I made an extension that bypasses online age verification (furries.club)
from helloyanis@furries.club to privacy@lemmy.ml on 23 Jun 16:49
https://furries.club/users/helloyanis/statuses/116799972646478979

I made an extension that bypasses online age verification

To show my stance towards online age verification, I made a small (literally, less than 10 kilobytes) add-on that will completely skip ageverif.net’s verification prompt. (Only that site (for now?))

With more and more data breaches going on it’s important to protect yourself by not sharing unnecessary data, and to show how broken some age verification platforms are!

It’s #opensource too! https://github.com/helloyanis/agechecker.net-bypass (more info on why I do it is in the readme)

@privacy

#ageverification #firefox #hacking #web #cybersecurity

#ageverification #cybersecurity #firefox #hacking #opensource #privacy #web

threaded - newest

desmosthenes@lemmy.world on 23 Jun 17:06 next collapse

doing the lords work

rockSlayer@lemmy.blahaj.zone on 23 Jun 18:05 next collapse

Congratulations, you’ve made the first “must-have” extension to get added to my list in years

bamboo@lemmy.blahaj.zone on 23 Jun 18:24 next collapse

Can’t this just be a filter in uBlock Origin? What does this do that is special that uBlock Origin can’t do?

helloyanis@furries.club on 23 Jun 18:28 next collapse

@bamboo I dont't think so? I'm not sure how uBO filters works but the popup file is supposed to send an event to the main page to let it know that the verification is done and I don't think uBO filters can do that

bamboo@lemmy.blahaj.zone on 23 Jun 19:07 collapse

In your experience do sites fail open or closed if the JavaScript from the third party not load? Like will the site wait for the event of the JavaScript library is never requested or loaded?

scytale@piefed.zip on 23 Jun 20:28 next collapse

Curious to know this as well. I think it’s possible, but I myself am not capable of writing the filter.

bilouba@jlai.lu on 23 Jun 23:37 collapse

You can at least block ageverif.com with uBO

||ageverif.com/checker.js^$all

Fmstrat@lemmy.world on 24 Jun 04:31 collapse

You need to send data to a callback URL. Blocks won’t work, that’s basically like sitting on the verification screen and doing nothing.

ZeroHora@lemmy.ml on 23 Jun 18:38 next collapse

And of course a furry.

Is always a furry that save humanity.

helloyanis@furries.club on 23 Jun 18:41 collapse

@ZeroHora This is just a facade so that we eventually take over the world, but shh!!

Maeve@kbin.earth on 23 Jun 20:04 next collapse

@helloyanis is it librewolf compatible?

helloyanis@furries.club on 23 Jun 20:08 collapse

@Maeve @privacy Haven't tried but it should be! Follow the instructions on GitHub!

Maeve@kbin.earth on 23 Jun 20:09 next collapse

@helloyanis thanks so much!

G-d bless our furry savior!

@privacy

helloyanis@furries.club on 23 Jun 20:13 collapse

@Maeve @privacy I didn't think when waking up today that I would be called "Furry savior" ! But I don't mind hehe!

Feel free to tell me if it works on librewolf so I know!

Maeve@kbin.earth on 23 Jun 20:15 collapse

@helloyanis ok I gotta attend to self-care needs, will install on return and get back to you.

@privacy

helloyanis@furries.club on 23 Jun 20:17 collapse

@Maeve @privacy Yeah it doesn't need to be done right away! Take care of your things! :dragn_mlem:

birdwing@lemmy.blahaj.zone on 24 Jun 01:54 collapse

Might also be handy to put it on Codeberg!

Absolute royal.

Jarmund@lemmygrad.ml on 23 Jun 20:47 next collapse

Hosted on github, which is owned by Micro$lop. One of the companies who are pushing this age verifying crap (and has ties with Peter Thiel). Is it a good idea to host it there?

quick_snail@feddit.nl on 23 Jun 23:12 next collapse

Why? What can they do? Force you to got push it to a new remote on codeberg?

zephiriz@lemmy.ml on 23 Jun 23:22 collapse

Along those lines I have always though of the fact you can download a windows script from github to active windows and/or debloat it.

TheDarkQuark@lemmy.world on 23 Jun 21:45 next collapse

Lol, is it just an onclosed function call?!

I myself haven’t seen any age verification popups yet, due to me always being on a VPN, but I admire you for writing the bypass and making it open source.

I hope this continues to work, but seeing how dystopian the surveillance is getting, I won’t be surprised if everything is handled in the backend in the near future (client <-> server, client <-> verification provider, server <-> verification provider); sort of like how payments are handled.

helloyanis@furries.club on 23 Jun 21:48 next collapse

@TheDarkQuark if they change it, then all of the websites using it will also have to change their code. But I don't think they will change it unless the extension goes crazy viral, they won't bother imo

utopiah@lemmy.ml on 24 Jun 11:14 collapse

Doesn’t matter, even if they do then you and others, well I guess “we” now, can come up with another solution. AdBlocks are still there … because they work. It costs very little to fix (add or modifying a regex by 1 person that suddenly reaches thousands if not millions of users) whereas they have to find a new solution that is indeed compatible. It’s not a race they can win.

other_cat@piefed.zip on 25 Jun 01:26 collapse

It might get there eventually but for now we can probably continue to coast on various combinations of general ineptitude, cheapness, laziness, and ignorance on part of people implementing these systems.

kutt@lemmy.world on 23 Jun 23:50 next collapse

I don’t get it. The block is only a front end thing? No server side check?

helloyanis@furries.club on 24 Jun 08:46 collapse

@kutt The block is a front-end popup that sends ID data to the back-end, and when the back-end completes verification, the front-end dispatches an event and closes the popup window.

So if, let's say, an extension replaced the popup script by something that would fire the event immediately, then sites would work!

kutt@lemmy.world on 24 Jun 10:22 collapse

That’s surprising. Thank you for the explanation!

Fmstrat@lemmy.world on 24 Jun 04:35 next collapse

Why agechecker.net-bypass? Suggestion: Change that name to something more generic like agecheck-bypass quick. You will almost certainly run into other URLs you can add in, and future users are going to think this only works with “agechecker.net”.

helloyanis@furries.club on 24 Jun 08:39 collapse

@Fmstrat When it works on other site I will change the name! For now it only works on agecheck.net so it's named like that to not confuse people who haven't read this post.

Fmstrat@lemmy.world on 24 Jun 13:20 collapse

OK, but that’s going to be a lot more confusing when it happens for existing users. Especially if a platform requires you to start over vs update a name.

phoenixz@lemmy.ca on 24 Jun 07:16 next collapse

Has anyone else noticed that suddenly boat loads of sites suddenly complain about “suspicious activities non your account” and blocked your account?

But don’t worry! All you need to do is give them all your private information, your passport, your driver’s license, and your first born and it’ll all be fine!

I’m in rather desperate need of a job, 2 more weeks and I’ll have to leave the country I called home for 5 years now because I’m not allowed to work here anymore and I can only get international remote jobs… So I’m desperately looking for sites like remote.com and two of these fuckers already blocked my account right after registration “because of suspicious activities on my account”. You mother fuckers, I haven’t even had the time to be suspicious, I just registered.

Bit alas, since I have no choice, I must sendy passport and personal data and biometrics (face) to persona.com or be fucked

I hate the world we live in, I hate it.

I just want to enjoy my quiet life. I don’t need a Lamborghini, I don’t need expensive shit, I like a little bit of computer, not even gaming, but nope, can’t have nice things, can’t enjoy anything anymore, the rich need more

Fuck this shit

1984@lemmy.today on 24 Jun 13:33 next collapse

It’s horrible. I would also play along under your circumstances but if I don’t absolutely have to, I will not send any identification to big tech companies or online sites in America. I’m swedish and I don’t need to use any American sites.

I will give up YouTube, email, search engines… And replace them with any option without this bullshit.

FG_3479@lemmy.world on 24 Jun 14:31 next collapse

That can be caused by how the browser is set up. If you use Firefox with resistFingerprinting disabled and the only privacy extension being uBlock Origin then the sites should work fine.

FG_3479@lemmy.world on 24 Jun 14:32 next collapse

Of course forks should also work, but make sure resistFingerprinting is off and WebGL is allowed.

phoenixz@lemmy.ca on 24 Jun 20:29 collapse

No, but that does reminds me that I need to set that up as well

phoenixz@lemmy.ca on 24 Jun 20:31 collapse

I’m close to giving upon the internet entirely, beyond Lemmy that is.

I have nearly everything self hosted and once that’s done, I will fucking refuse to use anything beyond that

We’ll, wikipedia is cool still

PushButton@lemmy.world on 27 Jun 12:28 collapse

You can self host Wikipedia.

With pictures, it’s about 115 GB.

Wikipedia dump

teyrnon@sh.itjust.works on 24 Jun 16:21 next collapse

Check you IP on a blacklist checker. I was (am) on one for no apparent reason. They will do that, I was refused email accounts, refused access to wikipedia talk, and corporate emails keep trying to force me to hand over personal information. Tutamail may still give you an email, don’t bother with proton.

whatismyipaddress.com/blacklist-check

You don’t need to do anything just go to the site, if it’s the same one, and click check, and it goes through several dozens of these blacklisting sites.

DieserTypMatthias@lemmy.ml on 25 Jun 07:02 next collapse

But don’t worry! All you need to do is give them all your private information, your passport, your driver’s license, and your first born and it’ll all be fine!

I had to solve a bunch of CAPTCHAs and also I have a limited set of services I use daily.

ScoffingLizard@lemmy.dbzer0.com on 25 Jun 15:48 collapse

Life is no longer worth living. I’m basically done.

cipherd@lemmy.ml on 24 Jun 14:12 next collapse

How did you discover this was bypassable ?

helloyanis@furries.club on 25 Jun 18:17 collapse

@cipherd Snooping around in the console and not wanting to show my face to some random website! Also, reading the docs on their site helped.

More technical details https://github.com/helloyanis/agechecker.net-bypass/issues/14#issuecomment-4801644570

luipaard0011@lemmy.zip on 24 Jun 14:25 next collapse

!remindme 4 months (yes I need a reminder bot)

melsaskca@lemmy.ca on 24 Jun 14:27 next collapse

Fuck all this. I’m going to get me one of those wood burning pen thingies and write on old boards I find around the street and in the alleys. I’ll leave them back where I found them and show up every few days to review any comments.

ScoffingLizard@lemmy.dbzer0.com on 25 Jun 15:46 collapse

You could make a website from this. Great idea. I want to see the comments.

Daughter_of_Sekhmet@lemmy.world on 25 Jun 07:28 next collapse

Bought a plot of land in a small town decently out of the beaten path. Nothing too crazy, just 650 square meters. Been learning pottery and some homesteading skill. In a month and a half I pack the essentials I need on my bicycle and just try my best to leave this rotten system as much as possible.

Duke_Nukem_1990@feddit.org on 25 Jun 23:00 next collapse

Wow so it’s really just a pop-up and the content is loaded behind it anyways?

FenrirIII@lemmy.world on 26 Jun 04:59 collapse

Sadly Pornhub is still IP banning Texans