search

s-alad / toofake

View friends BeReals without posting or them knowing. Post custom BeReal's whenever. Add custom realmojis
https://toofake.lol/
MIT License
153 stars 34 forks source link

request to add some sort of way to see past bereals #88

Open schlipschlop opened 4 months ago

schlipschlop commented 4 months ago

I think this may have been requested before, but would it be possible to add an option to see past bereals for other people's accounts? I ask this because I've noticed that the links for bereals have the same URL for each user, with only the title of the .webp file being different.

For instance, the link for two different photos on the same account would be "cdn-us1.bereal.network/Photos/(user hash)/post/(specific photo hash.webp)", with the only difference between the link being the hash for the .webp file, with the user hash staying the same.

I'm basically asking if there's any way you could get access to the rest of the user's past bereals this way, since all you need to know is the name of the .webp file stored on the bereal network. This might be a lot of work, especially with all the effort being put towards keeping toofake alive, but it would be a very cool feature to have.

retoheusser commented 4 months ago

I highly doubt that this is possible, as the filename hashes are almost certainly non-guessable. They are directly returned from the Google storage bucket. However what you can do is to fetch your feed every day (with a cron job or similar) and store the results in a database. Then you will have a history of your friends' posts, as the .webp urls are static and infinitely valid.

MichaelNeys commented 2 months ago

I agree that the filename hashes are non-guessable. Is only the filename hash from the most recent bereal stored in the Google storage bucket? Or maybe pulling a get request from the link https://cdn.bereal.network/Photos/(userhash)/post/*.webp, but I don't know how that could be achieved to fetch a list of contents from there...

retoheusser commented 2 months ago

I agree that the filename hashes are non-guessable. Is only the filename hash from the most recent bereal stored in the Google storage bucket? Or maybe pulling a get request from the link https://cdn.bereal.network/Photos/(userhash)/post/*.webp, but I don't know how that could be achieved to fetch a list of contents from there...

How do you want to do that if the hashes are not guessable and without knowing them? 🤷🏽

MichaelNeys commented 2 months ago

You don't need to know them I guess. It is possible to do ls or dir in a command line to get a list of files in a folder. The photos on the servers from bereal are also files in a folder, but that's the thing I don't know, how to get a list of contents from a folder / url.

retoheusser commented 2 months ago

But we're not talking about your local computer where you can just traverse directories, but about Google storage bucket. If it was possible what you intend they would have a severed directory listing vulnerability and I doubt that Google has such an obvious vulnerability.

The photos on the servers from bereal are also files in a folder

I don't think that storage bucket is a simple folder on a filesystem. That's a world-class highly scalable virtualized abstraction of a filesystem.