YouTubeShop
vanced-website-v2
YouTubeShop | vanced-website-v2 | |
---|---|---|
1 | 1,847 | |
232 | 77 | |
- | - | |
0.0 | 0.0 | |
over 3 years ago | over 1 year ago | |
Python | SCSS | |
- | GNU Affero General Public License v3.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
YouTubeShop
-
Why mimicking a device is becoming almost impossible
It's a very significant increase indeed. The increase is (or was) large enough to entirely wipe out most adversaries and restructure the battlefield in ways very advantageous to those playing defense. At least, in the social web space. It's something of a secret weapon to those who know about it: because so many developers assume it can't work the companies that master it have a large competitive advantage.
Source: About a decade ago I created Google's main "device detection" platform, as this article calls it (not Picasso, the thing that executes Picasso). It's actually more like an automation detection platform, as it's not a fingerprinting or device tracker, it just tries to separate human operated from automated clients. These days I'm told there's a large-ish team that maintains it full time and has ported the concepts to other platforms like Android.
It started as a 20% project because at that time almost nobody at Google took the idea seriously. Fortunately, my manager was happy to support my experiments. People had the same common (but incorrect) intuition you're displaying here, that any sort of client integrity technique is so easy to work around it's hardly worth the bother. Actually even I believed this to a large extent, just less so than the others. This turned out to be wrong for some not entirely obvious reasons related to the structure of the spam industry:
1. Most spammers are either not programmers at all, or are extremely poor programmers compared to a typical tech firm employee. They can in fact be out-coded.
2. This is because spamming is usually not all that profitable, so programmers who get good can find better and steadier money in the white market. The ones who remain are typically those who live in places without any local software opportunities (e.g. developing countries).
3. Because of this mounting even a not very strong defense is sufficient to corral your adversaries into a shallow economic pyramid, in which a small number of "skilled" people produce tools and services they sell the others, who then run the individual campaigns. This means you are probably not fighting as many people as you think you are. Screwing with the supply chain is an excellent way to wreak havoc on spammers.
When we first deployed the system we spent several months tuning it in what was effectively a running battle with the major Google account sellers. We discovered that the sellers were in turn buying their account creation bots from other people, and some sellers were actually re-sellers. One of the sellers had been using a "raw" bot that didn't embed a browser engine, and thus was knocked out of the market for months as they waited for a new bot to be written from scratch. When that came online there were mistakes in its browser automation that we were able to detect. The developer of the bot couldn't de-obfuscate the JavaScript we used (too hard for them) so treated the platform as a black box, just trying random things in the hope it'd work. We could watch this evolution in real time and block new versions as they were released. After a few rounds of this the seller got sick of it and switched to a new bot supplier. This new bot also took months to complete, and when it arrived it had fixed the bug we were using to spot the first bot, but introduced new bugs the other didn't have, meaning even then it was detectable.
At that point the seller gave up, as presumably paying for the development of all these bots was quite expensive relative to the margins involved. This in turn nuked all the resellers that had been relying on that guy, and blew a hole in the entire Google-oriented spam ecosystem. Spammers had to start phone verifying accounts en-masse, and for most of them it just wasn't worth it (a few switched to using stolen accounts instead of creating them). I haven't been there for years so don't know what the current state of play is, but you do still see public threads crop up from time to time where spammers say they tried to beat the system and couldn't, like this one:
https://github.com/BitTheByte/YouTubeShop/issues/14
If you want some insights into the minds of the typical newbie spammer when faced with this system, try this search and flick through some of the results:
https://www.google.com/search?q=site%3Ablackhatworld.com+bot...
vanced-website-v2
-
My Vanced finally died. [other]
That's goddamn malware. The one and only official website is https://vancedapp.com but Vanced has already taken down the download link. The only safe way to install Vanced is through https://apkmirror.com
-
WHY YOUTUBE PREMIUM ISN'T AVAILABLE IN JORDAN
Vanced official website: https://vancedapp.com/
-
[question] why is vanced no longer working?
https://vancedapp.com is the ONLY official site.
-
Is this normal battery drain? I'm getting high idle drain too
The only official Vanced website was https://vancedapp.com, while the only official ReVanced website is https://revanced.app (currently redirects to GitHub).
- [After Vanced] vancedapp.com vs youtubevaced.com
- [After Vanced] VancedApp.com vs YouTubevanced.com
- [After Vanced] vancedapp.com vs youtubevanced.com
-
Who's laughing now?
you are obviously correct. https://vancedapp.com IS official site, but due to google seizing the app, they removed all links to vanced manager from this official site.
- Spotify sau Apple Music?
-
Switched from chrome, how can I block Ads on mobile?
FYI, that website is fake and could be malicious. The real one is https://vancedapp.com, and the app is not available anymore since Vanced was discontinued over a year ago.
What are some alternatives?
GramAddict bot - Completely free and open-source human-like Instagram bot. Powered by UIAutomator2 and compatible with basically any Android device 5.0+ that can run Instagram - real or emulated.
Simple-YouTube-Age-Restriction-Bypass - A simple browser extension to bypass YouTube's age verification, disable content warnings and watch age restricted videos without having to sign in!
puppeteer-extra - 💯 Teach puppeteer new tricks through plugins.
SmartTube - SmartTube - an advanced player for set-top boxes and tvs running Android OS
igbot - 🐙 Free scripts, bots and Python API wrapper. Get free followers with our auto like, auto follow and other scripts!
xManager-Spotify - Ad-Free, New Features & Freedom [Moved to: https://github.com/xManager-App/xManager]
YouTube-Viewer - A multithreaded view bot for YouTube
NewPipe - A libre lightweight streaming front-end for Android.
youtube-dl-nas - youtube download queue websocket server with login for private NAS.
aniyomi - An app for manga and anime
frida - Clone this repo to build Frida
Pi-hole - A black hole for Internet advertisements