@anonympins/fingerprint 0.6.4 → 0.6.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +11 -0
- package/package.json +1 -1
- package/src/js/fingerprint.client.obfuscated.js +1 -1
- package/src/js/fingerprint.js +76 -6
- package/src/js/gpu_pow.solver.js +34 -3
- package/src/js/library.js +188 -97
- package/src/js/tests/gpu_pow.test.js +9 -7
- package/src/php/AutoTuner.php +41 -0
- package/src/php/Challenge/ChallengeUtils.php +38 -4
- package/src/php/FingerprintEngine.php +13 -2
- package/src/php/Optimization/OptimizationOperators.php +96 -28
- package/src/php/Tests/ChallengeUtilsTest.php +6 -2
package/CHANGELOG.md
CHANGED
|
@@ -1,3 +1,14 @@
|
|
|
1
|
+
## Version 0.6.5
|
|
2
|
+
|
|
3
|
+
- 🧬 **Auto-Tuner Upgrades & Threat Profiles**:
|
|
4
|
+
- **Threat-Profile Aware Tuning**: Integrated predefined security and threat profiles (e.g., `balanced`, `strict`, `api`) directly into the Auto-Tuner loop, ensuring optimized parameters dynamically align with the active defense posture.
|
|
5
|
+
- **Threshold Auto-Tuning Stabilization**: Disabled raw suspicion score threshold autotuning to prevent boundary drift, keeping decision limits highly predictable while focusing optimizer learning cycles on feature weights.
|
|
6
|
+
- 🌐 **Federated Consensus & Proof-of-Work Verification**:
|
|
7
|
+
- **Federated Consensus Protocols (`federationConsensus`)**: Hardened decentralized consensus validation across federated peer nodes, improving consensus routing speed and securing verification against distributed proxy and replay tactics.
|
|
8
|
+
- **Cryptographic Sample Derivation (`deriveSampleIndices`)**: Reinforced the verification pipeline by binding sample coordinate indexing inside cryptographic challenges to a secure, time-windowed HMAC of the client IP and secret key, completely neutralizing lookup bypasses.
|
|
9
|
+
- 🛡️ **Library Security Hardening**:
|
|
10
|
+
- Resolved critical security alerts and code-quality edge cases inside the main runtime library (`src/js/library.js`).
|
|
11
|
+
|
|
1
12
|
## Version 0.6.4
|
|
2
13
|
|
|
3
14
|
- 🔑 **IP and TLS Session Binding in CPU Challenge**: Reinforced CPU challenge security by cryptographically binding the client's IP and `tlsSessionId` to the challenge's binary block (`baseBlock`). This effectively prevents replay attacks and the sharing of calculation solutions between distinct sessions or IP addresses.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@anonympins/fingerprint",
|
|
3
|
-
"version": "0.6.
|
|
3
|
+
"version": "0.6.5",
|
|
4
4
|
"description": "Advanced anti-bot library for Node.js using multi-layer fingerprinting (JA3, client-side, headers), behavioral analysis, and adaptive Proof-of-Work (PoW) challenges to mitigate scraping, scalping, and automated threats.",
|
|
5
5
|
"main": "index.js",
|
|
6
6
|
"type": "module",
|