From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id 2A2yHMYVm2NVHgEAbAwnHQ (envelope-from ) for ; Thu, 15 Dec 2022 13:40:38 +0100 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id cMuxHMYVm2NZlwAA9RJhRA (envelope-from ) for ; Thu, 15 Dec 2022 13:40:38 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id C2E3C7B4B for ; Thu, 15 Dec 2022 13:40:37 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1p5nXC-00036I-2U; Thu, 15 Dec 2022 07:40:25 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1p5nWt-00033p-NK for bug-guix@gnu.org; Thu, 15 Dec 2022 07:40:05 -0500 Received: from debbugs.gnu.org ([209.51.188.43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1p5nWs-0008Ir-Uf for bug-guix@gnu.org; Thu, 15 Dec 2022 07:40:03 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1p5nWs-0005Ry-DQ for bug-guix@gnu.org; Thu, 15 Dec 2022 07:40:02 -0500 X-Loop: help-debbugs@gnu.org Subject: bug#59546: qutebrowser and icecat stuck in infinite browser checks (cloudflare) on applicable sites Resent-From: "bdju" Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Thu, 15 Dec 2022 12:40:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 59546 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: "Maxim Cournoyer" Cc: 59546-done@debbugs.gnu.org Received: via spool by 59546-done@debbugs.gnu.org id=D59546.167110800020940 (code D ref 59546); Thu, 15 Dec 2022 12:40:02 +0000 Received: (at 59546-done) by debbugs.gnu.org; 15 Dec 2022 12:40:00 +0000 Received: from localhost ([127.0.0.1]:42911 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p5nWq-0005Rg-7W for submit@debbugs.gnu.org; Thu, 15 Dec 2022 07:40:00 -0500 Received: from tilde.team ([198.50.210.248]:43964 ident=postfix) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p5nWm-0005Ra-Bv for 59546-done@debbugs.gnu.org; Thu, 15 Dec 2022 07:39:59 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=tilde.team; s=mail; t=1671107995; bh=l/IEmOUQa0sf3ltw3wg6He82oDKb+vfpKVuUTVeckkc=; h=Date:Subject:From:To:Cc:References:In-Reply-To:From; b=Ab7gJV+0yok5QDSH9vo2XXIiKvH5eaBYgO/9hy3TsZUL6PL2LlNp9hSA/232edHJT pNwICL5JGk21B2LNpYkoJwbtvkZ8YaY7UcNymgRcmHy2O1eaBjZHs9xfH4Dx8gjCOV DO+oaRcen0puJBvojwIMisFaRy81EL6g3Vb5fTYs= Received: from localhost (unknown [63.228.59.248]) by tilde.team (Postfix) with ESMTPSA id 5D8CA4C092E; Thu, 15 Dec 2022 12:39:55 +0000 (UTC) Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=UTF-8 Date: Thu, 15 Dec 2022 06:39:54 -0600 Message-Id: X-Mailer: aerc 0.11.0 References: <87h6xxcmmz.fsf@gmail.com> In-Reply-To: <87h6xxcmmz.fsf@gmail.com> X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: "bdju" From: "bdju" via Bug reports for GNU Guix Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: bug-guix-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1671108038; h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=zYcfxAG/dIcuyzDutyipMridz0x1TtMBl2xgfD3GlZo=; b=ekvhpVXNeoQKrUDTQb8Ft8CHFLA8jb7olTs68tlmVn5Fcij87fOnWj6Hxdb7KNzf9yjJUe g1BxaGDr7LbkdZEa0vf1sSxB9eydG2jyZCqk/whD9YK7P1PWBppew6ZTy/37brVTMDvZhB /eMfNl5zYuvjX9yLhLBwfuH7/FrqEdGj+PPU++u7fyexelgDF3NVOH8/pIwlvJ3GVfflmo LlpQHCagDK8zeZyzjzlp1YaxsnpvUQQ6Aftjx+2UcRudDv7AL9vGH28G2IexkRKXYmPaFn 27CnQVVUPg4wuQ0zBt1Oe5YH0Hvzx4Z37HM0l79zEafQ07y5SuMOSYFvzFK05w== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=tilde.team header.s=mail header.b=Ab7gJV+0; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org" ARC-Seal: i=1; s=key1; d=yhetil.org; t=1671108038; a=rsa-sha256; cv=none; b=Ycc/AeoxyDA0+qGyb9L+vtjnauQnwq10PeOw/qSk11WcRIUe4wXVuh8oJXqUhK6XZZFaTY NVOvagU/3mqjxTsJFbIqW3W5501/hrvghpztRPloqVk47zQBw/Im8oj4d93V611OuRtn4o PJeC4jwIGOB3XSSCwjW7KTdMZYc2zTeDcGPlmPipygouc6oUqQ0BIFHYUGgMkf3Exo5enY QbJLVGmaqzzkSCpgpMhgzfsRzBh19xm9wdY7fCsGKxIcXdU/Ikh6mcXX7p7MlLnY68gg99 NdUzHk1sICE6xCJyFODXHgcFKipaFwat6yOD66gZrvejwyYWfqR9IxTp8lc5nQ== X-Spam-Score: -2.48 X-Migadu-Queue-Id: C2E3C7B4B X-Migadu-Scanner: scn1.migadu.com Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=tilde.team header.s=mail header.b=Ab7gJV+0; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -2.48 X-TUID: J//p9xTezxis On Wed Dec 14, 2022 at 10:32 PM CST, Maxim Cournoyer wrote: > Hello, > > "bdju" writes: > > > I have hit this issue before, but not in a while. I don't know for sure > > when the issue came back as it only matters for the initial login or > > visit of the offending sites, so if you manage to get past you'll be > > good until your cookie expires or gets deleted somehow. I got logged ou= t > > of many sites in qutebrowser recently and was made aware of the issue > > being back. I also tested in icecat where some sites I still had a > > cookie, but I managed to find one with a browser check and it indeed > > never completes (can leave it open hours or even more than a day). > > > Some sites to test with include: > > https://www.livechart.me/ (must click login button, main page works) > > https://www.gitlab.com/ (again must click log in to start the check) > > > > Since this is happening in both icecat and qutebrowser with different > > user agents and everything, I suspect a guix-related issue. I found tha= t > > at least one other person on IRC was also experiencing the infinite > > browser checks. I use a few sites daily that are now unusable on my Gui= x > > System machine due to these browser checks, so a fix would be very much > > appreciated if anyone could figure this out. > > I've had that too with Gitlab when using Icecat. Sadly, it has nothing > to do with Guix but with how Cloudfare and the website identifies > browsers. > > For example, I had found out that by using a Windows Firefox 83 user > agent, I was able to login into Gitlab (using this plugin: > https://gitlab.com/ntninja/user-agent-switcher). I reported the issue > to Gitlab, and they could apparently fixed it on their side (not yet > deployed) [0] > > [0] https://gitlab.com/gitlab-org/gitlab/-/issues/345328 > > I think other sites or CloudFare must be similarly faulty, or require > fingerprinting which is guarded against out-of-the-box in IceCat. > > Closing, as I doubt Guix has something to do with it. If you find > something to the contrary, let us know! > > --=20 > Thanks, > Maxim I too have fixed it in the past by switching my user agent. I opened and closed a similar bug some months or years back. That solution stopped working. I have consulted with folks in the qutebrowser IRC about this issue several times and it is not affecting everyone there, so it definitely seems guix-related to me. Something about our packages must make the browser(s) look odd to these infernal browser checks. I know that the issue is cloudflare essentially bullying those of us with more niche setups, but cloudflare has sadly infected most of the Web, so we have to play their game. I fear the number of qutebrowser users on guix is in the single digits and so often I'm running into odd problems with no solution, that again rarely seems to affect people on the other distros when I go to ask for help. I think our Qt version is almost always old which probably doesn't help. I doubt I have the proper evidence to convince you this is guix's fault, but just know that if you close this issue my problem may never be solved (although it may never get solved either way honestly).