psa We're Cloudflare protected now

[+InsaneNutter MVC]

Some of the Cloudflare rules such as "OWASP Uri XSS Attacks" and "OWASP XSS Attacks" can cause issues when people try post / edit posts on forums I found. It's certainly a bit of trial and error to get things working smoothly.

Security wise something you can now do if your not already is only allow Cloudflare's IP range to access Neowin's servers on ports 80 / 443: https://www.cloudflare.com/en-in/ips/ - essentially stopping anyone bypassing Cloudflare's WAF to scrape / try exploit the site.

[+Edouard Subscriber²]

I've not experienced any of the issues described in this forum until this morning.

Suddenly, I'm seeing warning messages informing me I can't view mini spy threads. I then realize Neowin has logged me out. I log back in but it's inconsistent as it only keeps me logged in for a short while.

It appears to be completely random in my case.

Anyway, hopefully admin can get these bugs sorted soon.

Enjoy your weekend everyone.

Edit: Just tried Brave browser and it's logging me out of my Neowin account as well. Super annoying!

[Steven P. Administrators]

Guys, the verify is turned off.. according to @DaveLeggwe only have botnet protection.. but I do not know the extent of it on IPs, because we are actually quite a ways down in numbers since it was enabled earlier this week.

But if you can access Neowin, and some other thing is happening it has nothing to do with Cloudflare "verify if you are human" check, because that is off.

My suggestion is to clear cookies and data for neowin.net and login again.

[WITHOUT-ME]

this AD block popup in annoying

[adrynalyne]

On 05/06/2025 at 17:44, WITHOUT-ME said:

this AD block popup in annoying

🎻