Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.misc > #89930 > unrolled thread

Oh Gawd - Now MX Linux "Security Verification" - NO !!!

Back to article view | Back to comp.os.linux.misc

Contents

  Oh Gawd - Now MX Linux "Security Verification" - NO !!! c186282 <c186282@nnada.net> - 2026-08-16 03:47 -0400
    Re: Oh Gawd - Now MX Linux "Security Verification" - NO !!! rbowman <bowman@montana.com> - 2026-08-16 18:54 +0000
      Re: Oh Gawd - Now MX Linux "Security Verification" - NO !!! not@telling.you.invalid (Computer Nerd Kev) - 2026-08-17 08:46 +1000
        Re: Oh Gawd - Now MX Linux "Security Verification" - NO !!! c186282 <c186282@nnada.net> - 2026-08-16 23:46 -0400
        Open web (was: Re: Oh Gawd - Now MX Linux "Security Verification" - NO !!!) Nuno Silva <nunojsilva@invalid.invalid> - 2026-08-17 09:42 +0100
      Re: Oh Gawd - Now MX Linux "Security Verification" - NO !!! c186282 <c186282@nnada.net> - 2026-08-16 23:44 -0400
        Re: Oh Gawd - Now MX Linux "Security Verification" - NO !!! rbowman <bowman@montana.com> - 2026-08-17 03:54 +0000
          Re: Oh Gawd - Now MX Linux "Security Verification" - NO !!! c186282 <c186282@nnada.net> - 2026-08-17 01:24 -0400
          Linux 7.2 (was: Re: Oh Gawd - Now MX Linux "Security Verification" - NO !!!) vallor <vallor@vallor.earth> - 2026-08-17 08:59 +0000
            Re: Linux 7.2 (was: Re: Oh Gawd - Now MX Linux "Security Verification" - NO !!!) rbowman <bowman@montana.com> - 2026-08-17 17:39 +0000
              Re: Linux 7.2 c186282 <c186282@nnada.net> - 2026-08-17 22:26 -0400
            Re: Linux 7.2 c186282 <c186282@nnada.net> - 2026-08-17 22:21 -0400
              Re: Linux 7.2 Richard Kettlewell <invalid@invalid.invalid> - 2026-08-18 08:30 +0100
        Re: Oh Gawd - Now MX Linux "Security Verification" - NO !!! TJ <TJ@noneofyour.business> - 2026-08-17 10:30 -0400
          Re: Oh Gawd - Now MX Linux "Security Verification" - NO !!! c186282 <c186282@nnada.net> - 2026-08-17 22:25 -0400
            Re: Oh Gawd - Now MX Linux "Security Verification" - NO !!! rbowman <bowman@montana.com> - 2026-08-18 03:05 +0000
              Re: Oh Gawd - Now MX Linux "Security Verification" - NO !!! c186282 <c186282@nnada.net> - 2026-08-18 00:58 -0400
      Re: Oh Gawd - Now MX Linux "Security Verification" - NO !!! Nuno Silva <nunojsilva@invalid.invalid> - 2026-08-17 09:38 +0100
        Re: Oh Gawd - Now MX Linux "Security Verification" - NO !!! rbowman <bowman@montana.com> - 2026-08-17 17:14 +0000

#89930 — Oh Gawd - Now MX Linux "Security Verification" - NO !!!

WHO told them to do this ???

No, I'm NOT gonna comply.

If the Pixie Girl or equivs appear I *instantly*
quit.

Evil !

Downloaded the latest Fedora and Mint and Deb today,
NO such totalitarian BS.

AM downloading a 'fairly recent' MX ... but thru
a 3rd party site. NASTY ! Can I trust it ???

Can't even GET to the MX site to register
a complaint without the blocks.

MX was my big fave - "perfect" - but NOW ...

Guess I'll have to use vanilla Deb from
now on.

[toc] | [next] | [standalone]

#89943

On Sun, 16 Aug 2026 03:47:41 -0400, c186282 wrote:

> WHO told them to do this ???
> 
> No, I'm NOT gonna comply.
> 
> If the Pixie Girl or equivs appear I *instantly*
> quit.
> 
> Evil !

So a 2 second CAPTCHA 3 a website uses to protect against malicious 
attacks ruins your entire day? 

https://en.wikipedia.org/wiki/Cloudflare#DDoS_mitigation

I hate to tell you but I think your world is going to shrink. I didn't hit 
the verification with Brave on two different machines. I think that's 
because I'd been there before and they'd dropped a cookie. OMG cookies!

[toc] | [prev] | [next] | [standalone]

#89949

rbowman <bowman@montana.com> wrote:
> I hate to tell you but I think your world is going to shrink. I didn't hit 
> the verification with Brave on two different machines. I think that's
> because I'd been there before and they'd dropped a cookie. OMG cookies!

There are a lot of things they check. One that had me puzzled for a
long time was hardware graphics acceleration for WebGL 2 (etc.).
The Javascript can somehow detect that you're using a software
OpenGL render (eg. swrast in Mesa) instead of a GPU, and assumes
it must be running on a server, instead of a personal computer
with an old GPU or broken drivers. One major Australian website
blocks me entirely on that basis - doesn't even give me a captcha
to solve. No GPU = can't be human, apparantly. No more visits from
this human anyway - what rot that I'd need to have GPU rendering
working on computers where I'd never need that except to get in to
those websites showing just text and static images.

-- 
__          __
#_ < |\| |< _#

[toc] | [prev] | [next] | [standalone]

#89952

On 8/16/26 18:46, Computer Nerd Kev wrote:
> rbowman <bowman@montana.com> wrote:
>> I hate to tell you but I think your world is going to shrink. I didn't hit
>> the verification with Brave on two different machines. I think that's
>> because I'd been there before and they'd dropped a cookie. OMG cookies!
> 
> There are a lot of things they check. One that had me puzzled for a
> long time was hardware graphics acceleration for WebGL 2 (etc.).
> The Javascript can somehow detect that you're using a software
> OpenGL render (eg. swrast in Mesa) instead of a GPU, and assumes
> it must be running on a server, instead of a personal computer
> with an old GPU or broken drivers. One major Australian website
> blocks me entirely on that basis - doesn't even give me a captcha
> to solve. No GPU = can't be human, apparantly. No more visits from
> this human anyway - what rot that I'd need to have GPU rendering
> working on computers where I'd never need that except to get in to
> those websites showing just text and static images.

   If I see this shit I *leave* in one second. NOT
   gonna put up with it.

   And, as said, you can't STEAL Linux because
   it's FREE - so, well, WTF ??? All I see is
   some trick trying to probe my box for who
   knows what.

[toc] | [prev] | [next] | [standalone]

#89962 — Open web (was: Re: Oh Gawd - Now MX Linux "Security Verification" - NO !!!)

On 2026-08-16, Computer Nerd Kev wrote:

> rbowman <bowman@montana.com> wrote:
>> I hate to tell you but I think your world is going to shrink. I didn't hit 
>> the verification with Brave on two different machines. I think that's
>> because I'd been there before and they'd dropped a cookie. OMG cookies!
>
> There are a lot of things they check. One that had me puzzled for a
> long time was hardware graphics acceleration for WebGL 2 (etc.).
> The Javascript can somehow detect that you're using a software
> OpenGL render (eg. swrast in Mesa) instead of a GPU, and assumes
> it must be running on a server, instead of a personal computer
> with an old GPU or broken drivers. One major Australian website
> blocks me entirely on that basis - doesn't even give me a captcha
> to solve. No GPU = can't be human, apparantly. No more visits from
> this human anyway - what rot that I'd need to have GPU rendering
> working on computers where I'd never need that except to get in to
> those websites showing just text and static images.

I think I've seen that in the wild too. I've had troubles with webgl
before, possibly broken drivers or broken hardware, not sure which, and
not wanting to get entangled in figuring that out, I disabled webgl.

Then there's also the sites which just refuse to handle absence of
webgl for whatever they're doing...

-- 
Nuno Silva

[toc] | [prev] | [next] | [standalone]

#89951

On 8/16/26 14:54, rbowman wrote:
> On Sun, 16 Aug 2026 03:47:41 -0400, c186282 wrote:
> 
>> WHO told them to do this ???
>>
>> No, I'm NOT gonna comply.
>>
>> If the Pixie Girl or equivs appear I *instantly*
>> quit.
>>
>> Evil !
> 
> So a 2 second CAPTCHA 3 a website uses to protect against malicious
> attacks ruins your entire day?

   Yep.

   Over and out.

   Oh, and nobody STEALS Linux - it's FREE.

[toc] | [prev] | [next] | [standalone]

#89953

On Sun, 16 Aug 2026 23:44:19 -0400, c186282 wrote:

> On 8/16/26 14:54, rbowman wrote:
>> On Sun, 16 Aug 2026 03:47:41 -0400, c186282 wrote:
>> 
>>> WHO told them to do this ???
>>>
>>> No, I'm NOT gonna comply.
>>>
>>> If the Pixie Girl or equivs appear I *instantly*
>>> quit.
>>>
>>> Evil !
>> 
>> So a 2 second CAPTCHA 3 a website uses to protect against malicious
>> attacks ruins your entire day?
> 
>    Yep.
> 
>    Over and out.
> 
>    Oh, and nobody STEALS Linux - it's FREE.

Steal? Is that the extent of your idea of malicious?

https://linux.slashdot.org/story/25/08/23/0513229/arch-linux-faces-
ongoing-ddos-attack

[toc] | [prev] | [next] | [standalone]

#89958

On 8/16/26 23:54, rbowman wrote:
> On Sun, 16 Aug 2026 23:44:19 -0400, c186282 wrote:
> 
>> On 8/16/26 14:54, rbowman wrote:
>>> On Sun, 16 Aug 2026 03:47:41 -0400, c186282 wrote:
>>>
>>>> WHO told them to do this ???
>>>>
>>>> No, I'm NOT gonna comply.
>>>>
>>>> If the Pixie Girl or equivs appear I *instantly*
>>>> quit.
>>>>
>>>> Evil !
>>>
>>> So a 2 second CAPTCHA 3 a website uses to protect against malicious
>>> attacks ruins your entire day?
>>
>>     Yep.
>>
>>     Over and out.
>>
>>     Oh, and nobody STEALS Linux - it's FREE.
> 
> Steal? Is that the extent of your idea of malicious?

   For the REAL WORLD ... kinda YES.

   Are you assuming some kind of 'download
   apocalypse' thing - a sophisticated
   distributed 'DOS' attack ???

   MIGHT - but mostly WON'T - happen.

   The low/no profit aspects of Linux just
   make it UNINTERESTING to most Bad Guys.

   Note there are also many alternative sites
   where you can get the SAME systems, never
   using the Main Page. Being 'free', anyone
   can copy the latest distros to THEIR sites.

   For cyberterrorists, this is just a lose/lose
   situation. Why waste time ?

   Now M$/Apple - VERY concentrated sweet stuff.
   IS worth attacking from many directions and
   WILL have far-reaching impacts.

> https://linux.slashdot.org/story/25/08/23/0513229/arch-linux-faces-
> ongoing-ddos-attack

   "Ongoing" - but "effective/useful/relevant" ???

   Anyway, sorry, but if I see the Elf girl or
   her clones then I'm OUT of there. Dunno WHAT
   THE FUCK their 'validation' scripts are doing.
   Probably REALLY bad.

   NO !

   Hey, I'll go back to DOS 3.x shit rather than
   put up with this shit.

[toc] | [prev] | [next] | [standalone]

#89963 — Linux 7.2 (was: Re: Oh Gawd - Now MX Linux "Security Verification" - NO !!!)

At 17 Aug 2026 03:54:12 GMT, rbowman <bowman@montana.com> wrote:

> On Sun, 16 Aug 2026 23:44:19 -0400, c186282 wrote:
> 
> > On 8/16/26 14:54, rbowman wrote:
> >> On Sun, 16 Aug 2026 03:47:41 -0400, c186282 wrote:
> >> 
> >>> WHO told them to do this ???
> >>>
> >>> No, I'm NOT gonna comply.
> >>>
> >>> If the Pixie Girl or equivs appear I *instantly*
> >>> quit.
> >>>
> >>> Evil !
> >> 
> >> So a 2 second CAPTCHA 3 a website uses to protect against malicious
> >> attacks ruins your entire day?
> > 
> >    Yep.
> > 
> >    Over and out.
> > 
> >    Oh, and nobody STEALS Linux - it's FREE.
> 
> Steal? Is that the extent of your idea of malicious?
> 
> https://linux.slashdot.org/story/25/08/23/0513229/arch-linux-faces-
> ongoing-ddos-attack

kernel.org uses the pixie lady if you dig into git -- can't
download rc kernel sources without seeing her happy smile.

Some people will be put off by anything -- even stop signs.

(BTW, Linux 7.2 is released.  Building it now...)

-- 
-v System76 Thelio Mega v1.1 x86_64 Mem: 258G
   OS: Linux 7.2.0-rc7 D: Mint 22.3 DE: Xfce 4.18 (X11)
   NVIDIA GeForce RTX 3090Ti (24G) (610.57.04)
   "I hate laundry month."

[toc] | [prev] | [next] | [standalone]

#89975 — Re: Linux 7.2 (was: Re: Oh Gawd - Now MX Linux "Security Verification" - NO !!!)

On Mon, 17 Aug 2026 08:59:40 +0000, vallor wrote:

> kernel.org uses the pixie lady if you dig into git -- can't download rc
> kernel sources without seeing her happy smile.
> 
> Some people will be put off by anything -- even stop signs.

I like the pixie better than CloudFlares. I forget the site but I hit one 
yesterday where you had to press the button for seconds as well as one 
where you had to select all the bicycles. I haven't seen one with the 
distorted text in a while. I always had a problem with those damn things. 



> 
> (BTW, Linux 7.2 is released.  Building it now...)

Praise be, Fedora hasn't added it yet. Maybe I'll get more than 2 days 
uptime. Thankfully Fedora 45 isn't planning to include Plasma 6.8 
initially. iirc it was 40 where the paint wasn't quite dry on KDE, Qt, and 
Plasma. 

[toc] | [prev] | [next] | [standalone]

#90012 — Re: Linux 7.2

On 8/17/26 13:39, rbowman wrote:
> On Mon, 17 Aug 2026 08:59:40 +0000, vallor wrote:
> 
>> kernel.org uses the pixie lady if you dig into git -- can't download rc
>> kernel sources without seeing her happy smile.
>>
>> Some people will be put off by anything -- even stop signs.
> 
> I like the pixie better than CloudFlares. I forget the site but I hit one
> yesterday where you had to press the button for seconds as well as one
> where you had to select all the bicycles. I haven't seen one with the
> distorted text in a while. I always had a problem with those damn things.

   BSD, here I come.

   If I wanted bullshit I'd buy Winders.

[toc] | [prev] | [next] | [standalone]

#90009 — Re: Linux 7.2

On 8/17/26 04:59, vallor wrote:
> At 17 Aug 2026 03:54:12 GMT, rbowman <bowman@montana.com> wrote:
> 
>> On Sun, 16 Aug 2026 23:44:19 -0400, c186282 wrote:
>>
>>> On 8/16/26 14:54, rbowman wrote:
>>>> On Sun, 16 Aug 2026 03:47:41 -0400, c186282 wrote:
>>>>
>>>>> WHO told them to do this ???
>>>>>
>>>>> No, I'm NOT gonna comply.
>>>>>
>>>>> If the Pixie Girl or equivs appear I *instantly*
>>>>> quit.
>>>>>
>>>>> Evil !
>>>>
>>>> So a 2 second CAPTCHA 3 a website uses to protect against malicious
>>>> attacks ruins your entire day?
>>>
>>>     Yep.
>>>
>>>     Over and out.
>>>
>>>     Oh, and nobody STEALS Linux - it's FREE.
>>
>> Steal? Is that the extent of your idea of malicious?
>>
>> https://linux.slashdot.org/story/25/08/23/0513229/arch-linux-faces-
>> ongoing-ddos-attack
> 
> kernel.org uses the pixie lady if you dig into git -- can't
> download rc kernel sources without seeing her happy smile.
> 
> Some people will be put off by anything -- even stop signs.
> 
> (BTW, Linux 7.2 is released.  Building it now...)


   Well ... I guess that's just IT for Linux. So sad !

   Time to concentrate more on the BSDs ("Ghost" is pretty nice).

   I've only glanced at OpenIndiana/Solaris but it seems to
   have possibilities.

   Sorry, but I'm not gonna have who-the-fuck spy on my PC
   every time I want a Linux distro/update. These days that
   is just an unacceptable security worry.

   And, as said, you can't STEAL Linux - so there's no POINT
   in the pixie girl at all.

   My existing Linux will probably be good for maybe another
   year ... after that the lack of security tweaks will
   become unacceptable.

[toc] | [prev] | [next] | [standalone]

#90041 — Re: Linux 7.2

c186282 <c186282@nnada.net> writes:
> On 8/17/26 04:59, vallor wrote:
>> kernel.org uses the pixie lady if you dig into git -- can't
>> download rc kernel sources without seeing her happy smile.
>> Some people will be put off by anything -- even stop signs.
>> (BTW, Linux 7.2 is released.  Building it now...)
>
>   Well ... I guess that's just IT for Linux. So sad !
>
>   Time to concentrate more on the BSDs ("Ghost" is pretty nice).
>
>   I've only glanced at OpenIndiana/Solaris but it seems to
>   have possibilities.
>
>   Sorry, but I'm not gonna have who-the-fuck spy on my PC every time I
>   want a Linux distro/update. These days that is just an unacceptable
>   security worry.

Anubis is not spying on you.

>   And, as said, you can't STEAL Linux - so there's no POINT in the
>   pixie girl at all.

It’s nothing to do with anyone “stealing Linux”.

-- 
https://www.greenend.org.uk/rjk/

[toc] | [prev] | [next] | [standalone]

#89967

On 2026-08-16 23:44, c186282 wrote:
> On 8/16/26 14:54, rbowman wrote:
>> On Sun, 16 Aug 2026 03:47:41 -0400, c186282 wrote:
>>
>>> WHO told them to do this ???
>>>
>>> No, I'm NOT gonna comply.
>>>
>>> If the Pixie Girl or equivs appear I *instantly*
>>> quit.
>>>
>>> Evil !
>>
>> So a 2 second CAPTCHA 3 a website uses to protect against malicious
>> attacks ruins your entire day?
> 
>    Yep.
> 
>    Over and out.
> 
>    Oh, and nobody STEALS Linux - it's FREE.
> 
Don't bother with Mageia's Bugzilla, then. Before we added mitigation, 
there were times when it was completely unusable, due to bots 
overloading our servers. They still manage to sneak in every once in a 
while, somehow.

So with or without mitigation, you would not be happy with us.

TJ

[toc] | [prev] | [next] | [standalone]

#90011

On 8/17/26 10:30, TJ wrote:
> On 2026-08-16 23:44, c186282 wrote:
>> On 8/16/26 14:54, rbowman wrote:
>>> On Sun, 16 Aug 2026 03:47:41 -0400, c186282 wrote:
>>>
>>>> WHO told them to do this ???
>>>>
>>>> No, I'm NOT gonna comply.
>>>>
>>>> If the Pixie Girl or equivs appear I *instantly*
>>>> quit.
>>>>
>>>> Evil !
>>>
>>> So a 2 second CAPTCHA 3 a website uses to protect against malicious
>>> attacks ruins your entire day?
>>
>>    Yep.
>>
>>    Over and out.
>>
>>    Oh, and nobody STEALS Linux - it's FREE.
>>
> Don't bother with Mageia's Bugzilla, then. Before we added mitigation, 
> there were times when it was completely unusable, due to bots 
> overloading our servers. They still manage to sneak in every once in a 
> while, somehow.
> 
> So with or without mitigation, you would not be happy with us.
> 
> TJ

   OK ... I'll ignore Mageia BugZilla.

   Actually, given the current environ, heading
   into the BSD universe. If I want bullshit I'd
   buy Winders .....

[toc] | [prev] | [next] | [standalone]

#90019

On Mon, 17 Aug 2026 22:25:46 -0400, c186282 wrote:

>    Actually, given the current environ, heading into the BSD universe.
>    If I want bullshit I'd buy Winders .....

That will be a short trip. Every Linux distro you've touched pissed you 
off for one reason or the other. There aren't that many BSD flavors.

[toc] | [prev] | [next] | [standalone]

#90030

On 8/17/26 23:05, rbowman wrote:
> On Mon, 17 Aug 2026 22:25:46 -0400, c186282 wrote:
> 
>>     Actually, given the current environ, heading into the BSD universe.
>>     If I want bullshit I'd buy Winders .....
> 
> That will be a short trip. Every Linux distro you've touched pissed you
> off for one reason or the other. There aren't that many BSD flavors.

   "Ghost" is pretty damned nice. Just downloaded
   the latest one. Have a spare mini-box just
   waiting for a new distro .......

   Also got the very latest Deb and Antix and ...
   well, the most useful/interesting ... over the
   past few days. No Pixie Girl or equiv then
   I'll download. That should keep me good for
   maybe a year.

   A couple years ago I glanced at OpenIndiana/Solaris.
   It didn't seem so bad - but was 'different' enough
   that I didn't wanna bother.

   Now ....

   Anyway, yes, too much BULLSHIT and I will dump
   Linux. Sad, but ya gotta do what ya gotta do.

[toc] | [prev] | [next] | [standalone]

#89961

On 2026-08-16, rbowman wrote:

> On Sun, 16 Aug 2026 03:47:41 -0400, c186282 wrote:
>
>> WHO told them to do this ???
>> 
>> No, I'm NOT gonna comply.
>> 
>> If the Pixie Girl or equivs appear I *instantly*
>> quit.
>> 
>> Evil !
>
> So a 2 second CAPTCHA 3 a website uses to protect against malicious 
> attacks ruins your entire day? 
>
> https://en.wikipedia.org/wiki/Cloudflare#DDoS_mitigation
>
> I hate to tell you but I think your world is going to shrink. I didn't hit 
> the verification with Brave on two different machines. I think that's 
> because I'd been there before and they'd dropped a cookie.

If it is Cloudflare it is guaranteed to ruin some days. Cloudflare
doesn't support other than a few select browsers, at a few select
version ranges. Unless the site owner configures it to somehow let other
browsers bypass the "browser check"(*), you'll be left out of it even
with JS enabled. Anubis tends to be much better in this regard.

(*) Formerly "Browser Integrity Check" with proper fallbacks in place,
    at least when Cloudflare's team didn't forget these were fallbacks
    and shouldn't all require some newer feature like the Origin: header
    being set, which is how they tried to make a self-DDoS in the past.

>  OMG cookies!

Omnomnomnomnom :-P

-- 
Nuno Silva

[toc] | [prev] | [next] | [standalone]

#89973

On Mon, 17 Aug 2026 09:38:41 +0100, Nuno Silva wrote:

> If it is Cloudflare it is guaranteed to ruin some days. Cloudflare
> doesn't support other than a few select browsers, at a few select
> version ranges. Unless the site owner configures it to somehow let other
> browsers bypass the "browser check"(*), you'll be left out of it even
> with JS enabled. Anubis tends to be much better in this regard.

Using mxlinux.org as the test case, I can successfully connect after 
CloudFlare verification with Brave, Firefox, Tor, and Librewolf.  Lynx 
reports:

"Just a moment...
   REFRESH(360 sec): https://mxlinux.org/
   Enable JavaScript and cookies to continue
'

That's expected. No JavaScript, no proof of work. Of course if you use a 
browser without JavaScript in 2026 don't expect to do much on the web. 
What browser are you using that is reject with JS enabled?

[toc] | [prev] | [standalone]

Back to top | Article view | comp.os.linux.misc

csiph-web