From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp10.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id SIHFOaCjmmMiBgEAbAwnHQ (envelope-from ) for ; Thu, 15 Dec 2022 05:33:37 +0100 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp10.migadu.com with LMTPS id uP3POKCjmmMPMAAAG6o9tA (envelope-from ) for ; Thu, 15 Dec 2022 05:33:36 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id D5F0A2AD75 for ; Thu, 15 Dec 2022 05:33:35 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1p5fvc-0006vt-9A; Wed, 14 Dec 2022 23:33:04 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1p5fvb-0006vj-H7 for bug-guix@gnu.org; Wed, 14 Dec 2022 23:33:03 -0500 Received: from debbugs.gnu.org ([209.51.188.43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1p5fvb-0006S0-8R for bug-guix@gnu.org; Wed, 14 Dec 2022 23:33:03 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1p5fva-0005cW-Mj for bug-guix@gnu.org; Wed, 14 Dec 2022 23:33:02 -0500 Subject: bug#59546: qutebrowser and icecat stuck in infinite browser checks (cloudflare) on applicable sites Resent-From: Maxim Cournoyer Original-Sender: "Debbugs-submit" Resent-To: bug-guix@gnu.org Resent-Date: Thu, 15 Dec 2022 04:33:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: cc-closed 59546 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: "bdju" Cc: 59546-done@debbugs.gnu.org Mail-Followup-To: 59546@debbugs.gnu.org, maxim.cournoyer@gmail.com, bdju@tilde.team Received: via spool by 59546-done@debbugs.gnu.org id=D59546.167107876921594 (code D ref 59546); Thu, 15 Dec 2022 04:33:02 +0000 Received: (at 59546-done) by debbugs.gnu.org; 15 Dec 2022 04:32:49 +0000 Received: from localhost ([127.0.0.1]:42323 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p5fvM-0005cE-IP for submit@debbugs.gnu.org; Wed, 14 Dec 2022 23:32:48 -0500 Received: from mail-qt1-f173.google.com ([209.85.160.173]:45906) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p5fvH-0005c2-EC for 59546-done@debbugs.gnu.org; Wed, 14 Dec 2022 23:32:46 -0500 Received: by mail-qt1-f173.google.com with SMTP id cg5so4280864qtb.12 for <59546-done@debbugs.gnu.org>; Wed, 14 Dec 2022 20:32:43 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:user-agent:message-id:in-reply-to:date:references :subject:cc:to:from:from:to:cc:subject:date:message-id:reply-to; bh=Zy3702cDMNx+fhM53s12IPogxKRY/1ubrf6oXrHnDOE=; b=Q2Xe2psrQg3Ec2//m+D2f1KeqY4NObMrpVysICW2UdKOZv9x3BDbx2N0k+m6ut8kHJ CMsXAOFCQoCcLfHwI8xj4Jw63q1uD038R3KT9eKKn0QJrAdlYSWAd1BKfX9VI0b+fCfq dJczw1lFjWyo8CBz+BkkHppjyqTeLNPVkES7ZHbb8R29nN3o3qcbi3xe6rZ8o7Dj8jC5 aNFopWdMHsZulVtvtHgTTfNyXryOsEolv+88t9xQjN7xaFyf34PlUvbDLzq0ACjn8NAt TrQQ1IUxd07f/fmp6+IQ6fO9C9FOFPx8rrhw1g+dGDLjqSoNg2tRnXczUC5oN9TZ0a+s TAdg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=mime-version:user-agent:message-id:in-reply-to:date:references :subject:cc:to:from:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=Zy3702cDMNx+fhM53s12IPogxKRY/1ubrf6oXrHnDOE=; b=SyI3rlyWAnqWUcO0kluysHhiB/76w5jJlYAKAt8nkp7nHQ+wNfFQHrExv/DXq7BTvj 5puQd8gOrEsTV6W1z068OymtW617ZjUeHF75hUmAPm+Ol/iJA/bKG9w13PVO5+FzsjCY nlKj+GsUOU1rF0nqaKzzsPn5AoxSacCvDO9wr8V/OBArsRKLR0il3qSW/gi48GrUkGUc wWfzdciI/WnYWs0+jsYMMoZ2C+94w7zwtCOBfe8LJkg+H/pj8n6b9BuV6Nuo/iHqNg08 7vcLnfloOBeDrbUqjhWQhLUheEqNcRo9yXqIhyhpJTTxqY0uM5RPAes6LZ0Svf0tR77a Uu7Q== X-Gm-Message-State: ANoB5pkO9QBGC1tr+R9ijCq2j/zmRV2STIkLib1bt52AhB5T/7ZORuK+ pw6YvO6AjVwqSh9sUX+wwlnwOwvtRyNSbkNc X-Google-Smtp-Source: AA0mqf69ukfISm+kz8ekyfcAEjm8ittYWLpfVIX7mEsAsJ3/u9xsLBalUbBbze68db8V7kAHKJ21Gw== X-Received: by 2002:a05:622a:4017:b0:3a5:8084:9f60 with SMTP id cf23-20020a05622a401700b003a580849f60mr38918453qtb.64.1671078757607; Wed, 14 Dec 2022 20:32:37 -0800 (PST) Received: from hurd (dsl-10-129-63.b2b2c.ca. [72.10.129.63]) by smtp.gmail.com with ESMTPSA id u13-20020a05620a430d00b006fbdeecad51sm11447514qko.48.2022.12.14.20.32.36 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 14 Dec 2022 20:32:37 -0800 (PST) From: Maxim Cournoyer References: Date: Wed, 14 Dec 2022 23:32:36 -0500 In-Reply-To: (bdju@tilde.team's message of "Thu, 24 Nov 2022 10:11:03 -0600") Message-ID: <87h6xxcmmz.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: bug-guix-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1671078816; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:resent-to:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=Zy3702cDMNx+fhM53s12IPogxKRY/1ubrf6oXrHnDOE=; b=Mkc+0oKbu8rqjMbWeMrpHwZ+T6iqqfSEjpIb7Lsxi/8DcFbHXWYa448o0KMGhyzwCtm+IX de8jnN5P2NMA+wJM7oUutafDnG0r7VqFT8Ke18dd755P+hN3zjSBxKAaWgz+CiplFXGCjM 0bZEjdyf953MZt4wff/qaxHOavFijVvcYM2Je94nozEuRkrMNp5Es06Hqm4OJLZB3z0DOT VSBEhN7DUO9pfpx8pGozNw/QPB3axI98uzodYr5JlNVSBxR+s9dGSaQAI7P7nRp+m5eVhs g9RpYp1gya55ZD8UAN9nyc0DQte9LUrojkfD+zO5yOWNX9AHFkbw14ma7QragQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20210112 header.b=Q2Xe2psr; spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none) ARC-Seal: i=1; s=key1; d=yhetil.org; t=1671078816; a=rsa-sha256; cv=none; b=MEqw6r9MQS1lwYI7dX2IT0C0AF5UcWef1bnEWYbFXAADt2cJKF1KT2Pf7whQ4B3tpCRUtM qetsOBlWSNk5VvIUZcwMLQMXvgdVL2+p7h1v/ZRhnmizjMbb5cSSzr5vp80Wi9/p+g/RSm 2Rjg58sslOrNZwmHAeK+KA+/GFllipOrxRkPUs6AqkH7q1/6r+wPYGW+KzkuyhPGg/0Jnu w6DmkJTN9BU3dag93CH0bbkXFzyaL46L+JlOgoE2n5XKphi5MWv7L1ILZa+gqNgCz42DcN o+g6muhmNE/OnoWSMhszK7RqH/+m6ywBom1sNonT7+X0xVekXWCwhzvVt48uWA== X-Migadu-Spam-Score: -1.88 X-Spam-Score: -1.88 X-Migadu-Queue-Id: D5F0A2AD75 X-Migadu-Scanner: scn1.migadu.com Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20210112 header.b=Q2Xe2psr; spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none) X-TUID: sG3TK1S/ErbD Hello, "bdju" writes: > I have hit this issue before, but not in a while. I don't know for sure > when the issue came back as it only matters for the initial login or > visit of the offending sites, so if you manage to get past you'll be > good until your cookie expires or gets deleted somehow. I got logged out > of many sites in qutebrowser recently and was made aware of the issue > being back. I also tested in icecat where some sites I still had a > cookie, but I managed to find one with a browser check and it indeed > never completes (can leave it open hours or even more than a day). > Some sites to test with include: > https://www.livechart.me/ (must click login button, main page works) > https://www.gitlab.com/ (again must click log in to start the check) > > Since this is happening in both icecat and qutebrowser with different > user agents and everything, I suspect a guix-related issue. I found that > at least one other person on IRC was also experiencing the infinite > browser checks. I use a few sites daily that are now unusable on my Guix > System machine due to these browser checks, so a fix would be very much > appreciated if anyone could figure this out. I've had that too with Gitlab when using Icecat. Sadly, it has nothing to do with Guix but with how Cloudfare and the website identifies browsers. For example, I had found out that by using a Windows Firefox 83 user agent, I was able to login into Gitlab (using this plugin: https://gitlab.com/ntninja/user-agent-switcher). I reported the issue to Gitlab, and they could apparently fixed it on their side (not yet deployed) [0] [0] https://gitlab.com/gitlab-org/gitlab/-/issues/345328 I think other sites or CloudFare must be similarly faulty, or require fingerprinting which is guarded against out-of-the-box in IceCat. Closing, as I doubt Guix has something to do with it. If you find something to the contrary, let us know! -- Thanks, Maxim