Residential IPs and TLS Tricks Failed Against Aggressive Cloudflare Bot Protection

·1 views

A proxy network operator ran controlled tests on 28 requests across seven Cloudflare-protected sites on 27 July 2026, combining datacenter and residential IPs with default Python TLS and Chrome-impersonated TLS via curl_cffi. Every combination failed identically, with zero successful responses out of 28 attempts. The results suggest that on aggressively configured Cloudflare targets, IP reputation and TLS fingerprinting are not the binding constraints — the JavaScript challenge must be executed, which no HTTP client can do regardless of how convincingly it mimics a browser. Researchers also found that HTTP/2 fingerprints remained consistent across all request types, making them a more reliable detection signal than JA3 hashes, which vary per connection even in real Chrome. The team concluded that scraping difficulty varies widely across Cloudflare-fronted sites, and developers should identify where their target sits on that spectrum before investing in proxies or TLS tooling.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Magnitude 7.1 Earthquake Strikes Japan

A magnitude 7.1 earthquake struck Japan, according to data from the Japan Meteorological Agency (JMA). The event was recorded on July 28, 2026, based on the event ID in the JMA source URL. The JMA published details of the seismic event on its official multilingual earthquake information portal. Further details including the exact location, depth, and any reported damage were not available from the provided source.

0 comments Read more at Hacker News

ProgrammingDEV Community ·

Context Engineering, Not Prompt Engineering, Is the Key to Reliable AI Coding Agents

A growing body of developer experience suggests that the real bottleneck when working with AI coding agents is not how prompts are worded, but what information is loaded into the agent's context window and when. Practitioners recommend maintaining a project-level instructions file — such as CLAUDE.md or .cursorrules — that captures build commands, architectural decisions, and hard boundaries rather than restating things the agent can infer from code. Because agents lose all session context once a conversation ends, developers are also advised to keep a separate directory of topic-scoped memory notes recording non-obvious decisions, rejected approaches, and lessons learned that no static analysis tool would surface. Subagents are highlighted not just for parallelism but for context isolation, allowing exploratory tasks to run separately so their intermediate token load does not crowd the main working session. Together, these practices form a deliberate, teachable discipline the article calls context engineering, aimed at reducing hallucinations and improving output consistency across coding agent sessions.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Zero Trust for OCI Databases: Why Basic Access Hygiene Comes Before Architecture

A technical article by Abhilash Kumar Bhattaram, part of a 52-week series, examines how database access control in Oracle Cloud Infrastructure (OCI) involves multiple overlapping layers including IAM policies, network security groups, compartments, and the database's own privilege model. The piece identifies nine common access misconfigurations — such as overly broad IAM policies, shared admin credentials, and open DB listener ports — that typically stem from convenience decisions never revisited. Bhattaram argues that least privilege must be enforced in practice across each layer of the access chain, not treated as a policy statement alone. He recommends concrete fixes including scoping IAM policies to named groups and compartments, using Dynamic Groups for automation, and conducting periodic access recertification. The article positions foundational access hygiene as a prerequisite to implementing a full Zero Trust architecture for cloud databases.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Tests Visual Builder vs AI Prompting to Build the Same Landing Page

A developer at Neleto built the same four-section landing page twice — once manually using the platform's block-based visual editor and once by prompting Claude via an MCP server. The manual build took roughly 11 minutes, with multi-column content proving the most time-consuming step at four minutes alone. The AI-assisted build completed in about 90 seconds, handling repetitive parallel content most efficiently but still requiring minor manual tweaks for polish. The experiment led to a practical workflow: use prompts for structural and repetitive layouts, and the visual editor for fine-tuned design decisions. The author concludes that combining both methods — AI for scaffolding, mouse for finishing — is the fastest way to publish a page on Neleto.

0 comments Read more at DEV Community