Comment by userbinator
5 hours ago
"The walls have ears."
Personally I would be careful about poking this bear so publicly. All it does is accelerate escalation and cause those of us who have been subjected to user-agent discrimination and found our own workarounds even more difficulty.
With the rise of AI, this point may be moot, but this is still a war and anything you make public can and will be used against you.
Cloudflare can't win in the long term. The rest of the world just has too much resources compared to them.
This is a war yes but Cloudflare already lost it. Cloudflare bypass is the hello world of bots, they just keep hobbists out, at most.
I don't think they lost anything. They just need to keep up with them a bit better.
I really wouldn't worry about this. People are already doing much more advanced, compute cycle intensive cloudflare bypasses with things like playwright + camoufox:
https://github.com/daijro/camoufox
There are various headless antidetect browsers now which are patched at the source code level to avoid headless-browser-detection systems, and to present consistent profiles for things like webrtc/webasssembly capability and other features that looks like a legit normal user agent of someone running MS Edge on Windows 11 on a consumer grade laptop. Or whatever the desired profile is. Often coupled with residential or mobile carrier proxies.
I mean, take a look at this and tell me if you think a cloudflare turnstile stands a chance when you are ready to spend the CPU cycles on running an entire browser and human-behavior simulation stack:
https://pypi.org/project/behavioral-playwright/