How to stay connected on sites and avoid bot check

intika / Librefox

Librefox: Firefox with privacy enhancements

https://librefox.org

Mozilla Public License 2.0

1.72k stars 89 forks source link

How to stay connected on sites and avoid bot check #89

Closed hubba900 closed 5 years ago

hubba900 commented 5 years ago

Every time when I try to log into some sites (like tripadvisor) I should perform anti bot checks (choose traffic lighters, crossroads, etc). Is it proper way how to skip it? This is very annoyed.

intika commented 5 years ago

Hi, thank you for your feed back, indeed this is a side effect of privacy, this is because of cookies most of the time, for example the Google Captcha which is used widely will let you in without verification if you are logged into your google account or if it detect other activities like amazon etc. (over cookies), there is no magic solution if you want less authentication bot you will need to enable cookie and keep them over restart. (disable sanitizing cookie when the browser is closed) but bear in mind that this lead to tracking which is used to identify you as not being a bot

intika commented 5 years ago

Let me know if you need further help ;)

hubba900 commented 5 years ago

Could you please provide settings for mozilla.cfg? I have comment lockPref("network.cookie.lifetimePolicy", 2), but this is not enough. :-(

intika commented 5 years ago

You changed the right setting :) but you need to change other things as well here is what to do to stay connected on sites and avoid bot check :

Comment lockPref("network.cookie.lifetimePolicy", 2) by adding // at the beginning of the line under the file mozilla.cfg
Open Firefox's preferences, under "Privacy & Security" (about:preferences#privacy) right to Clear history when Firefox closes click Settings... and uncheck Cookies and Active Logins

dimqua commented 5 years ago

if it detect other activities like amazon etc. (over cookies)

Is this technique require third-party cookies to be enabled?

intika commented 5 years ago

Yes and no... (https://browserleaks.com/social) if it's a service from google let say (youtube etc.) third party is not required otherwise yes it is required

elypter commented 5 years ago

there is no magic solution if you want less authentication bot you will need to enable cookie and keep them over restart.

you could theoretically get around this and still have privacy if you could share cookies with other users.

Atavic commented 5 years ago