This is a great website, I really like what you've done here. But why the fuck do you use CloudFlare Turnstile? Something like Turnstile or ReCaptcha kind of defeats the whole p2p pravacy thing, eh?
There's plenty of better options.
There's Anubis by Techaro:
https://www.anubis.techaro.lol/
and there's mCaptcha:
https://www.mcaptcha.org/
5chan is powered by the Bitsocial protocol, which lets each board choose its own anti spam mechanism, as there are no global admins and every board is self moderated: https://docs.bitsocial.net/custom-challenges/
Currently, most default boards are running the Spam Blocker challenge, which uses Cloudflare, but it's not mandatory for any Board Owner and the protocol itself doesn't depend on it.
That being said, I forwarded your suggestions to the main dev.
>>20 (OP)
>>22
Anubis and POWBlock are anti-scraper gates. They put a website behind a cookie so bots can't crawl it. 5chan has no central server to gate, and PoW doesn't stop spam anyway: a spammer renting servers does a few seconds of hashing per post for free, and the only people it slows down are end-users or their phones.>>29
Because they're not efficient at blocking spam unless they work exactly like Cloudflare Turnstile already does. Bots run basic edge detection on the slider (a few lines of OpenCV) and fake the drag, which is why solving services sell slider solves for a fraction of a cent each. The commercial sliders that do hold up only work because they record your mouse movement and fingerprint your browser on a server, which is exactly the same tracking you were objecting to with Cloudflare.
To be clear, as >>23 already said, I'm not forcing Cloudflare on 5chan users. It's just what the default boards are set to at the moment, and you can already create your own board with any challenge you want. But also, I have news on alternative boards. Right now I'm working on:
- forge-rpc in 5chan, so you can create a board right from the app, with very easy setup
- 5archive crawling user-created boards, so boards with their own challenges get discovered
- a multiboard section on the homepage to surface them
So, soon it will be extremely easy to try alternative user-created boards with different challenges, even weak ones that end up flooded with spam. That's part of the game. We'll see which challenges actually hold up.hCaptcha currently has uber simple captchas. Click on the loops.
Here check it integrated on an invidious instance.
https://eu.yt.chocolatemoo53.com/>>31
hCaptcha is the same thing as Turnstile, just from a different company. The easy "click the loops" puzzle comes with the same tracking, plus a puzzle on top that AI can already solve. You get the easy puzzle because their tracking already trusts you. On Tor or a VPN you get harder ones, several in a row. Turnstile does the same tracking without making you solve a puzzle, which is why it's the default for now (but you can create a board without it).This is a great website, I really like what you've done here. But why the fuck do you use CloudFlare Turnstile? Something like Turnstile or ReCaptcha kind of defeats the whole p2p pravacy thing, eh?
There's plenty of better options.
There's Anubis by Techaro:
https://www.anubis.techaro.lol/
and there's mCaptcha:
https://www.mcaptcha.org/
5chan is powered by the Bitsocial protocol, which lets each board choose its own anti spam mechanism, as there are no global admins and every board is self moderated: https://docs.bitsocial.net/custom-challenges/
Currently, most default boards are running the Spam Blocker challenge, which uses Cloudflare, but it's not mandatory for any Board Owner and the protocol itself doesn't depend on it.
That being said, I forwarded your suggestions to the main dev.
>>20 (OP)
>>22
Anubis and POWBlock are anti-scraper gates. They put a website behind a cookie so bots can't crawl it. 5chan has no central server to gate, and PoW doesn't stop spam anyway: a spammer renting servers does a few seconds of hashing per post for free, and the only people it slows down are end-users or their phones.>>29
Because they're not efficient at blocking spam unless they work exactly like Cloudflare Turnstile already does. Bots run basic edge detection on the slider (a few lines of OpenCV) and fake the drag, which is why solving services sell slider solves for a fraction of a cent each. The commercial sliders that do hold up only work because they record your mouse movement and fingerprint your browser on a server, which is exactly the same tracking you were objecting to with Cloudflare.
To be clear, as >>23 already said, I'm not forcing Cloudflare on 5chan users. It's just what the default boards are set to at the moment, and you can already create your own board with any challenge you want. But also, I have news on alternative boards. Right now I'm working on:
- forge-rpc in 5chan, so you can create a board right from the app, with very easy setup
- 5archive crawling user-created boards, so boards with their own challenges get discovered
- a multiboard section on the homepage to surface them
So, soon it will be extremely easy to try alternative user-created boards with different challenges, even weak ones that end up flooded with spam. That's part of the game. We'll see which challenges actually hold up.hCaptcha currently has uber simple captchas. Click on the loops.
Here check it integrated on an invidious instance.
https://eu.yt.chocolatemoo53.com/>>31
hCaptcha is the same thing as Turnstile, just from a different company. The easy "click the loops" puzzle comes with the same tracking, plus a puzzle on top that AI can already solve. You get the easy puzzle because their tracking already trusts you. On Tor or a VPN you get harder ones, several in a row. Turnstile does the same tracking without making you solve a puzzle, which is why it's the default for now (but you can create a board without it).