Anybody having problems with Messicks web site, being blocked by Cloudflare?

TheOldHokie

Well-known member
Lifetime Member

Equipment
L3901/LA525, G2160/RCK60, G2460/RCK60
Apr 6, 2021
11,871
6,751
113
Myersville, MD
windyridgefarm.us
I think I read post # 1 of this thread but my "OLDTIMERS" is rearing it's ugly head therefore I can't remember if I read post #1 of this thread but that wouldn't have affected my reply if I had remembered reading 1st reply!!;)
I operate in similar conditions. Let me recap if I can.

  1. The initial problem focused on Messicks. He could access them from evrrything but his Huawej browser.
  2. The problem was expanded to include all Cloudflare fronted sites except SourceFoege
  3. His main problem seems to be with reCaptcha v3 authentication - e.g I am a human (sic). The challenge does not complete in his Huawei browser.
  4. Presumably he reeived that challenge from SourceForge and it did complete.
I think I have that right but maybe not.

Dan
 
Last edited:

Hugo Habicht

Well-known member
Lifetime Member

Equipment
G1900
Jun 24, 2024
1,439
2,025
113
Ireland
I operate in similar conditions. Let me rexap 9c I csn

  1. The initial ptiblem focused on Messicks. He could access them from evrrything but his Huawej browser.
  2. The problem was expanded to include all Cloudflare fronted sites except SourceFoege
  3. His main problem seems to be with reCaptcha v3 authentication - e.g I am a human (sic). The challenge does not complete in his Huawei browser.
  4. Presumably he reeived that challenge from SourceForge snd it did complete.
I think I have that right but maybe not.
Correct, apart from #1 maybe. On pretty much 90% of Cloudflare web sites I end in a loop.

Only reason I mentioned Messicks is that this is a Kubota web site (and I wanted to order parts), so chances are high to find somebody with the same problem and find the common denominator. Headline may be misleading, I clarified it.
 

TheOldHokie

Well-known member
Lifetime Member

Equipment
L3901/LA525, G2160/RCK60, G2460/RCK60
Apr 6, 2021
11,871
6,751
113
Myersville, MD
windyridgefarm.us
Correct, apart from #1 maybe. On pretty much 90% of Cloudflare web sites I end in a loop.

Only reason I mentioned Messicks is that this is a Kubota web site, so chances are high to find somebody with the same problem and find the common denominator. Headline may be misleading, I clarified it.
So di you know how that challenge works? I assume its sctually "I am not a robot".
 

Hugo Habicht

Well-known member
Lifetime Member

Equipment
G1900
Jun 24, 2024
1,439
2,025
113
Ireland
So di you know how that challenge works? I assume its sctually "I am not a robot".
I think I do know how the challenge works. First I get "Verifying...". Then the question is "Verify you are human". When I tick the box, I am back to "Verifying...".

I thought already that maybe this is an intelligence test and they count how often a person clicks on it 🤣
 

Attachments

jimh406

Well-known member
Lifetime Member

Equipment
Kubota L2501 with R4 tires
Jan 29, 2021
2,877
2,292
113
Western MT
Nope, problem cannot be solved on my side. And I am not the only one as I learned in this thread.
I'm assuming your Huawei is an android. Why not install Chrome? Chrome should be available even if it's some other OS.

I find it useful to have more than one browser for occasional website issues.
 

Hugo Habicht

Well-known member
Lifetime Member

Equipment
G1900
Jun 24, 2024
1,439
2,025
113
Ireland
I'm assuming your Huawei is an android. Why not install Chrome? Chrome should be available even if it's some other OS.

I find it useful to have more than one browser for occasional website issues.
Anything browser from google is out of the question. I know Android is also from google, but the OS is (hopefully) not doing the spying.

I may give Firefox another try though.
 

TheOldHokie

Well-known member
Lifetime Member

Equipment
L3901/LA525, G2160/RCK60, G2460/RCK60
Apr 6, 2021
11,871
6,751
113
Myersville, MD
windyridgefarm.us
I think I do know how the challenge works. First I get "Verifying...". Then the question is "Verify you are human". When I tick the box, I am back to "Verifying...".
Not exactly what I meant :)

This challenge is usually a Google service. The server loads a welcome page with that challenge box and some canned javascript. Before you do anything that javascript is running in browser building a proifile of you and your system. That profile includes your browsing history among other things. Then when you move the mouse to click thd box it times and tracks your mouse movements. All of that is encoded and encryoted and sent to the web server. The server forwards that response to a pool of special Google servers that run a complex and poprietary analyisis to determine if it indicates a human or if you might have visted a bad guys site. Google returns a "risk score" to the server. Based on the risk score and policies set by the server admins you are cleared for entry or not. If your risk score is iffy the server may present a new different challenge - e.g. "click on all pictures of cats".

There are a lot of players here and in your case you dont even know if the browser has completed that first step. Maybe it is hung trying to execute that javascript and isnt even responding to the challenge. The fact that your problem is confined to an obscure Huawei browser makes me suspect something like that.

Dan
 
Last edited:

Russell King

Well-known member
Lifetime Member

Equipment
L185F, Modern Ag Competitor 4’ shredder, Rhino tiller, rear dirt scoop
Jun 17, 2012
7,417
2,792
113
Austin, Texas
To bring up the conspiracy theories about Huawei…(if my memory holds)

They were trying to put in a phone network in the USA. That was blocked by the US government due to concerns over spying and data collection on the service.

Therefore, I would assume that there is some type of embedded software/firmware that is setting off security concerns inside Cloudflare or whoever is the handshake intermediary.

I find it interesting that @Hugo Habicht does NOT trust Google but does use Huawei products. I don’t trust either of them really but use Google services since it has become so pervasive on the internet.
 
  • Like
Reactions: 1 user

TheOldHokie

Well-known member
Lifetime Member

Equipment
L3901/LA525, G2160/RCK60, G2460/RCK60
Apr 6, 2021
11,871
6,751
113
Myersville, MD
windyridgefarm.us
To bring up the conspiracy theories about Huawei…(if my memory holds)

They were trying to put in a phone network in the USA. That was blocked by the US government due to concerns over spying and data collection on the service.

Therefore, I would assume that there is some type of embedded software/firmware that is setting off security concerns inside Cloudflare or whoever is the handshake intermediary.

I find it interesting that @Hugo Habicht does NOT trust Google but does use Huawei products. I don’t trust either of them really but use Google services since it has 9th become so pervasive on the internet.
Or perhaps someone has sandboxed themselves so completely they have broken the Google service. :unsure:
 

Hugo Habicht

Well-known member
Lifetime Member

Equipment
G1900
Jun 24, 2024
1,439
2,025
113
Ireland
The fact that your problem is confined to an obscure Huawei browser makes me suspect something like that.
With all due respect, Huawei is one of the biggest telecommunication companies in the world and the third largest mobile phone manufacturer. This is not "an obscure browser".
 

Hugo Habicht

Well-known member
Lifetime Member

Equipment
G1900
Jun 24, 2024
1,439
2,025
113
Ireland
I find it interesting that @Hugo Habicht does NOT trust Google but does use Huawei products. I don’t trust either of them really but use Google services since it has become so pervasive on the internet.
Well, Huawei may be spying (although no evidence ever has been presented by the US to back up those claims) but google software is definitely spying. ;)

But you are right, anything apart from open source (which I normally use) cannot be trusted. The Huawei tablet I use because it was cheap, it works incredibly well and I only use it as a web browser and camera without any personal information on it. I could not see any suspicious data traffic in the past when I checked.
 

TheOldHokie

Well-known member
Lifetime Member

Equipment
L3901/LA525, G2160/RCK60, G2460/RCK60
Apr 6, 2021
11,871
6,751
113
Myersville, MD
windyridgefarm.us
With all due respect, Huawei is one of the biggest telecommunication companies in the world and the third largest mobile phone manufacturer. This is not "an obscure browser".
Now thats just plain silly.

Huawei is a big telecommunications company whose gear is now banned in the US and a few other countries. The wisdom of that policy is debatable.

But Chrome, Safari. Edge, and Firefox, in that order dominate browser usage world wide. All the others combined only constitute about 2%. The Huawei browser isnt even a blip on the usage tracking radar.

Dan
 

Hugo Habicht

Well-known member
Lifetime Member

Equipment
G1900
Jun 24, 2024
1,439
2,025
113
Ireland
But Chrome, Safari. Edge, and Firefox, in that order dominate browser usage world wide. All the others combined only constitute about 2%. The Huawei browser isnt even a blip on the usage tracking radar.
That you cannot know. They use "Mozilla" as user agent string.
 

TheOldHokie

Well-known member
Lifetime Member

Equipment
L3901/LA525, G2160/RCK60, G2460/RCK60
Apr 6, 2021
11,871
6,751
113
Myersville, MD
windyridgefarm.us
That you cannot know. They use "Mozilla" as user agent string.
Hugo I was around when Tim Berners-Lee released the specicafications for HTTP 0.9 and HTML 1.0

I was there when Marc Andreesen wrote Mosaic.

I am not uninformed.

In some sense the Mozilla code base is the basis for many (most) modern day browsers. Its branched numerous times and different developers have followed different branches. Mozilla owns Firefox so its probably the purest dirivitivd.

But Chrome, Safari, Edge, and Firefox are are distinct products with a lot of additional code and their own features.. Chrome, Edge, and Firefox are all Blink based. Safari uses an Apple developed engine.

Web developers view these products as distinct entities with distinct behaviors. Thsts why the User-Agent tag was added to HTML very early on. What a browser puts in that string is arbitrary and in many cases meant to elicit legacy behavior from servers.

All that aside we are no closer to explaining your problem with a captcha that works for virtually everybody else in the world. It even works for you in a different browser. Thats probably going to take the services of a real analyst with hands on access to a machine exhibiting the behavior.

Dan
 
  • Haha
Reactions: 1 user

Russell King

Well-known member
Lifetime Member

Equipment
L185F, Modern Ag Competitor 4’ shredder, Rhino tiller, rear dirt scoop
Jun 17, 2012
7,417
2,792
113
Austin, Texas
@Hugo Habicht
I use Duck Duck Go since it supposedly does little tracking. It has other problems like it doesn’t have any history of where you have gone so you can’t just go back to some site if you want and the auto type doesn’t work well if you backspace while typing. But then again I may just not know how to use it well! It did solve a lot of issues with pop up ads on this forum though.
 
  • Like
Reactions: 1 user

Hugo Habicht

Well-known member
Lifetime Member

Equipment
G1900
Jun 24, 2024
1,439
2,025
113
Ireland
@Hugo Habicht
I use Duck Duck Go since it supposedly does little tracking. It has other problems like it doesn’t have any history of where you have gone so you can’t just go back to some site if you want and the auto type doesn’t work well if you backspace while typing. But then again I may just not know how to use it well! It did solve a lot of issues with pop up ads on this forum though.
I am using duckduckgo as well for years now. Also leads often to better results when searching for products because they are not biased by protection money like google & Co.
 
  • Like
Reactions: 1 user

TheOldHokie

Well-known member
Lifetime Member

Equipment
L3901/LA525, G2160/RCK60, G2460/RCK60
Apr 6, 2021
11,871
6,751
113
Myersville, MD
windyridgefarm.us
Yep, I'm sure a few of us here were in the industry when the browser wars started or as some would say, before they started. ;)



To be clear, I'm not laughing at you.
I think its a pretty small community 😊That was almost 40 years ago and the "internet" could still be mapped on a piece of paper.

I had PSN-19 (NBS) down there in the bottom right. That was just before NSFnet was deployed. We had three 56KB (Bell 303) links to NSA, Aberdeen, and the Pentagon. Aberdeen was a royal PITA because they had ordanance tests in the wee hours and would often call me at 1-2 AM to reboot the node if their link went down. I still have a TU-55 boot tape as a reminder of a kinder friendlier "internet."

1000005167.gif
 
  • Like
Reactions: 1 user