Fediseer

454 readers

1 users here now

Announcements, news, devlogs and general discussion about The Fediseer (API)

Show off your instances endorsements and guarantees with individualized badges:

If you appreciate what this service provides, please consider funding the Fediseer development on liberapay

founded 3 years ago

MODERATORS

db0@lemmy.dbzer0.com

Feature request: plz add a boolean to indicate cloudflare (linkage.ds8.zone)

submitted 2 weeks ago* (last edited 2 weeks ago) by LibreMonk@linkage.ds8.zone to c/fediseer@lemmy.dbzer0.com

7 comments fedilink hide all child comments

Rationale:

The db currently tracks “has_captcha”. Cloudflare influences that regardless of whether the site is itself configured to push a CAPTCHA.
The db currently tracks “open_registrations”. The degree of openness depends on whether a node is on Cloudflare, regardless of how the software is configured.
Checking for Cloudflare is free. That is, no extra connections are needed. It’s simply a matter of checking for the presence of CF-RAY in the http headers on existing fetches.
The mission purpose of fediseer is to facilitate trust assessment. The use of Cloudflare is a significant factor in that regard.

you are viewing a single comment's thread
view the rest of the comments

[–] LibreMonk@linkage.ds8.zone 1 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

Would you mind describing it? That forge is apparently down.

[–] Tealk@rollenspiel.forum 1 points 1 week ago (1 children)

Down? Run smoothly

[–] LibreMonk@linkage.ds8.zone 1 points 1 week ago* (last edited 1 week ago) (1 children)

It’s still down for me. Just times out. So I have no idea what you propose.

Anyway, I don’t imagine how a workaround would be possible. The dataset is missing the data. If I have to scrape for the data myself, it defeats the point of a public dataset. I could write in my code a Cloudflare check, but that doesn’t help anyone else using the fediseer dataset.

[–] Tealk@rollenspiel.forum 2 points 1 week ago (1 children)

Then the only thing that comes to mind is that your IP address must be on a Crowdsec ban list.

https://codeberg.org/Tealk/fediseer-hesitations-cloudflare

[–] LibreMonk@linkage.ds8.zone 1 points 6 days ago

Thanks! Codeberg.org gives my browser problems, but I was able to shallow clone that over Tor using git.

My first hack was to add a --socks4a parameter to all the curl calls to force it over Tor.

It did not work out of the box. I could see that it sources config.sh. The example file shows API keys. The instances_list.json file shows {"error":{"message":"Invalid Authorization header."}}, which implies that I need an API key. If I simply run this:

curl --socks4a 127.0.0.1:9050 -o "${filename}" 'https://fediseer.com/api/v1/all_instances'

there is no problem. I suppose you have hard-coded an API key to do operations that submit data, which is then used for getting data as well. Anyway, the script works for checking a single instance.

I wrote a script that uses Cloudflare’s ASNs to grab all its IP ranges. Then the script checks without even connecting to the target just by resolving the IP and checking if it matches CF’s range. It’s still just a messy workaround. It’s really something that should be in the fediseer dataset.