From debbugs-submit-bounces@debbugs.gnu.org Wed Dec 14 23:32:48 2022 Received: (at 59546-done) by debbugs.gnu.org; 15 Dec 2022 04:32:49 +0000 Received: from localhost ([127.0.0.1]:42323 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p5fvM-0005cE-IP for submit@debbugs.gnu.org; Wed, 14 Dec 2022 23:32:48 -0500 Received: from mail-qt1-f173.google.com ([209.85.160.173]:45906) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p5fvH-0005c2-EC for 59546-done@debbugs.gnu.org; Wed, 14 Dec 2022 23:32:46 -0500 Received: by mail-qt1-f173.google.com with SMTP id cg5so4280864qtb.12 for <59546-done@debbugs.gnu.org>; Wed, 14 Dec 2022 20:32:43 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:user-agent:message-id:in-reply-to:date:references :subject:cc:to:from:from:to:cc:subject:date:message-id:reply-to; bh=Zy3702cDMNx+fhM53s12IPogxKRY/1ubrf6oXrHnDOE=; b=Q2Xe2psrQg3Ec2//m+D2f1KeqY4NObMrpVysICW2UdKOZv9x3BDbx2N0k+m6ut8kHJ CMsXAOFCQoCcLfHwI8xj4Jw63q1uD038R3KT9eKKn0QJrAdlYSWAd1BKfX9VI0b+fCfq dJczw1lFjWyo8CBz+BkkHppjyqTeLNPVkES7ZHbb8R29nN3o3qcbi3xe6rZ8o7Dj8jC5 aNFopWdMHsZulVtvtHgTTfNyXryOsEolv+88t9xQjN7xaFyf34PlUvbDLzq0ACjn8NAt TrQQ1IUxd07f/fmp6+IQ6fO9C9FOFPx8rrhw1g+dGDLjqSoNg2tRnXczUC5oN9TZ0a+s TAdg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=mime-version:user-agent:message-id:in-reply-to:date:references :subject:cc:to:from:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=Zy3702cDMNx+fhM53s12IPogxKRY/1ubrf6oXrHnDOE=; b=SyI3rlyWAnqWUcO0kluysHhiB/76w5jJlYAKAt8nkp7nHQ+wNfFQHrExv/DXq7BTvj 5puQd8gOrEsTV6W1z068OymtW617ZjUeHF75hUmAPm+Ol/iJA/bKG9w13PVO5+FzsjCY nlKj+GsUOU1rF0nqaKzzsPn5AoxSacCvDO9wr8V/OBArsRKLR0il3qSW/gi48GrUkGUc wWfzdciI/WnYWs0+jsYMMoZ2C+94w7zwtCOBfe8LJkg+H/pj8n6b9BuV6Nuo/iHqNg08 7vcLnfloOBeDrbUqjhWQhLUheEqNcRo9yXqIhyhpJTTxqY0uM5RPAes6LZ0Svf0tR77a Uu7Q== X-Gm-Message-State: ANoB5pkO9QBGC1tr+R9ijCq2j/zmRV2STIkLib1bt52AhB5T/7ZORuK+ pw6YvO6AjVwqSh9sUX+wwlnwOwvtRyNSbkNc X-Google-Smtp-Source: AA0mqf69ukfISm+kz8ekyfcAEjm8ittYWLpfVIX7mEsAsJ3/u9xsLBalUbBbze68db8V7kAHKJ21Gw== X-Received: by 2002:a05:622a:4017:b0:3a5:8084:9f60 with SMTP id cf23-20020a05622a401700b003a580849f60mr38918453qtb.64.1671078757607; Wed, 14 Dec 2022 20:32:37 -0800 (PST) Received: from hurd (dsl-10-129-63.b2b2c.ca. [72.10.129.63]) by smtp.gmail.com with ESMTPSA id u13-20020a05620a430d00b006fbdeecad51sm11447514qko.48.2022.12.14.20.32.36 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 14 Dec 2022 20:32:37 -0800 (PST) From: Maxim Cournoyer To: "bdju" Subject: Re: bug#59546: qutebrowser and icecat stuck in infinite browser checks (cloudflare) on applicable sites References: Date: Wed, 14 Dec 2022 23:32:36 -0500 In-Reply-To: (bdju@tilde.team's message of "Thu, 24 Nov 2022 10:11:03 -0600") Message-ID: <87h6xxcmmz.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 59546-done Cc: 59546-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hello, "bdju" writes: > I have hit this issue before, but not in a while. I don't know for sure > when the issue came back as it only matters for the initial login or > visit of the offending sites, so if you manage to get past you'll be > good until your cookie expires or gets deleted somehow. I got logged out > of many sites in qutebrowser recently and was made aware of the issue > being back. I also tested in icecat where some sites I still had a > cookie, but I managed to find one with a browser check and it indeed > never completes (can leave it open hours or even more than a day). > Some sites to test with include: > https://www.livechart.me/ (must click login button, main page works) > https://www.gitlab.com/ (again must click log in to start the check) > > Since this is happening in both icecat and qutebrowser with different > user agents and everything, I suspect a guix-related issue. I found that > at least one other person on IRC was also experiencing the infinite > browser checks. I use a few sites daily that are now unusable on my Guix > System machine due to these browser checks, so a fix would be very much > appreciated if anyone could figure this out. I've had that too with Gitlab when using Icecat. Sadly, it has nothing to do with Guix but with how Cloudfare and the website identifies browsers. For example, I had found out that by using a Windows Firefox 83 user agent, I was able to login into Gitlab (using this plugin: https://gitlab.com/ntninja/user-agent-switcher). I reported the issue to Gitlab, and they could apparently fixed it on their side (not yet deployed) [0] [0] https://gitlab.com/gitlab-org/gitlab/-/issues/345328 I think other sites or CloudFare must be similarly faulty, or require fingerprinting which is guarded against out-of-the-box in IceCat. Closing, as I doubt Guix has something to do with it. If you find something to the contrary, let us know! -- Thanks, Maxim