AI 产品解读Privacy Pass anonymous token client that obtains unlinkable cryptographic tokens from attesters to present to websites supporting the PrivateToken protocol
Enables users to prove they are human to Cloudflare-protected websites without compromising privacy—avoids repeated CAPTCHAs and prevents tracking across sites through anonymous, unlinkable tokens
1. User visits a website that supports Privacy Pass and sends a PrivateToken WWW-Authenticate challenge header. 2. The extension detects the challenge and opens a new tab to the Cloudflare Turnstile attester. 3. User solves the attestation challenge (proves they are human). 4. The extension receives an anonymous cryptographic token from the attester. 5. The token is automatically included in subsequent requests to the website, proving the user is human without linking to their identity.
Intercepts WWW-Authenticate PrivateToken challenges from supported websitesOpens attester challenge tab (Cloudflare Turnstile) to obtain cryptographic tokensAutomatically redeems anonymous tokens to bypass bot-detection without revealing identityConfigurable attester URLs and development/demo/production modes via options page
- 目标用户
- Privacy-conscious web users / Users frequently visiting Cloudflare-protected websites / Users who want to avoid repeated CAPTCHA challenges while preserving anonymity
- Extension source is bundled/minified (background.js is 238KB single file), making deep logic analysis harder but key patterns are clear
- Cannot fully verify if destination Cloudflare attester service requires login since it's external—however the extension itself does not
付费分析未识别到付费功能
No payment, subscription, premium, upgrade, billing, or price references found in the source code. Grep for 'premium', 'payment', 'subscription', 'upgrade', 'billing', 'price' all returned 0 matches in background.js. The 'pro' keyword hits from the static scan are all false positives: Object.prototype methods (lines 2-21), Object.getOwnPropertyNames (line 19), and SERVICE_WORKER_MODE.PRODUCTION (line 633). The extension is fully functional without any gated features or payment flows.
- 置信度
- 95
- 支付平台
- --
- 来源
- AI / 高
- 需要登录
- 否
- 登录理由
- The extension implements the Privacy Pass anonymous authorization protocol. No user account, login UI, or credential entry exists anywhere in the codebase. Grep for 'login' and 'account' in background.js returned 0 matches. The 'auth' keyword hits are all cryptographic authentication (AES-CCM tags, WWW-Authenticate header parsing at lines 6340-6396), not user account authentication. The 'token' hits refer to anonymous Privacy Pass cryptographic tokens, not login/session tokens. The options page (options/index.html) only contains attester URL configuration and service worker mode selection—no login fields.
2022年4月12日的時候還有用,2022年6月12日沒有作用。
It Sucks!!!
for hcaptcha points I don't get points even though I have tried several times because PAGE doesn't auto reload.....but for cloudflare points it can but sometimes it gets a captcha message "captcha.website is blocked".....IF you gets a message "captcha.website is blocked "... then there's a trick.... after you fill in the hcaptcha on the captcha.website site. you have to pay attention to the full url address like "https://captcha.website/?__cf_chl_tk=....."..... you have to copy the address.... if later the page opens with the message "captcha.website" ..... you just paste the url address earlier and press enter... then you will get point cloudlfare..... good luck.
Blocked gleam.io
Doesn't work at all on stupid sites that preventing me to use their services... I'm on linux, all my devices on linux and some android and all of them without viruses....
Es verhindert ernsthaft den Seitenzugriff :D Ich komme nicht mal mehr zum hCap. Nice. Top Quality.
Qual o objetivo disso CLOUDFLARE? Evitar um ataque DOS ou prejudicar seus clientes que estão perdendo acessos porque simplesmente o capcha é infinito, não importa quantas vezes faça ele sempre começa de novo. Só quero estudar em paz, caraaaaaaaaa!!!
サイトにアクセスする度どころか、数分経過する度に認証を要求されるため導入してみました。 ところがそもそも承認後に表示されるはずのページが、拡張機能によって禁止されている云々で一切表示されません。 いったい何を目的とした拡張機能で、どう設定するのか全く分かりませんので正しい動作をしているのか見当もつきませんが・・・
根本沒用
While it worked, it was very good. 30 passes are generated by doing a captcha and then the each captcha after that is blocked, using up a single pass, so you have to do much fewer captcha tests. However, about a month into use, it stopped letting me access sites after the captcha, stating "This page has been blocked by an extension". I have uninstalled and reinstalled it, but there has been no change. It's a shame because it really is a good extension, definitely 5 stars if this issue was fixed.