170
Cloudflare teams up with Chrome, Edge, and Firefox to tackle bot traffic without CAPTCHAs
(www.techspot.com)
this post was submitted on 23 Jun 2026
170 points (98.9% liked)
Technology
85683 readers
4669 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
These issuers will 100% sell these identifiers to be matched up with other databases.
Why do you assume it's one static unchanging token? That's not how cryptography works, you can issue virtually unlimited signatures or challenges/responses without the other party knowing your private key
It's cryptographically impossible to ensure that kind of security.
Are you saying asymmetric cryptography doesn't exist or is not secure? You may want to collect your research prize and/or bring down the global banking system
It really depends on the implementation tho. Since Firefox is foss i hope this wont be a proprietary blob so we can actually hold them accountable
It's cloudflare. Of course it'll be a proprietary blob.
There's what companies admit to publicly, and then there's what they're working on behind closed doors.
Most EULA have vague lines like "We will use your data to improve our services" which translates to something like: Your data is used in the services we sell.
Perhaps there would be a legal argument against shit like this, but how do you prove it in court? Even if you get discovery the odds of them offering up database tables they've hidden away that key up users to the data is never gonna happen. You'd have to report it as an insider.
Maybe we should be offering up $10m+ whistleblower bounties for stuff like this, because short of giving someone a golden parachute they're sure as shit not going to lose their careers over it.