AI 产品解读Privacy Pass anonymous token client that obtains unlinkable cryptographic tokens from attesters to present to websites supporting the PrivateToken protocol
Enables users to prove they are human to Cloudflare-protected websites without compromising privacy—avoids repeated CAPTCHAs and prevents tracking across sites through anonymous, unlinkable tokens
1. User visits a website that supports Privacy Pass and sends a PrivateToken WWW-Authenticate challenge header. 2. The extension detects the challenge and opens a new tab to the Cloudflare Turnstile attester. 3. User solves the attestation challenge (proves they are human). 4. The extension receives an anonymous cryptographic token from the attester. 5. The token is automatically included in subsequent requests to the website, proving the user is human without linking to their identity.
Intercepts WWW-Authenticate PrivateToken challenges from supported websitesOpens attester challenge tab (Cloudflare Turnstile) to obtain cryptographic tokensAutomatically redeems anonymous tokens to bypass bot-detection without revealing identityConfigurable attester URLs and development/demo/production modes via options page
- 目标用户
- Privacy-conscious web users / Users frequently visiting Cloudflare-protected websites / Users who want to avoid repeated CAPTCHA challenges while preserving anonymity
- Extension source is bundled/minified (background.js is 238KB single file), making deep logic analysis harder but key patterns are clear
- Cannot fully verify if destination Cloudflare attester service requires login since it's external—however the extension itself does not
付费分析未识别到付费功能
No payment, subscription, premium, upgrade, billing, or price references found in the source code. Grep for 'premium', 'payment', 'subscription', 'upgrade', 'billing', 'price' all returned 0 matches in background.js. The 'pro' keyword hits from the static scan are all false positives: Object.prototype methods (lines 2-21), Object.getOwnPropertyNames (line 19), and SERVICE_WORKER_MODE.PRODUCTION (line 633). The extension is fully functional without any gated features or payment flows.
- 置信度
- 95
- 支付平台
- --
- 来源
- AI / 高
- 需要登录
- 否
- 登录理由
- The extension implements the Privacy Pass anonymous authorization protocol. No user account, login UI, or credential entry exists anywhere in the codebase. Grep for 'login' and 'account' in background.js returned 0 matches. The 'auth' keyword hits are all cryptographic authentication (AES-CCM tags, WWW-Authenticate header parsing at lines 6340-6396), not user account authentication. The 'token' hits refer to anonymous Privacy Pass cryptographic tokens, not login/session tokens. The options page (options/index.html) only contains attester URL configuration and service worker mode selection—no login fields.
No passes at all.Not working
Does not work at all for me. Still have to prove I'm not a robot which is why I got it in the 1st place.
i really don't know what happened to my laptop, when i opened a website suddenly there's something prompted to my monitor telling me to prove that im a human then the chrome store appear and telling that i need to install privacy pass. it is so annoying. can someone help me to fix this problem??
Sur Chrome, il a fonctionné correctement une seule fois , les autres fois Google CaptChat me bloquait. Alors que sur Firefox, il fonctionne une fois sur trois.
Es un virus que secuestra los navegadores. Tampoco permite que se abra el link para denunciar el uso inadecuado
Thank god this worked.I was becoming mad solving the captcha.Thanks a lot Dev cheers
Please complete the security check to access **** Не работает или работает через раза 3-4. Разработчики - что за безобразие!?
Works fine for me. If this works the way I think it does, it's a great idea that a lot more websites should support. After installing, I just clicked "get more passes", filled out a single captcha, and got 30 tickets to bypass captchas. I have only used 15 over the past several days, so I do not know if I have to fill out another captcha to get the next 30. Hopefully not, but I will if necessary. Since a lot of people don't seem to understand, this service is probably not designed to permit infected computers, although that isn't a terrible idea since the user would notice their tickets being quickly depleted. I think the main purpose is to allow legitimate, non-infected users of shared proxy servers to access the sites. A lot of sites block known proxies heavy-handedly, so this is a great way to avoid that extreme rejection of all web traffic.
поставил по рекомендации "защиты", но эта защита всё равно продолжает всплывать.
From yesterday not working. hope for fix