Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

be careful about the unofficial client check and report (in browser) #29

Closed
1 task
huan opened this issue Sep 9, 2016 · 2 comments
Closed
1 task

Comments

@huan
Copy link
Member

huan commented Sep 9, 2016

TL;DR

when we inject our hooking code to https://wx.qq.com , we should keep the environment as clean as possible.


there has javascript code in wx.qq.com, which will check the run environment to see if had been modified: for example, the checksum of the whole angularjs object.

when we inject some code to https://wx.qq.com , we should keep the environment as clean as possible. because if a user account is reported using an unofficial client, the system might add some extra limitation to this account, for example, this account can not "say hi" to other strangers. (as the following screen shot, I think it's purpose is to prevent spamming other users by robot)

wechat-unofficial-client-warning
wechat-moments-disabled-hooltool

TODO

  • disable API_webwxreport: "/cgi-bin/mmwebwx-bin/webwxstatreport"

See

  1. 揭秘“微信群控” - 微信安全中心
@huan
Copy link
Member Author

huan commented Aug 18, 2017

Update:

  1. Tencent blocks lots of bots start from Jul 2017. I believe it based on the behavior analytics of the bot, with a gray upgrade progress. See Can not login with error message: 当前登录环境异常。为了你的帐号安全,暂时不能登录web微信。 #603

@huan
Copy link
Member Author

huan commented Aug 19, 2018

One year passed, we had been able to do more with Wechaty than before: we can not only be able to control a Web Browser, but also we can use iPad protocol directly, and the iPhone App Hook Puppet was already in alpha stage and will be ready to use soon.

However, I believe all the above methods will not change the problem that this issue is addressed: Tencent will not like a program to control the Wechat account.

The reason for that is because, till today, almost all the bots are doing bad things like sending mass messages for advertising, rob red package money from human, or even doing grift by the program automatically, which will cover huge users in a very short time.

Wechaty do not like those bad things too. We want to do good things for the user, for example, by integrating with Conversational AI with Wechaty, we can build a bot that improve user experiences a lot, serve users more with powerful ChatBot technology, which the others technology gaint had already started to do this years before, like Facebook Messager, Google Assitant and Microsoft Skype.

I'll close this issue because it's outdated, but this topic will be very valuable for future discuss.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Development

No branches or pull requests

1 participant