The other day I had to disable content blockers to login to Hilton’s site. I figured this out on my own after support sent me 5 password reset links and told me I had to fill out the whole form manually and do it on my phone instead of on the laptop I was sitting at. No matter what I did, I’d get a generic error, until I turned off content blockers. It makes me wonder what they are doing behind the scenes.
It is part of what seems like a loosely coordinated effort to get verified platforms to be standard. Like device attestation so we can be more easily surveilled.
One odd thing with cloudflare is most sites are fine, and I click the box, but for some reason I go to some sites and they claim I have been blocked for bot like activity, which seems weird since it should be the same filter from the same provider.
Cloudflare isn’t just as simple as “bot” or “not a bot”. They give customers categories of how likely a request is to be automated (or a number for some enterprise plans)[1] and the customer decides what happens to your request (nothing, challenge, block, run a worker, etc).
> Banking application will force you to update even if it isn't security related.
This is fine. Not sure how that’s related to the rest of your post.
But for the rest of your post I agree with what you wrote. If a website is even vaguely annoying I just stop visiting. It seems like product managers forgot that friction is an issue. I can’t even access my ISP’s own website and get blocked by Cloudflare.
I worry about what would happen if CloudFlare decided I was an adversary, a massive amount of the internet would become completely inaccessible if I couldn't get past their annoying gateway!
Indeed, major platforms are becoming more and more closed, and many platforms have begun to not provide or delete website functions, allowing users to download apps before using them.
As for security-related platforms, I will only turn on those protection capabilities, such as banks, and other websites are not suitable!
And how really required are cookies for every webpage? I rewrote a friend's webpage from Wordpress to a static one, looks and acts exactly the same but needs no cookies and no banner. Because I've thrown out also the Google analytics - they're not selling anything so who cares (and if they will care, I'll add Simple Analytics).
CAPTCHAs increasingly prevent me from using websites that I've been using for years (none of them are in the top 10). I consider them that bad because they're locking me out of an ever-increasing portion of the web.
The other day I had to disable content blockers to login to Hilton’s site. I figured this out on my own after support sent me 5 password reset links and told me I had to fill out the whole form manually and do it on my phone instead of on the laptop I was sitting at. No matter what I did, I’d get a generic error, until I turned off content blockers. It makes me wonder what they are doing behind the scenes.
It is part of what seems like a loosely coordinated effort to get verified platforms to be standard. Like device attestation so we can be more easily surveilled.
One odd thing with cloudflare is most sites are fine, and I click the box, but for some reason I go to some sites and they claim I have been blocked for bot like activity, which seems weird since it should be the same filter from the same provider.
Cloudflare isn’t just as simple as “bot” or “not a bot”. They give customers categories of how likely a request is to be automated (or a number for some enterprise plans)[1] and the customer decides what happens to your request (nothing, challenge, block, run a worker, etc).
[1]: https://developers.cloudflare.com/bots/concepts/bot-score/#b...
We need something new fast.
Shake off all these brands and overly confident predators everywhere.
I’d love a reset. Better if there’s a technical step to keep mainstream out.
> Banking application will force you to update even if it isn't security related.
This is fine. Not sure how that’s related to the rest of your post.
But for the rest of your post I agree with what you wrote. If a website is even vaguely annoying I just stop visiting. It seems like product managers forgot that friction is an issue. I can’t even access my ISP’s own website and get blocked by Cloudflare.
> Cloudflare
Recently I noticed that many have broken their RSS feeds too by putting the feeds behind this CDN too.
The internet is no longer open. It's behind a series of apps. It's honestly more like AOL than the World Wide Web
So frustrating actually finding a site with an RSS feed, only to find that it's behind one of these "protections", waste of time.
I worry about what would happen if CloudFlare decided I was an adversary, a massive amount of the internet would become completely inaccessible if I couldn't get past their annoying gateway!
It's an even bigger issue for servers than clients, and CloudFlare's CEO understands how much power they have, and is also a bit concerned about that: https://www.cnbc.com/2017/08/17/cloudflare-ceo-says-removing...
VPN
I use Mullvad from time to time, a ton of sites block me when it’s active.
makes you more likely to get flagged, not less
I'm increasingly okay with that.
Like mom turning off the TV because I should be out running around.
It's not always frivolous stuff, like Upwork puts CloudFlare over searching and applying for work.
Indeed, major platforms are becoming more and more closed, and many platforms have begun to not provide or delete website functions, allowing users to download apps before using them. As for security-related platforms, I will only turn on those protection capabilities, such as banks, and other websites are not suitable!
- step 1: modify cookie laws to target browsers https://nednex.com/en/the-internets-biggest-annoyance-why-co...
Step 1: cookies disabled by default.
Step 2: make it illegal to show ads without consent. Disabled by default.
And how really required are cookies for every webpage? I rewrote a friend's webpage from Wordpress to a static one, looks and acts exactly the same but needs no cookies and no banner. Because I've thrown out also the Google analytics - they're not selling anything so who cares (and if they will care, I'll add Simple Analytics).
The only thing I run into in this list are CAPTCHAs and they're not that bad.
No, the Internet is not that broken; you just have to leave the Top 10 sites
CAPTCHAs increasingly prevent me from using websites that I've been using for years (none of them are in the top 10). I consider them that bad because they're locking me out of an ever-increasing portion of the web.