Giter Club home page Giter Club logo

Comments (15)

dessant avatar dessant commented on May 23, 2024 2

Yes, on Windows both the binary and the manifest are saved to AppData\Local\buster or a different location you have set during installation. Deleting that folder and the registry key undos all changes made by the installer.

The registry key can be deleted with this command if you installed with Firefox:

reg delete HKEY_CURRENT_USER\Software\Mozilla\NativeMessagingHosts\org.buster.client

The client also saves a log file named buster-client-log.txt in the TMP folder of the operating system. This file is overwritten every time the client is started to send user input and solve a challenge, and contains data about the received commands, see this module for details.

I agree that this needs to be documented, thanks for bringing up the topic.

from buster.

dessant avatar dessant commented on May 23, 2024 2

Yes, I'll add this information to the relevant places.

  1. Why does sending native user input to the browser help lower the occurrence of difficult challenges and temp blocks?

The extension needs to navigate in the challenge iframe and perform the steps a user would do while solving the challenge. The only way to send real user input events is from outside the browser, it cannot be done in the context of the extension using JS.

When user input simulation is not enabled the extension navigates using untrusted events created with JS, which is trivial to detect and could trigger a temporary block. By enabling user input simulation and installing the client app, it becomes less likely for the extension to trigger a temporary block or reduce your trust score and cause harder visual challenges to be shown.

  1. Also, if I'm reading correctly, it sounds like Firefox can now install executables from third-party developers on the user's system. Is that correct?

No, browsers do not install executables offered by extension developers. Extensions tipically show a download link from where you have to download the executable, then run it if it happens to be an installer, or place it in the correct location, create a manifest, and edit the registry. The end result is that the extension will be able to start this executable and communicate with it. You can learn more about this from the native messaging docs.

  1. If so, how can the user inspect the executable before installing it on their system?

If you would like to build the binary yourself, set up Go and run make installer after cloning this repo: https://github.com/dessant/buster-client
The installer will be placed in the dist folder, which then you can run.

  1. Can you add manual installation instructions for those who don't want an extension modifying their system (outside of the Firefox profile)?

The extension does not modify your system, the installer you run does. The steps taken by the installer are detailed in the native messaging docs, and the source code for the installer is in the buster-client repository.

from buster.

dessant avatar dessant commented on May 23, 2024 2

Thr next release will likely contain an unistaller and a wiki with removal instructions.

from buster.

Gitoffthelawn avatar Gitoffthelawn commented on May 23, 2024

Can you add that excellent information to the README, or a file that the README references?

I haven't installed the new client because I'm still trying to understand it further.

The changelog indicates:

A new option for user input simulation has been added. A client app enables Buster to send native user input to the browser and helps lower the occurrence of difficult challenges and temporary blocks. Follow the instructions to install the app for Windows, Linux or macOS after enabling the feature from the options page. Requires a new permission: nativeMessaging.

4 Questions:

  1. Why does sending native user input to the browser help lower the occurrence of difficult challenges and temp blocks?

  2. Also, if I'm reading correctly, it sounds like Firefox can now install executables from third-party developers on the user's system. Is that correct?

  3. If so, how can the user inspect the executable before installing it on their system?

  4. Can you add manual installation instructions for those who don't want an extension modifying their system (outside of the Firefox profile)?

Thanks again for Buster!

from buster.

Gitoffthelawn avatar Gitoffthelawn commented on May 23, 2024

The extension needs to navigate in the challenge iframe and perform the steps a user would do...

Great explanation. Thanks! Maybe cut and paste into the readme!

...You can learn more about this from the native messaging docs.

On my list of stuff to read!

If you would like to build the binary yourself, set up Go and run make installer after cloning this repo: https://github.com/dessant/buster-client

There it is! Thanks. I searched all over this repo for it, without knowing there was a separate repo. Perhaps add a link to that repo in this repo's readme just like the client repo's readme links to this repo (try saying that 10 times fast!).

The extension does not modify your system, the installer you run does. The steps taken by the installer are detailed in the native messaging docs, and the source code for the installer is in the buster-client repository.

With few exceptions, I never run installers. If it's just a few steps, would it be easy for you to document what the installer actually changes in the target system? I guess if you do that, it would make sense to provide the executable for the client itself in that repo's releases section, given that the installer doesn't seem to be something that can easily be unpacked (if it can be, please correct me).

Thanks again for your great answers, and this great project. ๐Ÿ‘

The number of installed users is steadily increasing, which tells us how much people hate dealing with Google's Recaptcha.

from buster.

AlexaCollins avatar AlexaCollins commented on May 23, 2024

there is a script for Tampermonkey?

from buster.

dessant avatar dessant commented on May 23, 2024

@AlexaCollins, Buster cannot be implemented properly as a user script, because user scripts do not have access to some of the the browser APIs the extension needs.

from buster.

shortenjukebox avatar shortenjukebox commented on May 23, 2024

Iโ€™m having the opposite problem on macOS: What am I supposed to do with the file I download from buster-client/releases? It doesnโ€™t have a file extension.

from buster.

dessant avatar dessant commented on May 23, 2024

@shortenjukebox, make the binary executable if it does not launch, then you can double click on it.

chmod +x buster-client-setup-v0.2.0-macos-amd64

from buster.

Gitoffthelawn avatar Gitoffthelawn commented on May 23, 2024

@dessant Thank you! :)

from buster.

luisfear avatar luisfear commented on May 23, 2024

Yes, on Windows both the binary and the manifest are saved to AppData\Local\buster or a different location you have set during installation. Deleting that folder and the registry key undos all changes made by the installer.

The registry key can be deleted with this command if you installed with Firefox:

reg delete HKEY_CURRENT_USER\Software\Mozilla\NativeMessagingHosts\org.buster.client

The client also saves a log file named buster-client-log.txt in the TMP folder of the operating system. This file is overwritten every time the client is started to send user input and solve a challenge, and contains data about the received commands, see this module for details.

I agree that this needs to be documented, thanks for bringing up the topic.

Great work Sebastian
The extension works quite well for me, but I tried every possible way to install the client and it was impossible for me, the same error constantly

[Something went wrong]
[Error: setup must be run without administrative rights]

Win 7 with administrator account and active UAC.
I want to uninstall the client but AppData\Local\buster doesn't exist and I don't have any registry entry. Where is it installed?

from buster.

dessant avatar dessant commented on May 23, 2024

@luisantunes8500, the setup was aborted before changes were made by the installer, there is nothing to uninstall. Try installing with a user that does not have administrator rights by default, a UAC prompt should appear if you try to install Firefox for example. For more details regarding that error, see this thread: #39

from buster.

bitconym avatar bitconym commented on May 23, 2024

What about Linux uninstallation?

from buster.

phocks avatar phocks commented on May 23, 2024

Also after Linux uninstall

from buster.

Ceekzs avatar Ceekzs commented on May 23, 2024

Install Driver Booster by iObit (uncheck third party programs), check the drivers you need in the list, especially the xBox one I guess, install, it should take 5 to 15 mins, reboot, you're done. Worked fine for me.

https://www.iobit.com/en/driver-booster.php

from buster.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.