Re: [tor-bugs] #27848 [Applications/Tor Browser]: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not for 8.0.0

[Tor Bug Tracker & Wiki]

#27848: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not 
for
8.0.0
--+--
 Reporter:  cypherpunks_reply |  Owner:  tbb-team
 Type:  defect| Status:  closed
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:  fixed
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by boklm):

 * status:  needs_information => closed
 * resolution:   => fixed


Comment:

 According to people from Cloudflare, this should be fixed now.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #27848 [Applications/Tor Browser]: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not for 8.0.0

[Tor Bug Tracker & Wiki]

#27848: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not 
for
8.0.0
--+---
 Reporter:  cypherpunks_reply |  Owner:  tbb-team
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---

Comment (by gk):

 I pinged Cloudflare folks again.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #27848 [Applications/Tor Browser]: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not for 8.0.0

[Tor Bug Tracker & Wiki]

#27848: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not 
for
8.0.0
--+---
 Reporter:  cypherpunks_reply |  Owner:  tbb-team
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---

Comment (by gk):

 Replying to [comment:8 fuckingcf]:
 > Captcha seems to be broken (neverending) on Safer security settings.

 Could you give an example where this happens?

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #27848 [Applications/Tor Browser]: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not for 8.0.0

[Tor Bug Tracker & Wiki]

#27848: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not 
for
8.0.0
--+---
 Reporter:  cypherpunks_reply |  Owner:  tbb-team
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---

Comment (by fuckingcf):

 Captcha seems to be broken (neverending) on Safer security settings.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #27848 [Applications/Tor Browser]: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not for 8.0.0

[Tor Bug Tracker & Wiki]

#27848: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not 
for
8.0.0
--+---
 Reporter:  cypherpunks_reply |  Owner:  tbb-team
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---

Comment (by gk):

 I reached out to Cloudflare to get this fixed on their end.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #27848 [Applications/Tor Browser]: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not for 8.0.0

[Tor Bug Tracker & Wiki]

#27848: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not 
for
8.0.0
--+---
 Reporter:  cypherpunks_reply |  Owner:  tbb-team
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---
Changes (by traumschule):

 * cc: mahrud (added)
 * status:  new => needs_information


Comment:

 Cloudflare is all for TLS 1.3, so why the captcha?
 
 A Detailed Look at RFC 8446 (a.k.a. TLS 1.3) 10 Aug 2018 by Nick Sullivan
 https://blog.cloudflare.com/rfc-8446-aka-tls-1-3/
 > TLS 1.3 is a modern security protocol built with modern tools like
 formal analysis that retains its backwards compatibility. It has been
 tested widely and iterated upon using real world deployment data. It’s a
 cleaner, faster, and more secure protocol ready to become the de facto
 two-party encryption protocol online. Draft 28 of TLS 1.3 is enabled by
 default for all Cloudflare customers, and we will be rolling out the final
 version soon.
 > Publishing TLS 1.3 is a huge accomplishment. It is one the best recent
 examples of how it is possible to take 20 years of deployed legacy code
 and change it on the fly, resulting in a better internet for everyone. TLS
 1.3 has been debated and analyzed for the last three years and it’s now
 ready for prime time. Welcome, RFC 8446.
 
 FIXED in Firefox 52: CloudFlare triggers unsafe negotiation warning with
 TLS 1.3
 https://bugzilla.mozilla.org/show_bug.cgi?id=1305561

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #27848 [Applications/Tor Browser]: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not for 8.0.0

[Tor Bug Tracker & Wiki]

#27848: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not 
for
8.0.0
--+--
 Reporter:  cypherpunks_reply |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by cypherpunks_reply):

 * Attachment "After_TLSv1.2 - Copy.png" added.


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #27848 [Applications/Tor Browser]: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not for 8.0.0

[Tor Bug Tracker & Wiki]

#27848: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not 
for
8.0.0
--+--
 Reporter:  cypherpunks_reply |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by cypherpunks_reply):

 * Attachment "Before_TLSv1.3 - Copy.png" added.


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #27848 [Applications/Tor Browser]: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not for 8.0.0

[Tor Bug Tracker & Wiki]

#27848: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not 
for
8.0.0
--+--
 Reporter:  cypherpunks_reply |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by cypherpunks_reply):

 Adding screenshots of before and after the change showing the TLS version
 in the dev tools view.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #27848 [Applications/Tor Browser]: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not for 8.0.0

[Tor Bug Tracker & Wiki]

#27848: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not 
for
8.0.0
--+--
 Reporter:  cypherpunks_reply |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by cypherpunks_reply):

 If I go to about:config in 8.0.1 and change security.tls.version.max to 3
 from 4, blog.cloudflare.com will not block me with a captcha.

 See [https://gitweb.torproject.org/tor-browser.git/commit/?h=tor-
 browser-60.2.0esr-8.0-1=32b4b24c4cf56b9e88c7aae60c1db5affabd99b1 this
 change] which mentions bug #27535.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #27848 [Applications/Tor Browser]: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not for 8.0.0

[Tor Bug Tracker & Wiki]

#27848: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not 
for
8.0.0
--+--
 Reporter:  cypherpunks_reply |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by boklm):

 This might be related with the changes we did for #26146.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #27848 [Applications/Tor Browser]: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not for 8.0.0

[Tor Bug Tracker & Wiki]

#27848: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not 
for
8.0.0
--+--
 Reporter:  cypherpunks_reply |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by cypherpunks_reply):

 mitmflare does detect tor browser, this is not new (it has nothing to do
 with the mentioned alt-svc-based onion redirections), it exists since at
 least tor browser 7.x

 and it's not a trivial detection (like just the value of request headers),
 their fingerprint includes much more, it likely goes to the tls level,
 possibly to the tcp level

 if anyone knows details, I want to read them, thanks

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #27848 [Applications/Tor Browser]: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not for 8.0.0

[Tor Bug Tracker & Wiki]

#27848: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not 
for
8.0.0
--+--
 Reporter:  cypherpunks_reply |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by fuckingcf):

 UA changed.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #27848 [Applications/Tor Browser]: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not for 8.0.0

[Tor Bug Tracker & Wiki]

#27848: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not 
for
8.0.0
--+--
 Reporter:  cypherpunks_reply |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by cypherpunks_reply):

 * Attachment "8.0.1 - Copy.png" added.

 8.0.1

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #27848 [Applications/Tor Browser]: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not for 8.0.0

[Tor Bug Tracker & Wiki]

#27848: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not 
for
8.0.0
--+--
 Reporter:  cypherpunks_reply |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by cypherpunks_reply):

 * Attachment "8.0.0 - Copy.png" added.

 8.0.0

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs