Investigate and fix false positives

fingerprintjs / BotD

Bot detection library that runs in the browser. Detects automation tools and frameworks. No server required, runs 100% on the client. MIT license, no usage restrictions.

https://fingerprintjs.github.io/BotD/main/

MIT License

957 stars 77 forks source link

Investigate and fix false positives #83

Closed xnerhu closed 1 year ago

xnerhu commented 1 year ago

Refs:

android web browsers (WeChat etc.) https://github.com/fingerprintjs/BotD/commit/980a9fe6d28b601d6e4b3443b9190196e211ba16#commitcomment-85162176
rtt connection (https://github.com/fingerprintjs/BotD/pull/67#discussion_r981300985)

TODO:

[x] #93
[x] Test for regressions
[x] Test Samsung Browser
[x] Test Android Webview

LKNSI commented 1 year ago

https://phantom.app/ is setting off false alarms, given that the text search is looking for phantom explicitly.

Phantom uses window.phantom. I'm not immediately sure about how you can make a distinction, but it's something that's being flagged right now.

10maurycy10 commented 1 year ago

It also flags ungoogled-chromium as a bot.

xnerhu commented 1 year ago

Ref #90

xnerhu commented 1 year ago

It also flags ungoogled-chromium as a bot.

I can't replicate this. Would you send me logs from our playground page?

I tested on the latest versions for both Win64 and MacOS ARM

xnerhu commented 1 year ago

Closing. @10maurycy10 if you have any more false positives, please create another issue.