The Most-Seen UI on the Internet? Redesigning Turnstile and Challenge Pages

https://blog.cloudflare.com/the-most-seen-ui-on-the-internet-redesigning-turnstile-and-challenge-pages/

36•corvad•1h ago

Comments

noplacelikehome•58m ago

As a user of an unsigned Firefox fork, Turnstile has ruined a moderate portion of the Internet for me. The way Cloudflare doesn’t think twice about eroding user freedoms, for the sake of a gate that can be trivially bypassed with solvarr or similar, is deeply disturbing. They are no longer a force for good on the web.

tempest_•53m ago

As bad as cloudflare is there is a reason people use it.

If you try and run a site that has content that LLMs want or expensive calls that require a lot of compute and can exhaust resources if they are over used the attack is relentless. It can be a full time job trying to stop people who are dedicated to scrapping the shit out of your site.

Even CF doesnt even really stop it any more. The agent run browsers seem to bypass it with relative ease.

neoromantique•41m ago

Vast majority of websites today can and should be static, which makes even the aggressive llm scrapping non-issue.

PaulDavisThe1st•36m ago

One of the things that a lot of LLM scrapers are fetching are git repositories. They could just use git clone to fetch everything at once. But instead, they fetch them commit by commit. That's about as static as you can get, and it is absolutely NOT a non-issue.

LoganDark•25m ago

No... Basically all git servers have to generate the file contents, diffs etc. on-demand because they don't store static pages for every single possible combination of view parameters. Git repositories also typically don't store full copies of all versions of a file that have ever existed either; they're incremental. You could pre-render everything statically, but that could take up gigabytes or more for any repo of non-trivial size.

KolmogorovComp•14m ago

> Git repositories also typically don't store full copies of all versions of a file that have ever existed either; they're incremental

This is wrong. Git does store full copies.

neoromantique•16m ago

that's a pretty niche issue, but fairly easy to solve.

Prebuild statically the most common commits (last XX) and heavily rate limit deeper ones

flexagoon•46m ago

I see people saying that a lot, but I use Zen which is a fork of Firefox and I don't think I've ever had an issue with Turnstile, at least not noticeably more than I had on mobile Chrome.

pchew•36m ago

Zen has been signed for close to a year.

tick_tock_tick•34m ago

Isn't it the opposite? They allow you to still use it when it would almost certainly be better for cloudflare and the website behind then to just block you.

sebzim4500•8m ago

How does Cloudflare know you are using the fork? Can you not just set the user agent to match firefox's (or even chrome's for that matter)

stevebmark•36m ago

37 em dashes :(

upmind•29m ago

If this truly was written with AI it's really quite poor. Some of the employees at Cloudflare seem to be negligent tbh based off the fact they've been down so many times recently

DavidVoid•24m ago

I like em dashes—and sometimes overuse them—but 37 times is absurd in that amount of text.

mock-possum•20m ago

That’d make a good tongue in cheek band name for AI music

christina97•34m ago

Am I reading it right, the widget is seen 5B times per day, and they recruited 8 people for testing to make sure their “redesign would work for everyone”…?

mock-possum•21m ago

With a bit of A/B testing they could’ve recruited billions of people sounds like…

KolmogorovComp•15m ago

This! The comment I was angrily about to write.

jazzpush2•10m ago

Why? Genuinely, who cares? Is some demographic group not caught in the 8 going to be offended by basic checkbox screen? Is someone with a niche form of colorblindness going to have difficulty navigating the UI?

KolmogorovComp•2m ago

How can you seriously pretend to do any study with only eight people involved? Especially when your company is worth billion. It just calls for bad press and criticism of amateurism.

kingkongjaffa•3m ago

The process described in the article is literally just checking the boxes blindly for what passes for a design process these days. The guru's say interview customers so they have done just that without really understanding why. Given it's AI it's also possible the whole thing is entirely made up and someone just tweaked the design over an afternoon and shipped it.

Starlevel004•34m ago

> Designing a product with billions of eyeballs on it isn't just challenging — it requires a fundamentally different approach.

I'm not reading this.

upmind•32m ago

Did you base the AI use on the emdash or is this an a common AI phrase (or both)?

iamacyborg•30m ago

“It’s not X, it’s Y” is an absolutely ubiquitous AI pattern. Throw in an em-dash and it’s basically ai;dr

upmind•28m ago

Thx!

Starlevel004•30m ago

"Not just X -- it's Y" is one of the more irritatingly common signs, especially for sentences like that one which absolutely do not need it.

The Wikipedia article on detecting AI writing is a big help if you need to calibrate your sensors: https://en.wikipedia.org/wiki/Wikipedia:Signs_of_AI_writing

upmind•28m ago

I see, thx for the article too!

upmind•27m ago

I think I'll actually post the article here, quite useful

mock-possum•22m ago

Yeah it’s basically the prose equivalent of getting too much radio play - hilarious how the breakthrough of LLM content has ‘ruined’ “it’s not X—it’s Y” for so many of us now

Maybe, like overplayed pop songs, in 20 years or so we’ll come around to viewing the phrase fondly.

Retr0id•28m ago

It's not just overused phrasing — it's the hallmark of LLM prose.

mostlysimilar•20m ago

It's also just an utterly meaningless statement. Filler words with no value whatsoever.

JadedBlueEyes•23m ago

Yet again [0] quality standards seem to have slipped on the cloudflare blog. I'm not able to point at a cause, but it's not painting a pretty picture.

[0]: https://news.ycombinator.com/item?id=46781516

thorum•19m ago

Their design approach wasn’t particularly unusual, so I’m not sure what that sentence means.

I do miss the days when technical reports were clear and concise. This one has some interesting information, but it’s buried under a mountain of empty AI-written bloat.

dematz•7m ago

It's annoying because it is a super common widget and it is interesting work, the first draft or literally even prompt they gave the AI probably would've been a great post, all they had to do was not ensloppify it...

andrepd•5m ago

That's why I say most AI content isn't just slop—it's fundamentally about deception. It's about tricking someone into believing that a text was written by a human, or that a photo or video is a true recording of a real event.

Like this, its purpose is to fly under the radar unless your figurative ears are pricked up and primed to detect the telltale signs. Fuck this shit.

tamimio•2m ago

I remember back I think around 2011, CF was new and I was testing it on some vbulletin forum, all the email communication were with the cofounder if I recall correctly, the UI had only the dns settings back then. Now they make a whole article on some text redesign, time flies.

Retr0id•30m ago

Their final design looks incredibly visually unbalanced, the icon on the left does not have enough breathing room on the left and right.

furyofantares•18m ago

LLM-ass written content about this widget nobody wants but is necessary due to bots. Fuck off and write the post yourself.

altern8•11m ago

CloudFlare might be good for site owners, but many times their page makes me click back to search results.

I can't be the only one.

It's slow and annoying, AI overview is good enough for me most of the times so that added time I bet makes websites lose a lot of visits.

jdprgm•11m ago

Remember when we used to care about sub 100ms page loading time and now we have introduced a best case 5 second blocker all over the place.

diath•7m ago

Will this also be accompanied by a global Turnstile outage like all the other Cloudflare services that get touched? If they end up vibeslopping the redesign like they did with this article, it may just happen.

masswerk•5m ago

> We recruited 8 participants across 8 different countries, deliberately seeking diversity in age, digital savviness, and cultural background.

> 5 out of 8 points versus just 3 for "I am human." For the verifying state, it was even more dramatic — 7.5 versus 0.5.

n × p >= 5? (Sample size and margins of errors. Is 5:3 even meaningful or is this rather random personal preference?) Apparent splitting of missing or inconclusive data points? (7.5 vs. 0.5 out of a total of 8 subjects.) What kind of (social) research is this supposed to be?

Claude's Constitution (2023)

The Legal Rights of Extraterrestrials

'RentAHuman' platform includes Texans who can be rented by AI agents for tasks

Input Remapper – easy to use tool to change the behaviour of Linux input devices

Enclave gem: Mega useful if you're building agents on Ruby on Rails

AutoKey – a desktop automation utility for Linux and X11

Qt45: A small polymerase ribozyme that can synthesize itself

An update on our mental health-related work

Word2vec4kids

Proximity to nuclear power plants associated with increased cancer mortality

The Story of XPilot

Add salvage drip emails for churned users

Trump's Foreign Policy: Resurrecting Empire

Violent Crime Drops in SF as Major US Cities See Declines

The Data Project – data journalism sites built from public government datasets

Altman says OpenAI agrees with Anthropic's red lines in Pentagon dispute

Federal agencies may have a Claude problem now

Show HN: I built a site where you hire yourself instead of applying for jobs

Show HN: Rapidly build efficient sites with Neat, the minimalist CSS framework

Need ArXiv endorsement.. CS. Multiagent-Systems [pdf]

Show HN: XDP firewall that auto-syncs open ports – built after my VPS got DDoS'd

Show HN: Taskdog – Terminal-based task manager with schedule optimization

Show HN: AgentGate – Stake-Gated Action Microservice for AI Agents

Show HN: Market Digest: Self-hosted market analysis and Telegram

Zugunruhe, and what makes things worth doing

Show HN: Caret – tab to complete at any app on your Mac

Perplexity Computer: What I Built in One Night (Review and Examples)

Ask HN: Do you enforce Prettier in all Next.js projects?

Show HN: Notemac++ – A Notepad++-inspired code editor for macOS and the web

Technical Recruiter in 2026