5

Trying to register new Facebook account using TOR browser. Security text check (captcha) are not displayed. Have tried using Facebook.com and m.Facebook.com and also the onion address. Same blank or null image. Audio captcha do not work too.

Thanks for help.

m894v5n74v539nm8
  • 324
  • 2
  • 17
Mark Spencer
  • 51
  • 1
  • 3

2 Answers2

2

I can reproduce this, I think it's actually a bug in facebook's captcha mechanism.

From what I can see, it's requesting /tfbimage.php?captcha_challenge_code=foo&captcha_challenge_auth=bar and that request is itself receiving a redirect to /login.php?next=<the previous URL for the captcha image> which obviously doesn't return a captcha image.

Essentially it's asking you to login to retrieve the captcha (which you're probably getting...because you're not logged in. derp.)

Google's recaptcha did a similar thing previously on cloudflare, where requests for the captcha image got 403'd (Forbidden) so you couldn't fetch the mechanism to show you weren't a bot...because it thought you were a bot.

cc @alec-muffett

In my case a workaround is to click the Try another text button which then seems to produce a usable captcha.

There's not much else to be done from your side except try the workaround, it looks like an issue (or an intentional tactic? ¯\_(ツ)_/¯) on facebook's side

cacahuatl
  • 11,047
  • 2
  • 17
  • 39
2

Another workaround is to modify the URL so that it begins with https://www.facebookcorewwwi.onion/ - that's Facebook's official .onion address, and the CAPTCHA works there.

fdshfhoih
  • 21
  • 1