search

alex7kom / node-steam-tradeoffers

Steam Trade Offers for Node.js **NO LONGER MAINTAINED**
MIT License
288 stars 98 forks source link

Captcha #67

Closed bluejellybean closed 9 years ago

bluejellybean commented 9 years ago

I assume this means the project is pretty much dead?

If that's the case, I just wanted to thank everyone for all the hard work

Ax6 commented 9 years ago

I'm not sure, to me library it's still working correctly, are you having problems?

bluejellybean commented 9 years ago

I'd assume the patch hasn't hit you yet You now receive the error message: "[Error: There was an error validating the code you entered. Please try again.]" Due to a new captcha placement in the trade window. It seems to be on both the send and accept of the offer.

Ax6 commented 9 years ago

http://steamcommunity.com/groups/tradingcards/discussions/1/622954023422884592/ "We’ve excluded a few of the existing third-party trading services from this requirement so they can continue to function." Might be because of that then.

Still I don't think this is a long term solution, I'm pretty sure there will be some more changes on this (bad) update

kinsi55 commented 9 years ago

Facepalm..

My opinion on this is stated here, if you care about the future of automated betting. Better hope valve actually does something.

http://www.reddit.com/r/Steam/comments/2rw4f9/steam_offers_require_you_to_enter_captcha_now/cnjwc3v

jwigley commented 9 years ago

"We’ve excluded a few of the existing third-party trading services from this requirement so they can continue to function."

Hoping they provide a way to opt-out. Only catering for "a few" of the existing public trading services is disappointing.

Soni96pl commented 9 years ago

Just write them if you want to get your bots whitelisted, easy as that.

yberreby commented 9 years ago

https://github.com/Jessecar96/SteamBot/issues/689

"scholtzm commented 2 hours ago So apparently your account is automatically white listed if you have ~5500-7500* trades. The number is only estimate, we still don't know the exact number.

*Account with 5401 trades has captcha. Account with 7530 trades does not.

edit. Market trades might also be used to determine this. It's still very unclear how the whitelist works."

If this is true it may be possible to use captcha solvers at first then trade normally.

Ax6 commented 9 years ago

I'm not sure if the whitelist is account-related or even machine-related. I tried making a trade offer with my bot account from browser and I had to type in the captcha, still, automatic trade offers are working fine.

yberreby commented 9 years ago

Strange. Do your bots have a lot of trades?

Ax6 commented 9 years ago

Yes, for sure it passes the 7000 cap

yberreby commented 9 years ago

Oh. You can't reproduce this behavior with a newer account that has less trades then? I think the whitelist is related to the account and to the way the trade is made. It would explain why some people have had only some of their bots whitelisted, and why you got the captcha when trading using a browser.

pranaymk commented 9 years ago

"The captcha isn't even that effective.

http://i.imgur.com/a6JuQPA.png

From here the OCR is easy. Might stop your average bot dev, but the scam organizations? Please, Valve. Don't kid yourself." -cdhowie from reddit

Combined with something like https://www.npmjs.com/package/nodecr We may be able to bypass it though it would increase load. It's just an idea but one you could play with.

yberreby commented 9 years ago

It would work (DeathByCaptcha, for example, reportedly solves these captchas), but it's not a permanent solution. Eventually they will change the captchas and we will have to start all over.

If the whitelist is automated and based on the number of trades made, it would be easy to set up two bots trading items to each other all day. But Steam would probably notice and block these accounts.

Ax6 commented 9 years ago

@filsmick No, I have another bot account that does some interaction with the main bot (the working one) and it has a lot less trades and it's getting the captcha error when making offers.

@pmk010 as jessecar said, in my opinion bypassing captcha it's not a good solution for this.

pranaymk commented 9 years ago

@Ax6 it's not a good solution but for many small time bot owners it's the only solution for now. Getting steam to whitelist a few small bots isn't going to be possible as of yet, perhaps we can hope that they implement a proper system for people to get bots whitelisted, or even better, a simple option to disable captchas.

Soni96pl commented 9 years ago

It is account specific and bypassing captcha isn't a good idea to stay on good terms with them. Just contact them, I got my bots whitelisted in around 30 minutes (22 of them).

yberreby commented 9 years ago

@Kuba77 You did? Really? How did you contact them?

pranaymk commented 9 years ago

@Kuba77 Well I didn't get my bots, or my clients' bots whitelisted and I submitted a support ticket a good 18 hours ago.

Soni96pl commented 9 years ago

http://www.valvesoftware.com/email.php Try "Contact Valve" there, they should help you @filsmick @pmk010 Include your bots' logins in the message.

yberreby commented 9 years ago

Thank you a lot @Kuba77, I will try! It's definitely the best option, if they answer.

pranaymk commented 9 years ago

Thanks, I'll definitely try that and let you know the results!

yberreby commented 9 years ago

@Kuba77 Do you mean the bots' usernames or also the passwords?

doktokto commented 9 years ago

Guys, do you know what is "v" parameter in tradeoffer/new/captcha?v=... and how I can find it? I know only that it's always growing up.

Soni96pl commented 9 years ago

Just usernames

ghost commented 9 years ago

Hi all! How to send trade without captcha? Or how to give image captcha?

jwigley commented 9 years ago

@pmk010 interestingly enough, they have switched to reCAPTCHA

spencerflem commented 9 years ago

As a workaround, Do you think it could be possible to get an image of the captcha and have one of the real users of an automated trade solve it for the bot?

On Jan 10, 2015, at 8:09 PM, jwigley notifications@github.com wrote:

@pmk010 interestingly enough, they have switched to reCACPTHA

— Reply to this email directly or view it on GitHub.

alex7kom commented 9 years ago

https://twitter.com/SteamDB/status/554045816323985408/photo/1

Valve's own captcha now replaced with Google's No CAPTCHA. And I think Valve will continue to change this in the near future.

So here is my decision: node-steam-tradeoffers is not going to include any changes involving captcha. Any PRs that feature such changes are not going to be merged, so don't waste your time.

Work with Valve on getting your bots whitelisted.

alex7kom commented 9 years ago

@Maxpain177 Please use English. And as I said NO changes will be made to the library regarding captcha. Better use your energy to pursuit Valve to remove captcha or whitelist your bots.

scholtzm commented 9 years ago

@Kuba77 Drunken_F00l denied any "manual" whitelist. So, who is lying? :grinning:

http://i.imgur.com/1d9fw5r.png

yberreby commented 9 years ago

@scholtzm Can I see the source? Because clearly someone is lying, since Tony Paloma is Drunken_F00l.

scholtzm commented 9 years ago

@filsmick Updated my previous comment.

yberreby commented 9 years ago

Thanks. Then the only way would be full auto trading of crates back and forth with node-steam-trade I guess. Otherwise new sites are dead.

Soni96pl commented 9 years ago

@scholtzm http://steamcommunity.com/groups/tradingcards/discussions/1/622954023422884592/

yberreby commented 9 years ago

Interesting info about the auto-whitelisting trade count: http://www.reddit.com/r/SteamBot/comments/2rwq7l/psa_trade_offers_now_require_captcha/cnkhmfb

This is only very rough estimate. Me and some people (all with high amount of trades) do not have the captcha. Talking with others, we have noticed that account with 5401 trades has captcha. Account with 7530 trades does not. However, another guy with ~4950 trades also does not have the captcha, but he has a lot of market purchases. Anyway, take this information lightly as it's all based on very small data sample.

pranaymk commented 9 years ago

I tried contacting Tony Paloma as suggested by @Kuba77 however have yet to receive a reply. As for the suggestion made by @filsmick, is currently seems to be the only possible option, though I'm not sure whether it would be "above board" as such. And with reCaptcha there is not much that can be done to bypass it.

For now I may consider doing some testing between two alts, see if we can find the threshold for becoming whitelisted. At the moment my assumption is that it's a combination of market transactions and trades, perhaps around 6000 in total, but that's just a guess.

bobjane commented 9 years ago

Also tried contacting Valve as suggested by @Kuba77 no response yet.

2799 trades + 3934 market transactions here, still have captcha.

srabouin commented 9 years ago

If someone has time, create a farming bot that trades from one bot to another non-stop (using regular trades, not trade offers) until the captcha disappears ^_^

5,122 Trades Made 8,439 Market Transactions

No captcha

yberreby commented 9 years ago

@srabouin I'm doing it now, I'll let you know the results.

kinsi55 commented 9 years ago

@filsmick feel free to tell me your results too, ty.

doktokto commented 9 years ago

Each trade takes about 13 seconds, I have 2500 successful trades in my account, making another 2500 will take about 11 hours. I don't know how to make trades faster, so I need to wait at least 11 hours :-1: Hope this will switch off captcha and my accounts will not be banned.

bluejellybean commented 9 years ago

@doktokto Please let us know when you've finished!

If this does fix the captcha issue, I'd be happy to publish some code that trades emotes or something between accounts.

bobjane commented 9 years ago

Spent some time getting from 6700 combined (trades + market) to 7000. Still have captcha.

Maybe it's based on more than just these two figures.

doktokto commented 9 years ago

@bluejellybean Yet scored only one thousand, then the bot broke, had to restart, noticed recently, will have to wait even longer and monitor because it can break again.

jwigley commented 9 years ago

Hoping it wasn't a one time whitelist for all accounts that had over X transactions at the date they added the captcha.

yberreby commented 9 years ago

@bobjane It's probably around 7500 combined @jwigley Indeed...

My bot is almost ready, I had some trouble getting a bot account without Steam Guard restriction yesterday.

doktokto commented 9 years ago

5200, still captcha, still making trades. Another bots have 10000+ trades.

scholtzm commented 9 years ago

Someone reported on the bp.tf forum, that he has captcha with 22k trades. sigh

yberreby commented 9 years ago

@scholtzm Any clue why he still has captchas?

My bot is currently trading, not as fast as @doktokto 's because I didn't have enough time to optimize it; It will make around 4000-4500 trades per 24 hours.

scholtzm commented 9 years ago

No idea frankly.

btw. Regarding the trade count. Inventory history shows some dummy number while profile showcase shows accurate number. You have to go couple pages back from your max inventory history page.

Example: http://i.imgur.com/0v2ge3U.png 9265 - actual trades 9596 - bugged number Also notice the page number on the right side. 11 empty pages follow after page 309.

This bug is clearly visible if you visit last page of your inventory history.