CalvinBackup/k-id-age-verifier
1
0
Fork 0
mirror of https://github.com/xyzeva/k-id-age-verifier.git synced 2026-07-30 23:47:27 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix: we're so back

Browse Source 
you can see the writeup of what broke on the website.
This commit is contained in:
eva
2026-02-12 14:38:04 +00:00
parent 81e617a8b0
commit 6cf4458e32
3 changed files with 115 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/standalone-verify.ts
+48 -6
View File
@@ -221,6 +221,24 @@ function removeOutliersWithZscore(arr: number[]) {
});
}
function calculateSpeedAndIntervals(measurements: number[], timestamps: number[]) {
const intervals = [];
const speeds = [];
for (let i = 1; i < measurements.length; i++) {
const distance = Math.abs(measurements[i] - measurements[i - 1]);
const timeInterval = (timestamps[i] - timestamps[i - 1]) / 1000;
intervals.push(timeInterval);
if (timeInterval > 0) {
const speed = distance / timeInterval;
speeds.push(speed);
} else {
speeds.push(0);
}
}
return { intervals, speeds };
}
async function encryptPayload(nonce: string, payload: any) {
const getKey = async (nonce: string, timestamp: string, transactionId: string) => {
const data = nonce + timestamp + transactionId;
@@ -391,6 +409,30 @@ async function verify(qrCodeUrlStr: string) {
const primaryOutputs = removeOutliersWithZscore(raws.map((r) => amap(r)));
const outputs = removeOutliersWithZscore(primaryOutputs);
const gestureMeasurementTime = Date.now();
const recordedMeasurements: number[] = Array.from({ length: 5 }, () => randomFloat(0.1, 0.8, 17));
const recordedTimestamps: number[] = [
randomInt(500, Math.min(completionTime, 1000)) - gestureMeasurementTime,
randomInt(700, Math.min(completionTime, 1000)) - gestureMeasurementTime,
randomInt(1000, Math.min(completionTime, 1400)) - gestureMeasurementTime,
randomInt(1400, Math.min(completionTime, 1600)) - gestureMeasurementTime,
randomInt(1600, Math.min(completionTime, 1800)) - gestureMeasurementTime
];
const { speeds: recordedSpeeds, intervals: recordedIntervals } = calculateSpeedAndIntervals(
recordedMeasurements,
recordedTimestamps
);
const failedMeasurements: number[] = Array.from({ length: 5 }, () => randomFloat(0.1, 0.8, 17));
const failedTimestamps: number[] = [
randomInt(500, Math.min(completionTime, 1000)) - gestureMeasurementTime,
randomInt(700, Math.min(completionTime, 1000)) - gestureMeasurementTime,
randomInt(1000, Math.min(completionTime, 1400)) - gestureMeasurementTime,
randomInt(1400, Math.min(completionTime, 1600)) - gestureMeasurementTime
];
const { speeds: failedOpennessSpeeds, intervals: failedOpennessIntervals } =
calculateSpeedAndIntervals(failedMeasurements, failedTimestamps);
let payload = {
request_type: 'complete_transaction',
transaction_id: sessionData.transaction_id,
@@ -428,12 +470,12 @@ async function verify(qrCodeUrlStr: string) {
},
ageCheckSession: '-' + randomInt(1000000000, 9999999999),
miscellaneous: {
recordedOpennessStreak: Array.from({ length: 5 }, () => randomFloat(0.1, 0.8, 17)),
recordedSpeeds: Array.from({ length: 5 }, () => randomFloat(0.2, 1.5, 17)),
recordedIntervals: Array.from({ length: 5 }, () => randomFloat(0.1, 0.2, 3)),
failedOpennessReadings: [],
failedOpennessSpeeds: [],
failedOpennessIntervals: [],
recordedOpennessStreak: recordedMeasurements,
recordedSpeeds,
recordedIntervals,
failedOpennessReadings: [failedMeasurements],
failedOpennessSpeeds: [failedOpennessSpeeds],
failedOpennessIntervals: [failedOpennessIntervals],
numberOfGestureRetries: 1,
antiSpoofConfidences: [],
fp_scores: [],
src/routes/+page.svelte
+17
View File
@@ -224,6 +224,23 @@ window.location.href = `https://age-verifier.kibty.town/webview?url=$&lcub;encod
<li>it is checked if the states completion times match the state timeline</li>
</ul>
<h3 class="mt-8 text-xl font-bold">the (failed) patch</h3>
<p>
after the initial release, k-id's provider for face scans, privately added a patch to this
script. however, the patch wasn't sufficient enough and we bypassed it. <span
class="text-white/50">(so the script works again!)</span
>
<br />
<br />
the patch was the fact they started checking
<code class="bg-white/20 text-blue-400">recordedOpennessStreak</code>,
<code class="bg-white/20 text-blue-400">recordedSpeeds</code>,
<code class="bg-white/20 text-blue-400">failedOpennessReadings</code>,
<code class="bg-white/20 text-blue-400">failedOpennessSpeeds</code> and
<code class="bg-white/20 text-blue-400">failedOpennessIntervals</code> to be valid by checking the
values referencing eachother server-side.
</p>
<p>
<br />
with all of that done,
src/routes/api/verify/+server.ts
+50 -8
View File
@@ -2,8 +2,8 @@ import type { RequestEvent } from './$types';
import { Buffer } from 'node:buffer';
const BASE_URL = 'https://eu-west-1.faceassure.com';
const K_ID_DEPLOYMENT_ID = '20260210222654-016f063-production';
const K_ID_PRIVATELY_ACTION_ID = '408838ce2bed4d4db2ae2194cc41cc46d6008d1872';
const K_ID_DEPLOYMENT_ID = '20260212140105-844bfe6-production';
const K_ID_PRIVATELY_ACTION_ID = '40de01bcd91fb9eca64577583af431a0a7ef9e8dbb';
const K_ID_NEXT_ROUTER_TREE =
'%5B%22%22%2C%7B%22children%22%3A%5B%22verify%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D';
const PRIVATELY_URL_REGEX = /(https:\/\/[a-z0-9]+\.cloudfront\.net\/.*)(?=:\{)/;
@@ -236,6 +236,24 @@ function removeOutliersWithZscore(arr: number[]) {
});
}
function calculateSpeedAndIntervals(measurements: number[], timestamps: number[]) {
const intervals = [];
const speeds = [];
for (let i = 1; i < measurements.length; i++) {
const distance = Math.abs(measurements[i] - measurements[i - 1]);
const timeInterval = (timestamps[i] - timestamps[i - 1]) / 1000;
intervals.push(timeInterval);
if (timeInterval > 0) {
const speed = distance / timeInterval;
speeds.push(speed);
} else {
speeds.push(0);
}
}
return { intervals, speeds };
}
async function encryptPayload(nonce: string, payload: any) {
const getKey = async (nonce: string, timestamp: string, transactionId: string) => {
const data = nonce + timestamp + transactionId;
@@ -408,6 +426,30 @@ async function verify(
const primaryOutputs = removeOutliersWithZscore(raws.map((r) => amap(r)));
const outputs = removeOutliersWithZscore(primaryOutputs);
const gestureMeasurementTime = Date.now();
const recordedMeasurements: number[] = Array.from({ length: 5 }, () => randomFloat(0.1, 0.8, 17));
const recordedTimestamps: number[] = [
randomInt(500, Math.min(completionTime, 1000)) - gestureMeasurementTime,
randomInt(700, Math.min(completionTime, 1000)) - gestureMeasurementTime,
randomInt(1000, Math.min(completionTime, 1400)) - gestureMeasurementTime,
randomInt(1400, Math.min(completionTime, 1600)) - gestureMeasurementTime,
randomInt(1600, Math.min(completionTime, 1800)) - gestureMeasurementTime
];
const { speeds: recordedSpeeds, intervals: recordedIntervals } = calculateSpeedAndIntervals(
recordedMeasurements,
recordedTimestamps
);
const failedMeasurements: number[] = Array.from({ length: 5 }, () => randomFloat(0.1, 0.8, 17));
const failedTimestamps: number[] = [
randomInt(500, Math.min(completionTime, 1000)) - gestureMeasurementTime,
randomInt(700, Math.min(completionTime, 1000)) - gestureMeasurementTime,
randomInt(1000, Math.min(completionTime, 1400)) - gestureMeasurementTime,
randomInt(1400, Math.min(completionTime, 1600)) - gestureMeasurementTime
];
const { speeds: failedOpennessSpeeds, intervals: failedOpennessIntervals } =
calculateSpeedAndIntervals(failedMeasurements, failedTimestamps);
let payload = {
request_type: 'complete_transaction',
transaction_id: sessionData.transaction_id,
@@ -445,12 +487,12 @@ async function verify(
},
ageCheckSession: '-' + randomInt(1000000000, 9999999999),
miscellaneous: {
recordedOpennessStreak: Array.from({ length: 5 }, () => randomFloat(0.1, 0.8, 17)),
recordedSpeeds: Array.from({ length: 5 }, () => randomFloat(0.2, 1.5, 17)),
recordedIntervals: Array.from({ length: 5 }, () => randomFloat(0.1, 0.2, 3)),
failedOpennessReadings: [],
failedOpennessSpeeds: [],
failedOpennessIntervals: [],
recordedOpennessStreak: recordedMeasurements,
recordedSpeeds,
recordedIntervals,
failedOpennessReadings: [failedMeasurements],
failedOpennessSpeeds: [failedOpennessSpeeds],
failedOpennessIntervals: [failedOpennessIntervals],
numberOfGestureRetries: 1,
antiSpoofConfidences: [],
fp_scores: [],