sign_in VS challenge-bypass-extension

Create an account or sign in to GitLab here.

oh interesting , so https://gitlab.com/users/sign_in loads fine with the onboard ethernet?

While I can use the internet, I get unpredictable performance, sometimes songs playing on Youtube Music stutter to buffer, sometimes pages fail to load without refreshes... and one thing that seems to never load is the login page for my GitLab account https://gitlab.com/users/sign_in

If you don't have an account yet, create one here otherwise login to your account here.

GitLab User Sign In

Once you build an MVP, it is time to share 📤 your project with the world. Nowadays it is super easy to do. First of all make your projects repository open on platforms like GitHub or GitLab. Next you can create a small blog post about your project and post it on one of the awesome web sites like Medium, Hashnode or Dev.to. Last, but not least share it on any social media like Twitter, LinkedIn or even YouTube with your friends and followers.

Gitlab https://gitlab.com/users/sign_in (email or username)

I'd be fine if "ID for the web" was implemented with privacypass https://privacypass.github.io/

https://privacypass.github.io/ should help with Cloudflare verification. Works on Chrome and FireFox.

Cloudflare's Privacy Pass may help here: https://privacypass.github.io/

It should significantly reduce the amount of CAPTCHAs you see in a way that's not terrible for privacy.

For Safari, you can enable Private Access Tokens: https://blog.cloudflare.com/how-to-enable-private-access-tok...

Both of these mechanisms are similar to Google's web DRM proposal in that they rely on external issuers to generate tokens, but unlike Google's attempt they don't guarantee that ad blockers are disabled on pages that try to use tokens.

The author is referring to this standard: https://privacypass.github.io/

Apple uses it for its iCloud Private Relay service. The blind token is used so that Cloudflare can verify that a given device pays for iCloud Private Relay without revealing their identity.

Attestation is when such a blind token is proving the integrity of the software running on the device, not proving arbitrary properties. Privacy Pass could actually enable a fast, semi-decentralized system of anonymizing proxies.

If Apple exposed the “is System Integrity Protection enabled” bit to the web, then that amounts to attestation to me, and yes: Apple can do it whenever it wants, and people want Apple to do it.

Use Privacy Pass then if you don't want to use Chrome. https://privacypass.github.io/

Most hCaptcha and many Cloudflare -> https://privacypass.github.io/

That's weird, I haven't used it recently but will take a look. Looks like you're not the only one having issues though: https://github.com/privacypass/challenge-bypass-extension/issues/389

This wouldn't be at the network level, but there is this amazing extension at the browser level: https://privacypass.github.io/