{"action":"created","issue":{"url":"https://api.github.com/repos/nodejs/nodejs.org/issues/757","repository_url":"https://api.github.com/repos/nodejs/nodejs.org","labels_url":"https://api.github.com/repos/nodejs/nodejs.org/issues/757/labels{/name}","comments_url":"https://api.github.com/repos/nodejs/nodejs.org/issues/757/comments","events_url":"https://api.github.com/repos/nodejs/nodejs.org/issues/757/events","html_url":"https://github.com/nodejs/nodejs.org/issues/757","id":156090052,"number":757,"title":"CloudFlare blocking nodejs.org web site access for users running Tor","user":{"login":"fredrikgrohn","id":3049359,"avatar_url":"https://avatars.githubusercontent.com/u/3049359?v=3","gravatar_id":"","url":"https://api.github.com/users/fredrikgrohn","html_url":"https://github.com/fredrikgrohn","followers_url":"https://api.github.com/users/fredrikgrohn/followers","following_url":"https://api.github.com/users/fredrikgrohn/following{/other_user}","gists_url":"https://api.github.com/users/fredrikgrohn/gists{/gist_id}","starred_url":"https://api.github.com/users/fredrikgrohn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fredrikgrohn/subscriptions","organizations_url":"https://api.github.com/users/fredrikgrohn/orgs","repos_url":"https://api.github.com/users/fredrikgrohn/repos","events_url":"https://api.github.com/users/fredrikgrohn/events{/privacy}","received_events_url":"https://api.github.com/users/fredrikgrohn/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2016-05-21T08:02:07Z","updated_at":"2016-06-08T11:58:57Z","closed_at":null,"body":"* **URL**: https://nodejs.org/\r\n* **Browser version**: Tor Browser 5.5.5 (Mozilla Firefox 38.8.0)\r\n* **Operating system**: Windows 7 SP1\r\n\r\nIn case there is someone not familiar with Tor: Tor is a network that enables users to maintain online anonymity and resist censorship and surveillance. It is the biggest network of its kind. For further refernce please see the Tor web site (https://torproject.org), or the Wikipedia article (https://en.wikipedia.org/wiki/Tor_%28anonymity_network%29).\r\n\r\nAs a Tor user myself, I have noticed that I very frequently am blocked from accessing the node.js web site by CloudFlare. The experience for a user that gets blocked by CloudFlare is that, instead of the node.js web site, the user is shown a page explaining that the connection has been blocked and requesting the user to complete one or more CAPTCHA tests. These tests also require cookies to be stored in the browser client. It is usually possible to get past the CAPTCHA test from within one minute, to no more than a couple of minutes, the requests to complete CAPTCHA tests can then be repeated as often as for every page load.\r\n\r\nThese tests constitute a significant obstacle for accessing any web site where they are deployed. There are also frequent anecdotal reports of users being given infinite repeating CAPTCHA tests and never given access to the target web site, or the CAPTCHA tests simply failing to load. It should also be noted that CAPTCHA tests can be difficult to solve for people who are visually impaired.\r\n\r\nThe problem appears to be that CloudFlares threat scoring algorithm gets confused by the large number of diverse connections coming from Tor exit nodes, and mistakenly classifies it them as malicious, and then retains this classification indefinitely.\r\n\r\nIt is also worth noting that the CloudFlare competitor Akamai does not have the same issue with their threat scoring algorithm.\r\n\r\nCloudFlare appears to be aware of the problem, but unable to solve the problem with their scoring algorithm. Instead they have posted a workaround on their support web site:\r\n\r\nhttps://support.cloudflare.com/hc/en-us/articles/203306930-Does-CloudFlare-block-Tor-\r\n\r\nAs stated on their web site, CloudFlare has changed their system to classify all Tor exit nodes as a separate geo-location and are recommending that web site owners add a white-list entry for users coming from this Tor network geo-location under their \"firewall\" interface. (See web site for full details.)\r\n\r\nIt appears simple to do, and would help users like me a lot."},"comment":{"url":"https://api.github.com/repos/nodejs/nodejs.org/issues/comments/224568065","html_url":"https://github.com/nodejs/nodejs.org/issues/757#issuecomment-224568065","issue_url":"https://api.github.com/repos/nodejs/nodejs.org/issues/757","id":224568065,"user":{"login":"rvagg","id":495647,"avatar_url":"https://avatars.githubusercontent.com/u/495647?v=3","gravatar_id":"","url":"https://api.github.com/users/rvagg","html_url":"https://github.com/rvagg","followers_url":"https://api.github.com/users/rvagg/followers","following_url":"https://api.github.com/users/rvagg/following{/other_user}","gists_url":"https://api.github.com/users/rvagg/gists{/gist_id}","starred_url":"https://api.github.com/users/rvagg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rvagg/subscriptions","organizations_url":"https://api.github.com/users/rvagg/orgs","repos_url":"https://api.github.com/users/rvagg/repos","events_url":"https://api.github.com/users/rvagg/events{/privacy}","received_events_url":"https://api.github.com/users/rvagg/received_events","type":"User","site_admin":false},"created_at":"2016-06-08T11:58:57Z","updated_at":"2016-06-08T11:58:57Z","body":"I've whitelisted the \"Tor\" country, could you give it a try now and report back if you have further problems with this please @fredrikgrohn?"}}
{"actor":{"display_login":"rvagg"}}