RocketMap / RocketMap

🌏 Live visualization of all the pokemon in your area... and more!
GNU Affero General Public License v3.0
2.81k stars 1.48k forks source link

[Captcha issue] Robot check in app and returning 0 pokemons #1470

Closed gabrieltva closed 7 years ago

gabrieltva commented 8 years ago

Hi guys,

Niantic is checking on login if players are robots. Now the PokemongGo-Map is returning 0 pokemons until I have responded the Captcha in app Pokemon GO.

Any solution for this?

smontana commented 8 years ago

ditto^

smontana commented 8 years ago

happened within the last 2-4 hrs for me - significantly less pokemon. I'm sure there are many more open issues to come...

HighOnTacos commented 8 years ago

With some updating, I imagine that pogomap will be able to pull that captcha to your computer and let you solve it there. I hope.

kokuryuha commented 8 years ago

It may be nice to send that captcha to the /status page. One stop to view all workers with captcha issues, solve, done.

bouelcom commented 8 years ago

it would be nice if we put all account into DB with tag "no capcha" " need capcha" and a dedicate tread will log into the game, resolve the capcha, and reenable the account .... in the best of the world

totoberg123 commented 8 years ago

Hope for the best guys 😇

TheNewDarkOne commented 8 years ago

Kind of odd they enabled captcha but still let you use .35 Wonder why they aren't enforcing new protocol too. I think they are trying to entrap real accounts. They don't care about bot accounts they want to go after users. my tinfoil hat. If you are forced to login your bots from your device, that gives them intel they need to link bots to owners. Don't fall for it!

EDIT. for comment below me. I wasn't suggesting anything other than to not login to your actual play device to do captchas. I feel like leaving 35 protocol active was a trick to get users to do exactly this. Conjecture of course but it's really fishy .35 is working AT ALL when for every intensive purpose it shouldn't be. I was making NO suggestion on account creation.

gabrieltva commented 8 years ago

what suggest you @TheNewDarkOne ? I need to create another account and active them in a APK 0.35 or less?

77Jgn4xjgoz7VD commented 8 years ago

@TheNewDarkOne Now that is sinister. It really is the only things that makes sense. If they kill all the botters the users will still be there waiting for the next wave.

renxida commented 8 years ago

I believe in the community and the devs. I believe in you guys. This should be resolved soon.

Seriously, the only way Niantic is going to stop us is through implementing a reasonable in-game scanner, one that would make most of us say "Ah, that's good enough. I don' need no map anymore.'

renatosouzadias commented 8 years ago

same problem here... return 0 pokemons

jzhangbs commented 8 years ago

One possible solution could be pulling the captcha from Niantic and sending it to frontend. It's also fine if you have a large number of workers.

PeshBG commented 8 years ago

the map was never a problem... the people using nox or similar apps were. this wont stop them...

smartcuc commented 8 years ago

Getting since this night no pokemons. It's a small area and less then 15 accounts. Good thing is, the first online map is working again. Hope to get a fix here soon.

PeshBG commented 8 years ago

@smartcuc which page? fastpokemap.se?

smartcuc commented 8 years ago

Yes, it's fastpokemap.se

xquiaz commented 8 years ago

fastpokemap.se using 2captcha-like 3rd party to solve reCaptcha from google. $4/1000 accounts.

Shentang commented 8 years ago

Would be great to have such an option here too. I wouldn't mind paying even 12$ monthly.

xquiaz commented 8 years ago

@Shentang i just paid a server last night and now map is not working.

Shentang commented 8 years ago

@xquiaz Paying for server week after 0.35 version was taken down wasn't too smart. It was sure they gonna take down 0.35 api / introduce some security measures.

but lets not get off topic.

simonbuehler commented 8 years ago

implementing a 2captcha hook seems to the only (not free but automated) way of solving this

xquiaz commented 8 years ago

the favll repositories not working too, i think they can implemented 2captcha like pikaptcha creating mass account.

SoonDead commented 8 years ago

@simonbuehler distributing captchas to the clients is also a way of solving this. though it would only work if the worker accounts does not outnumber the actual users by more than 1-2 magnitudes. I would not mind clicking through 5 captchas per day if it kept up my favourite map.

slideup-benni commented 8 years ago

Are you sure, that we dont get a ban for our main account, when we solves captchas with the same IP as our Pokemon Go Device?

Shentang commented 8 years ago

@slideup-benni I'm not sure if you know how such thing would work. Captchas would be sent to the frontend, you would solve it, then send it back to your server and the server would send the resolved captcha, thus your IP being not seen by Niantic. Of course if @SoonDead suggestion would be implemented.

PeshBG commented 8 years ago

this is how the pokealert app works. but implementing it here would be a difficult i think(account in need of capcha are marked)

slideup-benni commented 8 years ago

we are talking about reCaptcha. This is not only an image

PeshBG commented 8 years ago

yeah, i know. he forwards the link, when clicked on the account name your browser opens , prompting you to the not a robot shit and the google images(that are sometimes confusing)

slideup-benni commented 8 years ago

you're right. And the Link is a link to niantic, and now niantic has your ip

PeshBG commented 8 years ago

given the fact you already have an active connection to their server with all workers... what exactly do you worry about? the traffic logs are not easy to analyze you know ;)

slideup-benni commented 8 years ago

they're running through a proxy

PeshBG commented 8 years ago

you know that all your traffic will go through the proxy right? it wont be just the workers. and again, the connection logs are not easy to analyze, no one bothers to do it. any solution to automatically do this will be far more expensive than the benefit it will give... we are not talking here for you day2day router you know...

slideup-benni commented 8 years ago

No, only the traffic of the workers go through the proxy. The clients can have completely different ips

danielcha commented 8 years ago

So how do we get the captcha url? It's not in the map request data. Is it in the response if you login or somewhere else?

ashleykleynhans commented 8 years ago

The captcha prompt happens mostly during the login process so yes I assume its in the response when you login. I've randomly seen captcha prompts after successful login too though.

PeshBG commented 8 years ago

is any of the devs here working on that is the question :) if anyone has an update please share it

xquiaz commented 8 years ago

fastpokemap.se and sgpokemap.com already resolved reCaptcha. i think our dev possible make it happen.

april commented 8 years ago

@gabrieltva (or someone with write access to the repo, since I don't yet have it): can somebody update the title of this issue to indicate more clearly that it is the captcha issue, so we can reduce the amount of duplicates?

Thanks!

v2Mike commented 8 years ago

If Niantic would just develop an in game scanner and charge people $10 a month to use it they would make so much money right now.

PeshBG commented 8 years ago

i will sign for that :D like spotify ...

xquiaz commented 8 years ago

after running 1 account within 2 hours, reCaptcha ready to rock n roll!! untitled

smartcuc commented 8 years ago

Would be more than happy when it could quickly solved, even when I have to sign into 2captcha...

april commented 8 years ago

I think the ideal method of handling this is:

As long as scanners aren't forced to captchas overly frequently, it should be fine. And hopefully it would scale: if you have 500 scanners and it's used by 100 people, then you're probably fine. Any of them could solve the captcha.

ooloops commented 8 years ago

100% agree @marumari . PokeAlert already generates Captcha URLs for workers so it can't be too difficult to implement this. I'm not 100% sure about the notification but if you just put an overlay on the screen users can solve it and stay on top of account disablement (might be a pain in the ass if you have to solve a few Captchas in the morning but oh well).

april commented 8 years ago

The notification thing could be controlled in the same way that notifications are already controlled. So those who want it can enable it. Just as long as it's a calm "dunkh" sound or something and not the overly bright "ding!" sound that we have for Pokémon notifications.

xquiaz commented 8 years ago

of course that visitors should be solving 1-3 captchas before access map.

pedropetz commented 8 years ago

A service like 9kw.eu integration could be a solution?

birdstream commented 8 years ago

It would also be an option to forward the capchtas to messaging bots like Telegram? I'm not a dev or know much about programming :/ but isn't captchas written in HTML5? I just now read about some HTML5 thingy for games in the latest Telegram update. Could it be useful for something like this?

Anyway what i'd like to know is just what is triggering the capchtas in the first place? Because for me it seems like some accounts are more prone to be softbanned than others? Like i said I dont know much programming but I tried some modifications of my own in search.py to increase jitter and also add some randomness to search delays (new value for each search in all workers) with various success.. At first I thought that the IV checker was the big one to blame but to my surprise my accounts got flagged even faster when having it disabled? Any thoughts? Or is captcha simply mandatory now?

SoonDead commented 8 years ago

Doing the captcha distribution efficiently if a lot of users use the map and a lot of captchas are needed to be solved is not trivial. You should consider the following.

gabrieltva commented 8 years ago

In the actual code, is it possible check if the Captcha is open?