Does not seem to authenticate scores in any way - I observed this yesterday in the network tab, but it seems someone else has taken advantage of it, and spammed the leaderboards with political messages and a rickroll.
I am curious what the best way to prevent this is without account creation? Maybe store all the data of the run, so it can be simulated serverside and have its score validated?
This is really cool, but I don't really get why full MITM is needed when all the paywall code is executed in the browser.
If news sites started using methods outside the browser for determining if you have access, like allowlisting IP addresses, how could this bypass that?
Projects like bypass-paywalls-chrome [1] (which works on firefox) get the job done just fine. Is there really a scenario where this is needed to unblock a website?
Additionally, parts of the privacy policy strongly implying browsing history is collected and sold - although I may have misinterpreted this. My apologies if so.
"Information We Collect When You Use... the Desktop Application... [we collect] your web browsing history (URLs that you visit)... [and] WE USE THE INFORMATION WE COLLECT... To generate and share aggregated, anonymized, or de-identified information about the web browsing activity of all of our users with our partners and other third parties for marketing, advertising, research, or similar purposes" [2].
I am curious what the best way to prevent this is without account creation? Maybe store all the data of the run, so it can be simulated serverside and have its score validated?