Twitter shows “Something went wrong” only when using FingerprintSwitcher — works fine without fingerprint

[hongblackhat]

have the same issue. Any news for how to fix it?

[tersinemuhendis]

After three months of in-depth analysis, we’ve completely resolved the castle_token issue. castle_token is a real headache. @m4zuper
You need to make a major update to BAS. castle.io can bypass BAS directly and detect the computer’s original fingerprint.
The problem is that the BAS fingerprint system only works for page load.
However, castle.io opening a new worker and retrieving the fingerprint from there bypasses all of BAS’s fingerprint manipulation systems.

[tersinemuhendis]

If I had to explain this briefly, think of it this way—my English isn’t very good.
BAS > x.com > page load fingerprint is active (meaning BAS has injected the fingerprint) > x.com loads a JavaScript chunk (3 different modules) > the module (castle_sdk) starts a new worker (this works on the principle of launching a new browser) > it can directly access the computer’s original canvas and readpixel data.

[tersinemuhendis]

https://github.com/gelistiricitr/castle-reverse

Here are all my works.

[vntricky]

@makuma said in Twitter shows “Something went wrong” only when using FingerprintSwitcher — works fine without fingerprint:

@m4zuper

My problem is that I constantly get an error like the one in the picture. When I use a fingerprint, I get this error, but if I don’t use it, there’s no issue — however, after I enter the email verification code, it sends me back to the previous step.

You received this error because x.com detected you as a bot and immediately prevented you from registering via email, requiring you to register using your phone instead.

[tersinemuhendis]

@vntricky said in Twitter shows “Something went wrong” only when using FingerprintSwitcher — works fine without fingerprint:

@makuma said in Twitter shows “Something went wrong” only when using FingerprintSwitcher — works fine without fingerprint:

@m4zuper

My problem is that I constantly get an error like the one in the picture. When I use a fingerprint, I get this error, but if I don’t use it, there’s no issue — however, after I enter the email verification code, it sends me back to the previous step.

You received this error because x.com detected you as a bot and immediately prevented you from registering via email, requiring you to register using your phone instead.

Please don’t spread misinformation. I’ve already explained everything in my message above; by spreading misinformation, you’re misleading people.

[vntricky]

This post is deleted!

[vntricky]

@tersinemuhendis

@tersinemuhendis said in Twitter shows “Something went wrong” only when using FingerprintSwitcher — works fine without fingerprint:

@vntricky said in Twitter shows “Something went wrong” only when using FingerprintSwitcher — works fine without fingerprint:

@makuma said in Twitter shows “Something went wrong” only when using FingerprintSwitcher — works fine without fingerprint:

@m4zuper

My problem is that I constantly get an error like the one in the picture. When I use a fingerprint, I get this error, but if I don’t use it, there’s no issue — however, after I enter the email verification code, it sends me back to the previous step.

You received this error because x.com detected you as a bot and immediately prevented you from registering via email, requiring you to register using your phone instead.

Please don’t spread misinformation. I’ve already explained everything in my message above; by spreading misinformation, you’re misleading people.

I only explained how the error occurred. The root problem—the fingerprint detection—is beyond my expertise.

[tersinemuhendis]

@vntricky The issue stems from the parent process leaking system fingerprints.
Although the browser modifies some features at the kernel level, unfortunately, the parent process leaks data such as canvas and readpixel for a worker. What I’m trying to say is that if the developer or developers want more information, they can DM me, and I can explain it in much greater detail.

[vadim2343]

@tersinemuhendis Is it possible to bypass this using BAS or not?

[massaixlr]

@tersinemuhendis

evet bunu ben de fark ettim. tarayıcı kurcalandığını artık tespit ediliyor https://demo.fingerprint.com/playground https://iphey.com/#bot adreslerinden de kontrol edilebilir. Ancak araştırdığımda bunu çözmek çok zor puppeteer-with-fingerprints yerine tamamen veri sızıntısı olmayan motor kullanmaları gerekiyor.

Yes, I noticed that too. It's now detectable that the browser has been tampered with; you can check this at https://demo.fingerprint.com/playground and https://iphey.com/#bot. However, my research shows that this is very difficult to fix; they need to use a completely data-leak-free engine instead of puppeteer-with-fingerprints.