Bug overview description.

Almost all of the time (98-99%, I'm not exaggerating) of the time, when I access the site nowadays using TOR (through an up-to-date Tails install,) I do not get a cloudflare challenge. As a result, even though I can log in, I can't do, well, just about anything that you'd need to log in for -- not even favoriting posts.

If I do get the challenge (which I'm guessing, but cannot confirm, ony happens with select exit nodes,) and log in (and check the box to not bind my login to an IP,) I can use site functionality until I log out or close out the browser. Then it's a crapshoot again as to whether I get a challenge. If I don't check the box, then the next time TOR switches paths, I'm screwed again.

What part(s) of the site page(s) are affected?

Pretty much everything you need to log in to do. Saving favorites, posting here, adding comments...etc.

What actual behavior is given instead?

Cloudflare challenges should be presented every time you access the site, for TOR users.

Time of incident (if applicable).

This is the first opportunity I've had to make a post to the forum about this, because it's the first time I've been offered a cloudflare challenge in over a month. This all started around the time the Cloudflare hack came out. Seriously, it's been going on for months, consistently, at all times of the day.

Can you reproduce the bug every time?

Yes.

What steps did you take to replicate this bug?

Accessing the site, logging in, and attempting to favorite posts, with and without cloudflare challenges.

It took me a while to figure out that not getting the cloudflare challenge was the problem.

Errors or other messages returned (if any).

When attempting to favorite posts, 'forbidden' appears where you'd see the 'Added to favorites' banner. Most other things you try either don't allow you the option (like posting to the forum), fail silently, or give a 'forbidden' response.

I've got no problem having to solve cloudflare challenges, but can you guys fix it so that they're always presented? Or so that we can request one or something? Or just let people favorite posts even if they haven't passed a cloudflare challenge, which is, frankly, the only thing I care about 95% of the time and seems an exceedingly low risk to the site to allow?

NOte: This seems to be related to this bug report, as the root cause of the problem. https://e621.net/forum/show/231502