Cloudflare Turnstile Uses WebGL Fingerprinting for Verification
TL;DR. Cloudflare Turnstile is now requiring WebGL-based device fingerprinting, causing indefinite looping for browsers blocking such tracking. - The change prevents access to websites for users with privacy-focused settings or browsers like WebKitGTK. - Cloudflare states that blocking anonymity features makes browsers appear as bots, necessitating the fingerprinting bypass. - Firefox's WebGL fingerprinting protection is reportedly insufficient, while Apple's WebKit blocks this tracking.
- Cloudflare's Turnstile human verification now requires WebGL device fingerprinting.
- This practice blocks users of privacy-focused browsers like WebKitGTK.
- Cloudflare defends the method by stating privacy tools make browsers appear as bots.
- Mozilla Firefox's WebGL fingerprinting protection is noted as inadequate compared to WebKit.
Sources
- Cloudflare Turnstile requiring fingerprintable WebGL — hacktivis.me