C

Solutions to complex digital problems.

[C @unreleased]

A thread of some of my favourite bypasses that I've shared over the years

[C @unreleased]

@b_nnett @BarDarlingLocal Wouldn’t know I’m not cheap like that

[C @unreleased]

sneaker twitter is 5-10 years behind frankwhite

[Pookie @PookiesParadise]

bro got played so hard 😭😭

[C @unreleased]

@ObareJunior_ @alienorg No it didn't

[C @unreleased]

@notsocratese @ticket the only currency i accept is foot pics

[C @unreleased]

I get messages like this all the time from people trying to buy @ticket from me on Instagram

[DaNikePlug @DaNikePlugs]

Some guy on Instagram wanted to buy my username for $20k ��🤯🤯 https://t.co/9X5zgd3lMd

[C @unreleased]

@notsocratese I had a really good experience with elitehavens. 24/7 security at villa, good private chefs, police escorts to avoid traffic, housekeepers and great concierge

[C @unreleased]

meadow promises to free you from your smartphone. london has been offering this service for years

[Shreyas @66_shrey]

First Meadow review is out!!!! Thanks for covering @asilbwrites @TechCrunch 🫶🙂‍↕️

[C @unreleased]

@paulg @boxerbk https://t.co/Lec1ilERma

[C @unreleased]

This isn't a solvable problem. It's a constant cat-and-mouse game. Everything can be emulated at a higher level, it is impossible to accurately detect sophisticated bots.

Whoever the founder is you spoke to cannot solve it, there's not a single antibot on the market that doesn't have a reversed solution you can't buy for a few beans on a discord server.

[C @unreleased]

i say this because sophisticated bots are the ones real people using the internet see day-to-day.

The ones that are scalping shoes, tickets and pokemon
The ones that are posting on reddit, instagram and x
The ones that you're matching with on tinder and bumble
The ones buying restaurant reservations
The ones entering raffles
The ones reselling appointments for visas and driving tests
The ones posting fake reviews
The ones farming gold in online games to sell

[C @unreleased]

stopping sophisticated bots is impossible.

i will die on this hill.

[C @unreleased]

This isn't a solvable problem. It's a constant cat-and-mouse game. Everything can be emulated at a higher level, it is impossible to accurately detect sophisticated bots.

Whoever the founder is you spoke to cannot solve it, there's not a single antibot on the market that doesn't have a reversed solution you can't buy for a few beans on a discord server.

[C @unreleased]

@atmosole bro that's literally all they did. reading epicdemic sounds takes me back so much, the problem is you had to join one and have them take 40% or you couldn't make any money, scalelab, fullscreen, freedom and machinima all did the same shit

[C @unreleased]

this was my first real bot that was written 12 years ago, i scraped youtube channels and then mass messaged them inviting them to swap to a youtube network and would earn between 10-20% commission on all their earnings

[C @unreleased]

@TPatroi @nikitabier It's still only proving that they own a device, not their intent; It doesn't stop bots

[C @unreleased]

@m_chael @KieranMaguire can you try to grow a tomato in it

[C @unreleased]

@18pairsonkith @m_chael i would actually give 500k to NOT have dinner with michael after our last "incident"

https://t.co/hll6DYYQRS

[C @unreleased]

@18pairsonkith @m_chael During our dinner he made me pick up his plate and lick it clean

[18pairsonkith @18pairsonkith]

what’s the margin? how much stock? which platform? are they limited??

[C @unreleased]

@Seraphpy HAHAHA SO GOOD GOT US

[C @unreleased]

@nikitabier hi, just curious, when does the regret start?

[C @unreleased]

The Adidas stock bypass:

So this was only protected on the Akamai WAF layer rather than being removed from the website meaning any Akamai bypass on the path would let me access the endpoint as if it was normal.

The rule spec was any path directory with "Product-GetAvailability" would be blocked. I had to find a way to trick Akamai into thinking it was a different path whilst the origin still returned the same content

The specific bypass for this was appending: "; %2f" before "Product-GetAvailability".

Akamai interacts with semicolons very strangely, it would ignore everything after the semicolon up until the next forward slash, in this case it was the %2f (encoded "/") This caused Akamai and the origin to disagree about what the URL truly means. Akamai thought it was different but Adidas' origin normalized it to the same demandware URL returning the correct response.

The reason for the massive quantity parameter was because if you put 1,000 it would only return up to 1,000 in the "IN_STOCK" quantity.