Cloudflare can't win in the long term. The rest of the world just has too much resources compared to them.
replyYou just need to make it "difficult enough". If the energy/processing costs of bypassing Cloudflare is high, then it doesn't scale up to a distributed domestic IP scrape of my million page website.
replyThis is a war yes but Cloudflare already lost it. Cloudflare bypass is the hello world of bots, they just keep hobbists out, at most.
replyI don't think they lost anything. They just need to keep up with them a bit better.
replyI really wouldn't worry about this. People are already doing much more advanced, compute cycle intensive cloudflare bypasses with things like playwright + camoufox:
replyhttps://github.com/daijro/camoufox
There are various headless antidetect browsers now which are patched at the source code level to avoid headless-browser-detection systems, and to present consistent profiles for things like webrtc/webasssembly capability and other features that looks like a legit normal user agent of someone running MS Edge on Windows 11 on a consumer grade laptop. Or whatever the desired profile is. Often coupled with residential or mobile carrier proxies.
I mean, take a look at this and tell me if you think a cloudflare turnstile stands a chance when you are ready to spend the CPU cycles on running an entire browser and human-behavior simulation stack: