snuffyDev / Beatbump

Alternative YouTube Music frontend built with Svelte/SvelteKit 🎧
https://beatbump.io/
GNU Affero General Public License v3.0
1.05k stars 87 forks source link

Request: Beatbump.ml is not accesible on privacy-oriented web browser #58

Closed Kreyren closed 2 years ago

Kreyren commented 2 years ago

I use random routing, fingerprint and emulated hardware GNU IceCat running in Xen para-virtualized environment which makes it impossible to access the website without sacrificing on privacy as cloudflare only lets through users which it can fingerprint for tracking..

Proposal

Disable cloudflare gate


CC @snuffyDev

snuffyDev commented 2 years ago

By cloudflare gate, do you mean DNS? I'm looking for any settings in the Cloudflare dashboard but i'm not seeing any. If the issue stems from it being all hosted through Cloudflare, I'm trying to change that, but have been having trouble finding solutions for my current financial situation

Kreyren commented 2 years ago

The DNS is not a problem, but what it redirects to is.

This is the "cloudflare gate":

2022-05-10_07-45

It's presented as "DDoS protection", but it makes the website not accessible unless cloudflare is able to fingerprint the user and track it across the web (and is also a MITM). -> I can't access the website without using static snapshots or using decloudflare to find the real server IP which breaks lot of websites (and takes around 10 min to finish and is basically a DoS).

It can be disabled in settings look for DDoS protection and disable it.

snuffyDev commented 2 years ago

Thanks for the clarification, I’m going to dive into the settings in a minute, so give me some time to do that. I’ll let you know what changes I make and will update when I do them. When that happens, let me know if things get fixed.

I’m on my phone right now, but I turned “security level” to low and disabled Integrity Checks. But I suspect more will be needed

Kreyren commented 2 years ago

Ok thanks for fixing that! :rocket:

Let me know when should i check it

snuffyDev commented 2 years ago

Knocked it down to 'Essentially Off' for security level. I have a few firewall and DNS rules in place that shouldn't block, but still filters out at least the bad stuff. Try it now, if it still blocks, give it 30 mins-1 hour to ensure the changes have taken effect. Update me with what happens!

Kreyren commented 2 years ago

So far seems to work perfectly! Thanks

davidcollini commented 2 years ago

This issue can be closed