摘要： ChatGPT通过Cloudflare Turnstile程序检测浏览器指纹、网络信息和React应用状态，共55个属性。程序使用服务器生成的浮点数XOR密钥解密，检测包括GPU、屏幕、字体、地理位置、IP、React内部变量等。加密方式为XOR，但密钥在数据流中，无法完全防止分析。验证流程包含三个阶段：准备请求获取密钥、解密外层字节码、提取内层密钥解密指纹数据，最终生成唯一令牌。检测机制包含静默网页探针、行为生物识别（如事件监听器）和PoW验证。
讨论： OpenAI and Cloudflare implement bot detection measures to prevent abuse and ensure resource allocation. MyNameIsNickT explains OpenAI’s focus on minimizing user impact (e.g., delays, captchas) while deterring bots. Users like lxgr criticize Cloudflare’s heavy-handed approach, while others like i18nagentai highlight privacy risks (Cloudflare accessing DOM data). Londons_explore proposes a cost-effective bot workaround using VMs, while technion questions Turnstile’s specificity. Ripbozo humorously notes AI’s role in the article’s creation.
原文标题：ChatGPT won’t let you type until Cloudflare reads your React state
原文链接：https://www.buchodi.com/chatgpt-wont-let-you-type-until-cloudflare-reads-your-react-state-i-decrypted-the-program-that-does-it/
讨论链接：https://news.ycombinator.com/item?id=47566865