiger.

🤖 derstandard.at/story/300000028

DER STANDARD · Perplexity umgeht gezielt Sperren und greift geschützte Inhalte abCloudflare hat Perplexity eine Falle gestellt – und die KI-Suchmaschine ist sofort hineingetappt. Das Vorgehen ähnle jenem nordkoreanischer Hacker, sagen Kritiker

#Cloudflare alleges that #Perplexity, an #AIsearch startup, is using “#stealthcrawling” techniques to access #blockedwebsites. Cloudflare claims Perplexity disguises its #crawlingidentity and uses rotating #IPaddresses to bypass restrictions. Perplexity denies the allegations, calling Cloudflare’s report a “publicity stunt”. theverge.com/news/718319/perpl #tech #media #news

An illustration of the Perplexity logo
The Verge · Cloudflare says Perplexity’s AI bots are ‘stealth crawling’ blocked sitesBy Emma Roth

#Cloudflare seems to have issues in Europe. How I noticed? Half of the web services I use weren't working. It's interesting how we build infrastructure with his highly redundant and yet there are still major "single" points of failure like CF, AWS and Google that can shut down half of the internet and you can't really do anything about it.

Age-Gating the Internet + #Cloudflare Takes On A.I. #Scrapers + #HatGPT

“Frankly, if they’re going to behave like #hackers , then we’re going to behave like #trolls right back to them,” said Matthew Prince, chief executive of Cloudflare
#ageverification #ai

nytimes.com/2025/08/01/podcast

The New York Times · Age-Gating the Internet + Cloudflare Takes On A.I. Scrapers + HatGPTBy Kevin Roose

Web sites I'm unable to visit today:

* Center for Democracy & Technology
* CircleID
* Lawfare (partial, e.g., /topics, /podcasts)
* NANOG (!@!? - this one is personal)

Presumably a #Cloudflare update with human verification code that doesn't work on my browser or a reclassification of my IP address(es) used only by an un-automated me to undesirable. This has happened before and it eventually goes away, but oh so annoying the meddlers-in-the-middle make what should be a simple Internet function fail. Cloudflare's own sites always work just fine.

On the bright side, the Tor browser always works in these cases when my own private path and software does not.

#OpenAI’s #ChatGPT Agent casually clicks through “I am not a robot” #verification test

"This step is necessary to prove I'm not a bot," wrote the bot as it passed an anti-AI screening step.

by Benj Edwards – Jul 28, 2025

"Maybe they should change the button to say, 'I am a robot'?

"On Friday, OpenAI's new ChatGPT Agent, which can perform multistep tasks for users, proved it can pass through one of the Internet's most common security checkpoints by clicking #Cloudflare's anti-bot verification—the same checkbox that's supposed to keep automated programs like itself at bay.

"#ChatGPTAgent is a feature that allows OpenAI's #AIAssistant to control its own web browser, operating within a #sandboxed environment with its own virtual operating system and browser that can access the real Internet. Users can watch the AI's actions through a window in the ChatGPT interface, maintaining oversight while the agent completes tasks. The system requires user permission before taking actions with real-world consequences, such as making purchases. Recently, Reddit users discovered the agent could do something particularly ironic.

"The evidence came from Reddit, where a user named "logkn" of the r/OpenAI community posted screenshots of the AI agent effortlessly clicking through the screening step before it would otherwise present a #CAPTCHA (short for "Completely Automated Public Turing tests to tell Computers and Humans Apart") while completing a video conversion task—narrating its own process as it went.

"A screenshot of OpenAI ChatGPT Agent showing the bot writing "The link is inserted, so now I'll click the 'Verify you are human' checkbox to complete the verification on Cloudflare. This step is necessary to prove I'm not a bot and proceed with the action."

"The screenshots shared on Reddit capture the agent navigating a two-step verification process: first clicking the "Verify you are human" checkbox, then proceeding to click a "Convert" button after the Cloudflare challenge succeeds. The agent provides real-time narration of its actions, stating "The link is inserted, so now I'll click the 'Verify you are human' checkbox to complete the verification on Cloudflare. This step is necessary to prove I'm not a bot and proceed with the action."

arstechnica.com/information-te

Ars Technica · OpenAI’s ChatGPT Agent casually clicks through “I am not a robot” verification testBy Benj Edwards