@anonympins/fingerprint 0.5.2 → 0.5.4

package/src/js/tests/usefulWorkSolver.test.js

@@ -0,0 +1,162 @@
+import { describe, expect, it, vi, beforeEach, afterEach } from 'vitest';
+import { solveChallenge } from '../pow.solver.js'; // Assuming pow.solver.js is the ES module version
+
+// Mock crypto.subtle for hashing operations
+const mockSubtleDigest = vi.fn(async (algorithm, data) => {
+    // Return a consistent mock hash for testing purposes
+    const hash = new Uint8Array(32); // 32 bytes for SHA-256
+    for (let i = 0; i < hash.length; i++) {
+        hash[i] = i; // Simple predictable hash
+    }
+    return hash.buffer;
+});
+
+// Mock Math.random for deterministic optimization results
+const mockMathRandom = vi.fn(() => 0.5);
+
+// Mock IndexedDB for pospace challenges, even if not directly used by this test
+const mockIndexedDB = {
+    open: vi.fn(() => ({
+        onupgradeneeded: null,
+        onsuccess: null,
+        onerror: null,
+        result: {
+            objectStoreNames: { contains: vi.fn(() => true) },
+            createObjectStore: vi.fn(),
+            transaction: vi.fn(() => ({
+                objectStore: vi.fn(() => ({
+                    put: vi.fn(),
+                    get: vi.fn(() => ({ onsuccess: null, result: null }))
+                }))
+            }))
+        }
+    }))
+};
+
+describe('Useful Work Solver for Optimization Challenges', () => {
+    let originalMathRandom;
+    let originalIndexedDB;
+
+    beforeEach(() => {
+        // Save original implementations
+        originalMathRandom = global.Math.random;
+        originalIndexedDB = global.indexedDB;
+
+        // Mock global objects
+        vi.stubGlobal('crypto', {
+            subtle: {
+                digest: mockSubtleDigest,
+            },
+            randomInt: vi.fn((min, max) => Math.floor(mockMathRandom() * (max - min) + min)), // Mock randomInt for crypto
+            randomBytes: vi.fn((length) => new Uint8Array(length).fill(0x01)), // Mock randomBytes for crypto
+        });
+        global.Math.random = mockMathRandom;
+        global.indexedDB = mockIndexedDB;
+
+        // Reset mocks
+        mockSubtleDigest.mockClear();
+        mockMathRandom.mockClear();
+        mockIndexedDB.open.mockClear();
+    });
+
+    afterEach(() => {
+        // Restore original implementations
+        vi.unstubAllGlobals();
+        global.Math.random = originalMathRandom;
+        global.indexedDB = originalIndexedDB;
+    });
+
+    it('should solve a "useful_work_task" with fraud.solve and return a Pareto front', async () => {
+        const mockChallenge = {
+            type: 'useful_work_task',
+            nonce: 'test-nonce-fraud',
+            usefulWorkTask: {
+                problemId: 'fraud_detection_challenge',
+                task: {
+                    type: 'multi_objective_genetic_algorithm',
+                    solverName: 'fraud.solve',
+                    generations: 5, // Keep generations low for quick test
+                    populationSize: 10, // Keep population low for quick test
+                    payload: {
+                        legitimateClicks: [
+                            { fingerprint: 'fp1', timeToClick: 500, clickX: 10, clickY: 10, mouseEntropy: 0.8, scrollEvents: 5 },
+                            { fingerprint: 'fp1', timeToClick: 600, clickX: 12, clickY: 12, mouseEntropy: 0.7, scrollEvents: 6 },
+                            { fingerprint: 'fp2', timeToClick: 700, clickX: 20, clickY: 20, mouseEntropy: 0.9, scrollEvents: 7 },
+                        ],
+                        fraudulentClicks: [
+                            { fingerprint: 'fp3', timeToClick: 50, clickX: 5, clickY: 5, mouseEntropy: 0.1, scrollEvents: 0 },
+                            { fingerprint: 'fp3', timeToClick: 60, clickX: 6, clickY: 6, mouseEntropy: 0.2, scrollEvents: 1 },
+                            { fingerprint: 'fp4', timeToClick: 100, clickX: 10, clickY: 10, mouseEntropy: 0.3, scrollEvents: 2 },
+                        ],
+                    },
+                },
+            },
+        };
+
+        const solution = await solveChallenge(mockChallenge);
+
+        // Assert the structure of the returned solution
+        expect(solution.type).toBe('useful_work_task');
+        expect(solution.nonce).toBe('test-nonce-fraud');
+        expect(solution.rawSolution).toHaveProperty('problem_id', 'fraud_detection_challenge');
+        expect(solution.rawSolution).toHaveProperty('work_result');
+
+        const workResult = solution.rawSolution.work_result;
+        expect(workResult).toHaveProperty('paretoFront');
+        expect(workResult.paretoFront).toBeInstanceOf(Array);
+        expect(workResult.paretoFront.length).toBeGreaterThan(0);
+
+        // Check the structure of a single solution in the Pareto front
+        const firstParetoSolution = workResult.paretoFront[0];
+        expect(firstParetoSolution).toHaveProperty('solution');
+        expect(firstParetoSolution.solution).toBeInstanceOf(Array); // fraud.solve returns an array of thresholds
+        expect(firstParetoSolution.solution.length).toBe(4); // [minTimeToClick, maxClickVariance, minMouseEntropy, minScrollEvents]
+        expect(firstParetoSolution).toHaveProperty('objectives');
+        expect(firstParetoSolution.objectives).toBeInstanceOf(Array); // [objective1, objective2]
+        expect(firstParetoSolution.objectives.length).toBe(2);
+    }, 10000); // Increase timeout for GA, even with low generations/population
+
+    it('should solve a "useful_work_task" with cpc.solve and return a Pareto front', async () => {
+        const mockChallenge = {
+            type: 'useful_work_task',
+            nonce: 'test-nonce-cpc',
+            usefulWorkTask: {
+                problemId: 'cpc_optimization_challenge',
+                task: {
+                    type: 'multi_objective_genetic_algorithm',
+                    solverName: 'cpc.solve',
+                    generations: 5, // Keep generations low for quick test
+                    populationSize: 10, // Keep population low for quick test
+                    payload: {
+                        platformParams: { optimalBaseCommission: 0.3, optimalBonusFactor: 0.1 },
+                        website: { relevanceScore: 70 },
+                        advertiser: { credits: 1000 },
+                        estimatedImpressions: 500,
+                        competingAds: [{ id: 'ad1' }, { id: 'ad2' }],
+                    },
+                },
+            },
+        };
+
+        const solution = await solveChallenge(mockChallenge);
+
+        // Assert the structure of the returned solution
+        expect(solution.type).toBe('useful_work_task');
+        expect(solution.nonce).toBe('test-nonce-cpc');
+        expect(solution.rawSolution).toHaveProperty('problem_id', 'cpc_optimization_challenge');
+        expect(solution.rawSolution).toHaveProperty('work_result');
+
+        const workResult = solution.rawSolution.work_result;
+        expect(workResult).toHaveProperty('paretoFront');
+        expect(workResult.paretoFront).toBeInstanceOf(Array);
+        expect(workResult.paretoFront.length).toBeGreaterThan(0);
+
+        // Check the structure of a single solution in the Pareto front
+        const firstParetoSolution = workResult.paretoFront[0];
+        expect(firstParetoSolution).toHaveProperty('solution');
+        expect(typeof firstParetoSolution.solution).toBe('number'); // cpc.solve returns a single CPC value
+        expect(firstParetoSolution).toHaveProperty('objectives');
+        expect(firstParetoSolution.objectives).toBeInstanceOf(Array); // [platformRevenue, advertiserValue, marketImbalance]
+        expect(firstParetoSolution.objectives.length).toBe(3);
+    }, 10000);
+});

package/src/php/Challenge/ChallengeUtils.php

@@ -839,6 +839,7 @@ class ChallengeUtils
 
         $solverCode = self::getPowSolverCode();
         $queriesJson = json_encode($queries);
+        $coopTimeout = $securityConfig['pospace']['coopTimeout'] ?? 15;
 
         $safePath = json_encode($path, JSON_HEX_TAG | JSON_HEX_AMP | JSON_HEX_APOS | JSON_HEX_QUOT | JSON_UNESCAPED_SLASHES);
         $safeNonce = json_encode($nonce, JSON_HEX_TAG | JSON_HEX_AMP | JSON_HEX_APOS | JSON_HEX_QUOT | JSON_UNESCAPED_SLASHES);
@@ -854,6 +855,7 @@ class ChallengeUtils
             const nodeId = "{$nodeId}";
             const peerId = "{$peerId}";
             const peerBlockIdx = {$peerBlockIdx};
+            const coopTimeout = {$coopTimeout};
             
             document.getElementById('loader').innerText = '⚙️ Checking persistent local storage...';
             await new Promise(r => setTimeout(r, 10));
@@ -889,7 +891,7 @@ class ChallengeUtils
                     await fetch(window.location.pathname + "?coop_op=request_peer_block&node_id=" + nodeId + "&peer_id=" + peerId + "&block_idx=" + peerBlockIdx + "&req_id=" + reqId);
                     
                     let attempts = 0;
-                    while (attempts < 15) {
+                    while (attempts < coopTimeout) {
                         const res = await fetch(window.location.pathname + "?coop_op=poll_response&node_id=" + nodeId + "&req_id=" + reqId);
                         const data = await res.json();
                         if (data.status === 'ready') {
@@ -944,12 +946,23 @@ JS;
         $baseBlock = self::createCpuChallengeBaseBlock($nonce, $clientSecret, $originalFingerprint);
         $baseBlockBytes = '[' . implode(',', array_values(unpack('C*', $baseBlock))) . ']';
 
-        $trapLinksHtml = implode(' ', array_map(
-            fn($url, $index) => "<a href=\"{$url}\" tabindex=\"-1\"><span>&gt; " . ($index + 1) . "</span></a>",
-            $trapUrls,
-            array_keys($trapUrls)
-        ));
-        $trapContainerHtml = "<div style=\"position:absolute;left:-9999px;top:-9999px;transform:scale(0);pointer-events:none;\" aria-hidden=\"true\">{$trapLinksHtml}</div>";
+        $trapTags = ['div', 'span', 'p', 'section'];
+        $selectedTrapTag = $trapTags[array_rand($trapTags)];
+        $layoutProps = [
+            'position:absolute;left:-9999px;top:-9999px;transform:scale(0);pointer-events:none;',
+            'position:fixed;left:-8888px;top:-8888px;opacity:0;pointer-events:none;width:0;height:0;overflow:hidden;',
+            'display:none;visibility:hidden;pointer-events:none;'
+        ];
+        $selectedLayout = $layoutProps[array_rand($layoutProps)];
+
+        $trapLinks = [];
+        foreach ($trapUrls as $index => $url) {
+            $nestingType = rand(0, 2);
+            $innerHtml = ($nestingType === 1) ? "<b>&gt; " . ($index + 1) . "</b>" : (($nestingType === 2) ? "<i>&gt; " . ($index + 1) . "</i>" : "<span>&gt; " . ($index + 1) . "</span>");
+            $trapLinks[] = "<a href=\"{$url}\" tabindex=\"-1\">{$innerHtml}</a>";
+        }
+        $trapLinksHtml = implode(' ', $trapLinks);
+        $trapContainerHtml = "<{$selectedTrapTag} style=\"{$selectedLayout}\" aria-hidden=\"true\">{$trapLinksHtml}</{$selectedTrapTag}>";
 
         $safePath = json_encode($path, JSON_HEX_TAG | JSON_HEX_AMP | JSON_HEX_APOS | JSON_HEX_QUOT | JSON_UNESCAPED_SLASHES);
         $safeNonce = json_encode($nonce, JSON_HEX_TAG | JSON_HEX_AMP | JSON_HEX_APOS | JSON_HEX_QUOT | JSON_UNESCAPED_SLASHES);
@@ -980,7 +993,7 @@ JS;
                 return;
             }
 
-            const finalUrl = path + "?pow_type=cpu_mem&pow_nonce=" + nonce + "&pow_solution_cpu=" + cpuSolution + "&pow_solution_mem=" + memSolution;
+        const finalUrl = path + "?pow_type=cpu_mem&pow_nonce=" + nonce + "&pow_solution_cpu=" + cpuSolution + "&pow_solution_mem=" + encodeURIComponent(JSON.stringify(memSolution));
             window.location.href = finalUrl;
           }
           solve();

package/src/php/FingerprintClient.php

@@ -77,13 +77,30 @@ class FingerprintClient
             $this->clientConfig['honeypots'][] = $fieldName;
         }
 
-        // Styles CSS pour cacher le champ de manière robuste.
-        $styles = 'position:absolute; left:-9999px; top:-9999px; transform:scale(0); opacity:0; pointer-events:none;';
+        // Styles CSS polymorphiques pour cacher le champ de manière robuste.
+        $styleOptions = [
+            'position:absolute; left:-9999px; top:-9999px; transform:scale(0); opacity:0; pointer-events:none;',
+            'position:fixed; left:-8888px; top:-8888px; width:0; height:0; overflow:hidden; opacity:0; pointer-events:none;',
+            'display:none; visibility:hidden; pointer-events:none;'
+        ];
+        $styles = $styleOptions[array_rand($styleOptions)];
+
+        $containerTags = ['div', 'span', 'p', 'section'];
+        $tag = $containerTags[array_rand($containerTags)];
+
+        $nestingType = rand(0, 1);
+        if ($nestingType === 1) {
+            return '<' . $tag . ' style="' . $styles . '" aria-hidden="true">'
+                . '<label for="' . htmlspecialchars($fieldName) . '">' . htmlspecialchars($fieldName) 
+                . '<input type="text" id="' . htmlspecialchars($fieldName) . '" name="' . htmlspecialchars($fieldName) . '" tabindex="-1" autocomplete="off">'
+                . '</label>'
+                . '</' . $tag . '>';
+        }
 
-        return '<div style="' . $styles . '" aria-hidden="true">'
-            . '<label for="' . htmlspecialchars($fieldName) . '">' . $fieldName . '</label>'
+        return '<' . $tag . ' style="' . $styles . '" aria-hidden="true">'
+            . '<label for="' . htmlspecialchars($fieldName) . '">' . htmlspecialchars($fieldName) . '</label>'
             . '<input type="text" id="' . htmlspecialchars($fieldName) . '" name="' . htmlspecialchars($fieldName) . '" tabindex="-1" autocomplete="off">'
-            . '</div>';
+            . '</' . $tag . '>';
     }
 
     /**