(untitled)

>he blocked tor from the web for 10 years >even after that he tracks your mouse movements and sends them to the NSA, once again defeating the purpose of tor >he made wafs fashionable again >he has zero understanding of infosec while forcing his gay solutions everywhere with his monopoly fuarrrk CLOUDFLARE KILL MATTHEW PRINCE

the entire point of cloudflare is a mitm farming user data. The loud VPN providers do the same btw. Loudest "privacy" advertisers you see everywhere double dip selling subcriptions to users and user data to companies.

Worst of all is websites that block you because your browser is out of date but you literally can't update your browser on an old device. Today old is not even 5 years.

>>44063 le old devices are... le insecure or something... some people will argue in that fashion thinking they are imposing security, while in reality they are sucking dicks of the corporations pushing planned obsolescence. Can't win with retards

>>44063 Do they really do that? Wtf, why?

>>44067 Yes, I can't recall which sites I've seen this but it has happened. You get a message telling you that your browser is out of date and they wont let you in at all it is a blank white page except for telling you to suck it. They also sometimes block you for using anything that isn't Chrome based because they were too lazy to cross compatible code. >>44066 It may be a security thing but more likely it is not wanting to deal with incompatible elements of the site not displaying properly and instead of designing to be cross compatible across different browsers and different browser versions they would rather just entirely block access.

>>44068 The only times I've seen such messages it was because I had javascript disabled.

>>44066 Do you even know anything about security? Outdated packages are the most free give me's when it comes to pentesting, check out the searchsploit man page. Seriously, how big of a retard do you have to be to not comprehend that not updating something that has millions of lines of code written by amateurs is not going to be safe after 2 years of not updating it? Check the last version of firefox for instance (https://www.mozilla.org/en-US/security/advisories/mfsa2025-01/) >4 high risk security CVE's >8 moderate risk security CVE's Now count all the security vulnerabilties in the last 6 months, that's how many vulns are in Firefox ESR.

>>44070 Stupid argument. The browser is sensitive to being hijacked by a malicious website, that's true. However, the website blocking old versions is probably not malicious (at least it doesn't willingly use exploits for old versions), and therefore has no reason to block them. Web standards are a thing for a reason, a client implementing them shouldn't be arbitrarily limited.

>>44071 I've replied to 44066 not 44063.

>>44066 it's not a security concern. it's because those websites use new features which are not available in older browsers. many times the site is poorly written and check for browser versions instead of using feature detection, so you run into cases where a website written 5 years ago rejects any firefox users because it relies on a feature that only chrome had implemented at the time even though the site works fine in modern firefox. many more times, the sites abandon all loading if a single feature is missing, often because the js that builds the whole site crashes. ironically several of the frameworks for building "progressive web apps" are the culprits for this despite that the "progressive" in "progressive web apps" refers to "progressive enhancement" which is the idea that sites should work with plain, basic html, then use feature detection to add enhancements.

I remember the Fatwa I remember it

>>44076 +1 to this Basic elements for layout got redefined in last years so everyone dickriding "new = good" is writing soykaf that wont work on old browsers + you have an army of fresh bootcamp webmonkeys who never learned the old style. They wont bother learning old code to support you. They will just bullshit and claim its customer fault not to upgrade same way gamedevs blame piracy when their games suffer low sales. Regarding malicious there is one potential malicious element to it - new browser features also allow better fingerprinting. There is a potential they want to force you to upgrade so they can identify you better.

>>44076 This makes me wonder has there ever been hackers who hack a site just to fix it for free because they are tired of their bullshit?

>>44081 I know someone who hacked the development versions of websites of a small web dev firm, defaced them with some memes, then visited them in person, talked to the CEO, explained to him all of that. CEO said people in the company has spent the past few days fighting over whose fault it was, and offered the guy a job on the spot as security analyst for the company. Didn't last long though, as soon as they got some financial pressure, the security guy was first to be let go. The hack was legally risky, but it was an impactful show, the actual security work over months of fixing bugs and patching software and upgrading dependencies, is much less punchy, so people start viewing the work as useless. Personally had similar issues with sysadmin work, because people don't understand that when nothing wrong is happening it's because I'm working my ass off to make it so, one client fired me, only to come 1 week later begging after they lost more than 100K Euros because their site was down, as the web marketing company they handed the site to did not know how to fight off the massive DDoS attacks and hack attempts they were under.

>>44060 The absolute worst for this is rateyourmusic damn site never lets me in

>>44079 >Basic elements for layout got redefined in last years sauce? my webdev experience is 30 minutes of editing ss13 GUIs, but this seems supremely retarded why is the actual web so fuarrrked compared to what was taught in school? html for text, javascript for dynamic stuff, php on the server what are browsers doing to end up 200-400MB large and why is that still not enough to get through cloudflare if your phone isn't updated every 2 days