challenge-bypass-extension icon indicating copy to clipboard operation
challenge-bypass-extension copied to clipboard

captcha.website does not detect Privacy Pass 3.0

Open ilf opened this issue 2 years ago • 30 comments

I installed Privacy Pass 3.0 (on Tor Browser 11.0.4). Visiting https://captcha.website/ shows no captcha challenge, but tells me to install the (already-installed) plugin.

captcha website

ilf avatar Feb 03 '22 10:02 ilf

Also same thing on Edge but now sure if it works on Edge or now

rolltidehero avatar Feb 03 '22 10:02 rolltidehero

Possibly you access the website and get the cf_clearance cookie before installing the extension. The extension is supposed to remove any existing cookie for the website, but it's not implemented yet.

Could you please remove the cookies of captcha.website? and then try using the extension again. The extension should work fine afterwards.

ppopth avatar Feb 03 '22 11:02 ppopth

I just noticed that you are using Tor Browser. We are still having an issue with Tor Browser in #277 I'm not sure it's related and I haven't tried to debug yet. Let's try removing the cookies first and see how it goes.

ppopth avatar Feb 03 '22 11:02 ppopth

Could you please remove the cookies of captcha.website?

This is not it. I tried by closing TBB, clearing all cookies, restarting TBB and opening captcha.website without any cookies whatsoever.

ilf avatar Feb 03 '22 11:02 ilf

We are still having an issue with Tor Browser in #277 I'm not sure it's related and I haven't tried to debug yet.

I filed #277 and that's a different bug. This one here happens way before, I don't even get to the point of #277 any more.

ilf avatar Feb 03 '22 11:02 ilf

This might be a duplicate of #291.

alerque avatar Feb 04 '22 10:02 alerque

I think this is a copy of #291 it was updated to 3.0.1 which seemed to fix it so try now Updating and see I suggest @ilf

mendelsphotography avatar Feb 06 '22 02:02 mendelsphotography

As of 3.0.1 this is working for me on CloudFlair and the captcha.website site, but still not for hCaptcha. That might be a different issue, so this perhaps can be closed.

alerque avatar Feb 06 '22 07:02 alerque

Yep me to I open a new issue about the hCaptacha #294

mendelsphotography avatar Feb 06 '22 08:02 mendelsphotography

I am trying to test this with 3.0.1. Unfortunately, I can't get past the Cloudflare Captcha wall:

captcha

The wonders of using Cloudflare Captchas to get around Coudflare Captchas…

ilf avatar Feb 06 '22 12:02 ilf

@ilf Same problem here, just since last night. 3.0.1 had started to work for me, now not only does it not work but on multiple devices I'm not even getting the captcha's to load. As shown in your screen shot it just gets stuck at checking browser...

alerque avatar Feb 06 '22 13:02 alerque

Same (new) issue in Chromium 98.0.4758.80 without Tor:

captcha

ilf avatar Feb 07 '22 09:02 ilf

captcha.website is a special web page which is used only for issuing the tokens. You will always see the captcha page in captcha.website, so this is expected.

ppopth avatar Feb 07 '22 11:02 ppopth

ppopth: I don't understand.

First, Cloudflare issues a Captcha BEFORE I can visit captcha.website. This fails now.

Second, captcha.website shows a Captcha to get tokens. This was not displayed in the original bug report.

ilf avatar Feb 07 '22 11:02 ilf

Oh sorry, I didn't notice that the issue is on the "Please stand by,..." message. I just tried again now and it didn't get stuck on that message.

Can you try again (not in Tor Browser) and see if it still get stuck on that message?

ppopth avatar Feb 07 '22 12:02 ppopth

Can you try again (not in Tor Browser) and see if it still get stuck on that message?

Just tried again, in Chromium 98.0.4758.80 without Tor, still stuck on "Please stand by, while we are checking your browser..."

ilf avatar Feb 07 '22 12:02 ilf

@ppopth On Saturday (after updating to 3.0.1) I was able to visit captcha.website and it showed the captcha and each time I filled it out I got 30 tokens. Starting on Sunday and continuing till just now, it never even shows a captcha it is just stuck on "please stand by, while we are checking your browser" (comma mistake theirs). It never gets past that to an actual captcha.

I am not using Tor or anything else that I wasn't using on Saturday.

alerque avatar Feb 07 '22 19:02 alerque

I get the same please wait message and when I go to inspect I get the following: image

Mathew-D avatar Feb 07 '22 23:02 Mathew-D

Cloudflairs links to this plugin from their captcha guard page. You would think if it was official enough to endorse with a link they might do just a little regression testing so that it isn't broken 364 days out of 365.

alerque avatar Feb 08 '22 08:02 alerque

Since 2 hours ago, https://captcha.website is working again to earn CF tokens, at least via Firefox and extension version 3.0.1. The hCaptcha token site is still not registering anything but "N/A".

alerque avatar Feb 08 '22 10:02 alerque

What do I need to do to stop all the errors

Get Outlook for Androidhttps://aka.ms/AAb9ysg


From: Caleb Maclennan @.> Sent: Tuesday, February 8, 2022 4:18:11 AM To: privacypass/challenge-bypass-extension @.> Cc: Subscribed @.***> Subject: Re: [privacypass/challenge-bypass-extension] captcha.website does not detect Privacy Pass 3.0 (Issue #293)

Since 2 hours ago, https://captcha.website is working again to earn CF tokens, at least via Firefox and extension version 3.0.1.

— Reply to this email directly, view it on GitHubhttps://github.com/privacypass/challenge-bypass-extension/issues/293#issuecomment-1032441319, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AWJVVUCTDNR735IKMPTMS53U2DUWHANCNFSM5NOORYMA. Triage notifications on the go with GitHub Mobile for iOShttps://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Androidhttps://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub. You are receiving this because you are subscribed to this thread.Message ID: @.***>

Deyrap355 avatar Feb 08 '22 10:02 Deyrap355

@Mathew-D is that from the tab developer tool or the extension developer tool?

ppopth avatar Feb 08 '22 11:02 ppopth

Extension developer tool

Deyrap355 avatar Feb 08 '22 11:02 Deyrap355

Still not working here, in two browsers. https://captcha.website/ still doesn't display, only "Please stand by, while we are checking your browser..."

ilf avatar Feb 08 '22 11:02 ilf

Could anyone give me the HAR file from the tab developer tool please? I cannot reproduce it yet.

ppopth avatar Feb 09 '22 05:02 ppopth

I feel uneasy publishing the entire HAR file, but here's the error log: captcha.website.log

Error with Permissions-Policy header: Unrecognized feature: 'interest-cohort'.
captcha.website/:1          GET https://captcha.website/ 403
api.js?render=explicit&recaptchacompat=off&onload=_cf_chl_hload:2 recaptchacompat disabled
favicon.ico:1          GET https://captcha.website/favicon.ico 403
v1?ray=6dab9657ce372669:1 [[[ERROR]]]: Message: Uncaught SyntaxError: Invalid or unexpected token - URL: https://captcha.website/ - Line: 3 - Column: 1 - Error object: {} undefined
VM40:3 Uncaught SyntaxError: Invalid or unexpected token
    at new Function (<anonymous>)
    at XMLHttpRequest.E.<computed> (v1?ray=6dab9657ce372669:1:10975)
E.<computed> @ v1?ray=6dab9657ce372669:1
XMLHttpRequest.send (async)
d.<computed> @ v1?ray=6dab9657ce372669:1
setTimeout (async)
(anonymous) @ v1?ray=6dab9657ce372669:1
z.<computed> @ v1?ray=6dab9657ce372669:1
u @ v1?ray=6dab9657ce372669:1
d._cf_chl_enter @ v1?ray=6dab9657ce372669:1
(anonymous) @ v1?ray=6dab9657ce372669:1
(anonymous) @ v1?ray=6dab9657ce372669:1
setTimeout (async)
A.<computed> @ v1?ray=6dab9657ce372669:1
x @ v1?ray=6dab9657ce372669:1
(anonymous) @ v1?ray=6dab9657ce372669:1
(anonymous) @ v1?ray=6dab9657ce372669:1

ilf avatar Feb 09 '22 08:02 ilf

Still true with 3.0.1:

pp

ilf avatar Feb 19 '22 15:02 ilf

@ilf are you still able to reproduce the issue?

migueldemoura avatar May 20 '22 13:05 migueldemoura

@migueldemoura Now https://captcha.website/ shows me a challenge even though I have 30 tokens:

captcha website

ilf avatar May 24 '22 19:05 ilf

@ilf That's what it is supposed to do! That website's only purpose is to just keep showing you captchas and (if it is working) racking up tokens in the process.

alerque avatar May 24 '22 20:05 alerque