User avatar
aei neofox_upside_down @aei@pleroma.envs.net
3d
yeah i'm done i'm gonna block all captchas
1
0
1
0
User avatar
aei neofox_upside_down @aei@pleroma.envs.net
3d
turnstile is simple enough but it's still a waste of time so i'm gonna block it too
my ublock filter list with some lines for blocking a bunch of bot firewalls
1
0
1
0
User avatar
aei neofox_upside_down @aei@pleroma.envs.net
3d
yeah ok so hcatpcha as like one trillion other ways to serve captchas
1
0
1
0
User avatar
aei neofox_upside_down @aei@pleroma.envs.net
3d
huh.

i just needed ||js.hcaptcha.com/$script,important to block everything, since https://js.hcaptcha.com/1/api.js is the first file fetched

would i keep the other rules? i’m more inclined to do so but removing them might be better
1
0
1
0
User avatar
aei neofox_upside_down @aei@pleroma.envs.net
3d
same for recaptcha, damn this might be so simple neofox
1
0
1
0
User avatar
aei neofox_upside_down @aei@pleroma.envs.net
3d
so for the big three, all you need is
||google.com/recaptcha/$script,important
||js.hcaptcha.com/$script,important
||challenges.cloudflare.com/turnstile/*$script,important




anubis is easier to block which i will only do out of personal grudge
1
0
1
0
User avatar
aei neofox_upside_down @aei@pleroma.envs.net
3d
i can block the javascript challenges but how do i block the non-js ones

yes im that mad
1
0
1
0
User avatar
illy [Shrimple-mode] protomoji_orange_flag_lesbian @illyBytes@shrimp.imsofucking.gay
3d
@aei non js challenges are serverside aren't they? so you'd need to break into the server to block them :3
1
0
1
0
User avatar
aei neofox_upside_down @aei@pleroma.envs.net
3d
@illyBytes what i know is anubis uses metarefresh which is a client challenge that doesn't use js. this seems like the fallback for the official anubis website if the proof of work fails to load

go-away has a lot more non-js ones that i haven't see yet but i doubt they're any different considering the point is adding overhead to the clientside
1
0
1
0
User avatar
illy [Shrimple-mode] protomoji_orange_flag_lesbian @illyBytes@shrimp.imsofucking.gay
3d
@aei oh weird, havent heard of metarefresh tbh
1
0
1
0
User avatar
aei neofox_upside_down @aei@pleroma.envs.net
3d
@illyBytes ive been having trouble catching it in practice but i can see some 302 after blocking scripts so i assume it's just that

and it is a documented thing

anubis.techaro.lol/docs/admin/configuration/challenges/metarefresh
0
0
1
0