Writing as: Hausgeist

Strong opinions, loosely held.

Certainly a niche problem but if you are using the Cookie AutoDelete addon in your browser you may eventually find yourself waiting for an abnormal amount of “Cloudfare Security Verification” prompts, confirming that you are — supposedly — a human.

That is because your (or rather: your browser's) success in solving their proof-of-work, proof-of-space or other verification mechanisms is usually stored in a cf_clearance cookie. With addons like Cookie AutoDelete or other automated tools for clearing your cookies periodically, you will also end up clearing this cookie, so the next time you visit a given site, it will send you through the turnstile again.

For Cookie AutoDelete there is a fairly simple fix for this, although not available through the addon's settings or UI-based expression generator. You can save the following JSON snippet to a file, go to the List of Expressions in Cookie AutoDelete's settings, and load the file via the Import Expressions button.

{
  "default": [
    {
      "id": "Keep cf_clearance to avoid repeated Cloudflare verification",
      "expression": "*",
      "listType": "WHITE",
      "storeId": "default",
      "cookieNames": [
        "cf_clearance"
      ]
    }
  ]
}

This adds the cf_clearance cookie to the global allow list (based on the "*" expression) and it will no longer be deleted.

Of course you can also modify the expression to your needs and narrow the domains it applies to.

By now it's a well established fact that Substack likes hosting nazis. They are the digital publishing equivalent of the old nazi bar story.

And what do you do with a nazi bar? That's right, you stop going there.

Now, it's easy enough to avoid pages under the substack.com domain, maybe you even add it to your adblocker. What about those substacks with a custom domain though? They seem innocuous at first glance, and then later you realize that they are hosted on Substack and suddenly you feel all ashamed for supporting a nazi bar.

Well, if you are fortunate enough to run your own DNS resolver like AdGuard Home, here's a couple blocking rules that will stop that from happening:

||substack-custom-domains.com^
||substack.com^
||substackcdn.com^
||substack-post-media.s3.amazonaws.com^

Hello world.

This is a new beginning.