status-resolved Getting "Verify you are human" on NamePros Forums

[alcy]

You're in "code" mode; press the button with brackets on the top right of the editor to switch back:

Show attachment 277618

yep got it
tho I gotta say ita hard to figure out. I never would if not ask here

was gonna make another post now but since u are here... looks like I got more work for ya

since 3 to 5 days.. and not ever before.. I am seeing cloud flare screen randomly... once or twice a day.. before I get on np.

plz plz make it like before. and kill it. ty

 

[cooljub]

I am seeing cloud flare screen randomly... once or twice a day.. before I get on np.

I get it when I click on a quoted post where it has to go to a previous page for me to see it. So annoying.. I give up and don't even bother.

 

[Bravo Mod Team]

since 3 to 5 days.. and not ever before.. I am seeing cloud flare screen randomly... once or twice a day.. before I get on np.

When does it happen?

Upon your first visit to NamePros, or when you try to do something specifically (e.g., visit a quoted post)?

Let us know.

 

[alcy]

When does it happen?

Upon your first visit to NamePros, or when you try to do something specifically (e.g., visit a quoted post)?

Let us know.

it happens when I start the main link I always use to access np.

https://www.namepros.com/?_pwa=1

but again it has not happened for months before. ever. so I assume u changed something not me. cause I really don't change stuff.

plus I dont really think it is dependent on what i do here.. as it just kinda happens on startup so to speak.. via this link

p.s I'm also on permanent logged in.. so no passwords etc

 

[alcy]

it happens when I start the main link I always use to access np.

https://www.namepros.com/?_pwa=1

but again it has not happened for months before. ever. so I assume u changed something not me. cause I really don't change stuff.

plus I dont really think it is dependent on what i do here.. as it just kinda happens on startup so to speak.. via this link

p.s I'm also on permanent logged in.. so no passwords etc

hhhaha just happened now

hope u fix

 

[Paul]

since 3 to 5 days.. and not ever before.. I am seeing cloud flare screen randomly... once or twice a day.. before I get on np.

plz plz make it like before. and kill it. ty

If you just started seeing that recently, you’re probably on an old version of Android and are using an ancient version of Chrome or a browser that’s effectively a rebrand of an ancient version of Chrome. That makes you look like a bot. :P

Update!

 

[alcy]

If you just started seeing that recently, you’re probably on an old version of Android and are using an ancient version of Chrome or a browser that’s effectively a rebrand of an ancient version of Chrome. That makes you look like a bot. :P

Update!

u must not understand that in some or many cases upgrading android means getting new phone.

I like np. with post count to prove. but I dont like enuf to change phone for it

if someone asks..
android v9
latest chrome
Samsung j3 2016

 

[Paul]

u must not understand that in some or many cases upgrading android means getting new phone.

I like np. with post count to prove. but I dont like enuf to change phone for it

if someone asks..
android v9
latest chrome
Samsung j3 2016

You shouldn’t need to update Android, just Chrome. It looks like you’re on 128, which definitely isn’t the latest.

I’ll run some tests with older phones and get back to you on potential solutions. If you keep using that browser, eventually, you’re going to get malware—it’s missing critical security patches.

 

[alcy]

You shouldn’t need to update Android, just Chrome. It looks like you’re on 128, which definitely isn’t the latest.

I’ll run some tests with older phones and get back to you on potential solutions. If you keep using that browser, eventually, you’re going to get malware—it’s missing critical security patches.

hmm I always update chrome when the new version icon shows. not showing now.

here my info sir

 

[alcy]

You shouldn’t need to update Android, just Chrome. It looks like you’re on 128, which definitely isn’t the latest.

I’ll run some tests with older phones and get back to you on potential solutions. If you keep using that browser, eventually, you’re going to get malware—it’s missing critical security patches.

so u know

today 3 times

past 2 years or more.. 0 times

 

[alcy]

You shouldn’t need to update Android, just Chrome. It looks like you’re on 128, which definitely isn’t the latest.

I’ll run some tests with older phones and get back to you on potential solutions. If you keep using that browser, eventually, you’re going to get malware—it’s missing critical security patches.

this is nasty.
almost 1st thing in morning.

for something that happened 0 times in x past years.. I'm just gonna have to ask ya to fix it or I reduce my time here.

hope u get round to it .


ty

 

[Bravo Mod Team]

today 3 times

past 2 years or more.. 0 times

This isn't supposed to affect logged-in members. (It's a Cloudflare WAF rule that triggers on very old Chrome versions, often used by bots.)

We can disable it if need be, but we may just need to tweak it so it doesn't happen when you're logged in.

How often do you have to login to NamePros? Daily? Weekly? Monthly?

Are you getting logged out a lot?

 

[alcy]

This isn't supposed to affect logged-in members. (It's a Cloudflare WAF rule that triggers on very old Chrome versions, often used by bots.)

We can disable it if need be, but we may just need to tweak it so it doesn't happen when you're logged in.

How often do you have to login to NamePros? Daily? Weekly? Monthly?

Are you getting logged out a lot?

I actually never relog
unless I logout myself

If possible plz keep it that way

ty for helping

 

[Future Sensors]

This isn't supposed to affect logged-in members. (It's a Cloudflare WAF rule that triggers on very old Chrome versions, often used by bots.)

We can disable it if need be, but we may just need to tweak it so it doesn't happen when you're logged in.

How often do you have to login to NamePros? Daily? Weekly? Monthly?

Are you getting logged out a lot?

Does NamePros have a WAF rule currently active for this? It could mis-parse @alcy's Chrome 128's UA or the new sec-ch-ua headers. But a UA-version rule would trigger on every request, not intermittently. The pattern described by @alcy suggests something dropping or changing between visits, e.g. cf_clearance cookies expiring or being partitioned away, IP churn, or client-hint headers being stripped by a proxy or extension. Can you share the exact WAF rule expression? Is it matching on http.user_agent or cf.client.bot?

 

[Paul]

this is nasty.
almost 1st thing in morning.

for something that happened 0 times in x past years.. I'm just gonna have to ask ya to fix it or I reduce my time here.

hope u get round to it .


ty

It shouldn't affect logged in users now.

I tested extensively on Android phones even older than yours, and they're all able to update to Chrome 138. I'm not sure why you're not getting updates.

Does NamePros have a WAF rule currently active for this?

Yes--we always have. Selenium-based bots are quite good at getting around most detections mechanisms, but they almost always use an older version of Chromium (or at least send an older User-Agent header). Every so often we add Chrome versions that triggers it. Those rules gradually get stricter; right now, the rule @alcy's hitting is on the CF side and triggering on Chrome versions beginning with 12.

The subset of Android devices that aren't officially supported by Chrome 138 and also have a recent enough root store is quite small. @alcy's device should support Chrome 138; I'm not sure why it's failing to update.

The pattern described by @alcy suggests something dropping or changing between visits, e.g. cf_clearance cookies expiring or being partitioned away, IP churn, or client-hint headers being stripped by a proxy or extension. Can you share the exact WAF rule expression? Is it matching on http.user_agent or cf.client.bot?

Our clearance cookies are set to last for 1 day, which explains why @alcy is noticing it immediately upon starting the day. Because it's a low-end device, it's probably clearing transient data a lot more aggressively than a device with more memory--including the clearance cookies. Really, I think we can change it to 1 week at this point; there's no reason to keep it at 1 day.

Can you share the exact WAF rule expression? Is it matching on http.user_agent or cf.client.bot?

not starts_with(http.request.full_uri, "https://www.namepros.com/parked/") and not cf.client.bot and http.user_agent wildcard r"*Chrome/12*"

Solve rate is 0.34%--it's an effective rule.

 

[Future Sensors]

hmm I always update chrome when the new version icon shows. not showing now.

Have you also tried upgrading this via the Play Store on your Android phone?

What options do you see appearing there for the Chrome browser?

 

[alcy]

ok just updated
June 17 update

 

[Future Sensors]

It's heartening to see your Chrome renewed, and your commitment to NamePros unwavering.

Yet elsewhere on your Android phone, other apps may lie in need of that same breath of renewal.

 

[alcy]

It's heartening to see your Chrome renewed, and your commitment to NamePros unwavering.

Yet elsewhere on your Android phone, other apps may lie in need of that same breath of renewal.

ty bro
u know just cause chrome didnt show renew icon first time ever now.. doesnt mean other apps dont hehe

I'm all for updates. juat hate owning more than need.. so my old 20us 2016 used phone phone and me are perfect union for 6yr now. bahaha

 

[Paul]

ok just updated
June 17 update

Woo! I'm glad you were able to update. We're still going to dial back the strictness of that firewall rule, though, just to be safe. Thanks for working with us to troubleshoot!

I'm all for updates. juat hate owning more than need.. so my old 20us 2016 used phone phone and me are perfect union for 6yr now. bahaha

If I weren't tasked with ensuring the security of so many people, I'd be in the same boat. My phones from that era are perfectly usable today--heck, in many cases, more usable than newer phones--but it's not worth the risk. We still use them for testing, though.