[gruez]

Bad optics aside, it doesn't actually reflect reality. See my other comment. You can enable basically all the privacy settings and still pass turnstile. Tor browser in a VM passes it, of all things.

https://litter.catbox.moe/gaizpk692bhhs6b7.png

[JoshTriplett]

Any idea what the difference is between your setup and the one in the article that failed with fingerprint-resistance enabled?

[gruez]

He's using a custom browser, apparently: https://hacktivis.me/projects/badwolf

[JoshTriplett]

I'm talking about the screenshot from Firefox.

[gruez]

It didn't fail for him in firefox, even with privacy settings enabled.

[JoshTriplett]

It tripped "Canvas Randomization Detected". See the last screenshot.

Cloudflare's demo page still treats that as a pass, but complains about it. As is often the case with Cloudflare, I expect that they'll then take no responsibility for sites that use more aggressive settings.