Project

General

Profile

Actions
Copy link

Feature #527

open

Privacy Browser + Orbot is being blocked by CloudFlare

Added by GNU User over 3 years ago. Updated almost 3 years ago.

Status:
New
Priority:
4.x
Assignee:
Soren Stoutner
Start date:
02/04/2020
Due date:
% Done:

0%

Estimated time:

Description

Accessing websites using Tor Browser (in both Desktop or Android version) works, but when using Privacy Browser + Orbot VPN the CloudFlare system block the access. I have changed the user-agent to match the Tor Browser user-agent, but even so it happens. I have tried with both cookies enabled and disabled. Is there anything that can be done to avoid Privacy Browser having a different fingerprint and not be blocked?

An example: tvshows4mobile.net

Sorry for the example provided, but it's the last one that I rememer having this issue in.

Files

Domain For Sale.png (319 KB) Domain For Sale.png Soren Stoutner, 02/04/2020 04:17 PM
Actions
Copy link
 #1

Updated by Soren Stoutner over 3 years ago

When I attempted to load tvshows4mobile.net directly (without going through Tor) to test this problem, the page initially loaded blank, because it was blocked by EasyList. After EasyList was disabled, a domain-for-sale page loaded (see screenshot). Note that the URL automatically redirected to http://ww17.tvshows4mobile.net.

Do you have a different domain that exhibits these problems I can test with?

Actions
Copy link
 #2

Updated by GNU User over 3 years ago

Hello,

I am terribly sorry, I mixed two different domains

https://mobiletvshows.net/
https://tvshows4mobile.com/

These were the correct ones. I have tried disabling all lists and still happens the same btw.

Actions
Copy link
 #3

Updated by Soren Stoutner over 3 years ago

  • Priority changed from 3.x to 4.x

Cloudflare is subjecting all traffic from known Tor exit nodes to a CAPTCHA. You can verify this by using Orbot in VPN mode and trying a number of browsers (Chrome, Firefox, Lightning, FOSS Browser).

However, a year ago Cloudflare created a mechanism for the Tor Browser to automatically redirect normal URLs to .onion URLs that don't product the CAPTCHA. You can read about it here:

https://blog.cloudflare.com/cloudflare-onion-service/

There isn't anything I can do about it in Privacy Browser with the current WebView, but it would be possible to enable similar functionality in Privacy WebView in the 4.x series.

Actions
Copy link
 #4

Updated by Soren Stoutner almost 3 years ago

  • Tracker changed from Bug to Feature
Actions
Copy link

Also available in: Atom PDF