While Cloudflare, as well as Anubis and other "anti-bot solutions", do behave like MitM, they only become a MitM in two situations:- When the webmaster injects one of those third-party malware into their website.- Very unlikely, when the network administrator (e.g. the wi-fi from a library or university) is deliberately acting as a MitM through a transparent proxy, and it's somehow using Cloudflare.As for me, personally, I don't see these anymore. I built myself an userscript (FireMonkey), targeted at every domain, programmed to do a window.close() (close the tab) if the title is one of the strings "Just a moment..." (Cloudflare), "Making sure you're not a bot!" (Anubis), "Cookie monster!" (also Anubis), "Checking you are not a bot" (some Anubis fork) or "One more step" (Google recaptcha). If the title matches, the tab is closed before any non-consented cryptographic challenge (i.e. those "solutions" don't even dare to ask for user consent before "checking the browser", therefore it's a non-consented relationship and a behavior indistinguishable that of a malware) starts to overwhelm my decade-old laptop CPU.Yes, this means I'm not having access to whatever content is behind the wannabe-cryptojacking tool, but if the webmaster does not respect my personal device and my right to consent (i must emphasize: all those "solutions" start straining the CPU with cryptographic challenges as soon as the user accesses the page, without asking for user consent beforehand, therefore it's a non-consented relationship and a malware-like behavior), I can't help but speed-run my search for the exit door. I'm not submitting myself and my personal device to malware (the webmaster pushing CF/Anubis/etc to non-consentedly run on my laptop ain't gonna buy another laptop for me if mine died so I'm better as far as possible from their website).!privacy@lemmy.ml
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
replies: