Skip to main content

We hit an unexpected error - Vercel Security Checkpoint - VPN


Every now and then (I haven’t measured the exact time, but it seems every 15-30 minutes), the T3 Chat UI shows the above error message. The “Reload App” button doesn’t do anything when clicked. Pressing F5 to refresh the browser shows the Vercel Security Checkpoint for a bit, then the T3 Chat UI works again.

This started last week or so, that’s also the first time I’ve seen the Vercel Security Checkpoint UI. The error seems to be related to that as well, given that the technical details are Vercel’s HTML document?!

I should note that this only happens when I access T3 Chat from my company’s network. That also causes other problems like LLM answers only appearing after they’ve been fully “typed out”. In the network tab, I can see a lot of “429 too many requests errors” for some requests like “api/server-version” and “api/status”, which could be related.

Status: Completed15 comments

Log in to comment and vote

Comments15

  • Mark Florkowski

    Team

    We recently had to enable additional security checkpointing because of multiple DDOS attempts, and it seems that certain VPNs are getting hit with false positive bot identifications. We are working on getting this resolved, but it is non-trivial to detect this accurately.

  • Copper Eraser

    •

    Merged request

    Vercel Security Checkpoint

    Vercel appears to block both Firefox and Chrome on Android, and also Firefox on Desktop (Linux), but not Chrome on Desktop. All devices with same IP address…

    If it was a free service, I would understand having a CAPTCHA. But for a paid service where a user logs in with an account and even has quite restrictive limits, this shouldn’t even exist imo…

    • Mark Florkowski

      Team

      Due to a recent increase in DDoSes, we have needed to enable higher security on the checkpoint. Most users should not encounter this. Are you potentially using a VPN?

      • Rose Octopus

        Hi - I’m not seeing this quite often after my company enabled a proxy solution. Anything I can share to help diagnose the issue more with you guys?

        • Mark Florkowski

          Team

          To clarify, you are seeing it more or less now with the proxy?

          If more, if you can send the IP blocks your company uses to support@t3.chat, I can specifically allowlist them

          • Rose Octopus

            apologies, I am seeing it more with the proxy being enabled. Can I send these over privately to you?

    • Aqua Snowflake

      Same thing here. It’s annoying. Using VPN.

      When I reload, half of the time i get “verifying browser” than hangs.

      I get this every time I leave the tab in Edge for more than 5 minutes.

      • Mark Florkowski

        Team

        We are actively looking for more ways to better verify real vs bot users, but it seems like some VPNs are still messing with the identification. Are you logged in when you are encountering this?

        • Harlequin Star

          For me I am indeed logged in. I usually send a message then need to reload the page then retry the message :(

          • Mark Florkowski

            Team

            What VPN service are you using? Can you try accessing the site without a VPNP to see if you still have the issue?

            • Harlequin Star

              Only happens when I’m using a VPN. I use windscribe

              • Mark Florkowski

                Team

                Ah yup, ok. We are working on reducing false positives, but it’s difficult as many malicious actors use these cheap VPN services to get around blocks, so it is a continual game of cat and mouse trying to aidentify real users while still blocking attacks.

                • Harlequin Star

                  Yeah is there a way to like filter out paid users 🤣 hahahah since I’m paid anyway, but I’m not sure if other paid users do random bullshit which makes you still wanna block VPNs hahaha.

                  • Mark Florkowski

                    Team

                    We do try to, but there are some preflight requests I believe that we don’t have control over which mess things up :/ Working on continuing to patch up the edges as I find ways to