[Journey] Cracking Instagram's ML Algorithm

Thanks for sharing your findings, if you plan to automate the app here's something things that I think are important-

Since IG wants to track your phone number, your contacts, photos, messages etc. it's better to spoof as much as possible instead of just blocking access.
If you are using 4G directly IG can track the cell id you are connected to.

What's your main job though, I bet it's something with pentesting/IT forensics

mindeswx said:

Thanks for sharing your findings, if you plan to automate the app here's something things that I think are important-

Since IG wants to track your phone number, your contacts, photos, messages etc. it's better to spoof as much as possible instead of just blocking access.
If you are using 4G directly IG can track the cell id you are connected to.

What's your main job though, I bet it's something with pentesting/IT forensics

Click to expand...

Exactly, blocking is just as bad as not spoofing. You want to blend in not stand out.

Instagram can access sim serials but I doubt they do anything with them.

Digital Finger said:

Exactly, blocking is just as bad as not spoofing. You want to blend in not stand out.

Instagram can access sim serials but I doubt they do anything with them.

Click to expand...

There's a lot of info in the instagrams TOS, good thing that no one reads it

mindeswx said:

There's a lot of info in the instagrams TOS, good thing that no one reads it

Click to expand...

When I first started that’s exactly where I went! They have to declare what they use for tracking. I went straight to their TOS.

You did a good job, you get plenty of information on there.

They don’t use most of the information they gather. However you can get a good understanding just by the information they release.

Hey I am also interested in the account. Will provide you with feedback how it goes as well

yellowdot said:

Hey I am also interested in the account. Will provide you with feedback how it goes as well

Click to expand...

Please PM for further details.

RealSirJoe said:

Hey Digital Finger awesome journey, I tried the manual creation you described to insomnijak on Feb 15, though I didnt have any success. (I checked and IP got changed each time) Does it still work for you?

Click to expand...

Did you find anything? Seems like browser is not a option for this, at least as unrooted. But to be fair, it's not too surprising as after all. It's not that different from using pc browser.

RealSirJoe said:

Hey Digital Finger awesome journey, I tried the manual creation you described to insomnijak on Feb 15, though I didnt have any success. (I checked and IP got changed each time) Does it still work for you?

Click to expand...

What's the issue you are experiencing? Maybe I can help you out.

@meldonn



-------------

I am still giving away accounts for testing purposes please PM me for further details.

Digital Finger said:

What's the issue you are experiencing? Maybe I can help you out.

@meldonn



-------------

I am still giving away accounts for testing purposes please PM me for further details.

Click to expand...

Even after changing ip, clearing cache and hidden cache it still retains (used android's basic browser) some information that they manage to pick up information and ban on creation. Now that I've thought more about it, there's a possibility it works out with 3rd party browser that I could flat out uninstall.
Overall if you consier about browser vs app account, there's far more information available for them through app, which could cause strong flags towards being a real user. Combined with the fact that automation through app isn't that common compared to through browser.

meldonn said:

Even after changing ip, clearing cache and hidden cache it still retains (used android's basic browser) some information that they manage to pick up information and ban on creation. Now that I've thought more about it, there's a possibility it works out with 3rd party browser that I could flat out uninstall.
Overall if you consier about browser vs app account, there's far more information available for them through app, which could cause strong flags towards being a real user. Combined with the fact that automation through app isn't that common compared to through browser.

Click to expand...

If I told you that creating through app is much harder than through a browser.
Forget about spoofing device ID on an actual device or even factory resetting it.

It’s lot more complicated.

When I first started I thought it was going to be easier than I thought, I was quick to judge.

Try a third party then let me know how it goes.

There are some extremely useful informations over here, thank you for sharing your journey with us.

meldonn said:

Even after changing ip, clearing cache and hidden cache it still retains (used android's basic browser) some information that they manage to pick up information and ban on creation. Now that I've thought more about it, there's a possibility it works out with 3rd party browser that I could flat out uninstall.
Overall if you consier about browser vs app account, there's far more information available for them through app, which could cause strong flags towards being a real user. Combined with the fact that automation through app isn't that common compared to through browser.

Click to expand...

Also still experiencing same issue, tell me when you got a fix for this!

Digital Finger, did you try so far to create IG Accounts with Facebook Login, since Facebook provides noscript (no JS) version of site, on which it could be easier to create Accounts?

Seems like by changing to firefox I didn't gain even single new account. It doesn't inform about the ban anymore, just uses up email and username. If i try to log in, it gives error about that not existing, but I can't use that email anymore for registering. Sometimes it might give directly a ban. It's interesting as there shouldn't be any information available to do that and I even tried to make a coupel random swipes to humanize etc.

I have been working with pyautogui and lightweight vps instances - I am using a bug that allows you to create multiple lightweight vps's for free with AWS through an education service, this will be closing on June 30th at which point I will have assessed the usefulness of these methods and will be able to evaluate whether I want to buy the vps's directly.

I am current running each vps with a single instance of Firefox, I am using images that are generated from machine learning as the profile pics, proton mail for the email, and desktop IG to preform this.

Through vnc I open a browser window on my machine (but it runs on the vps) which allows pyautogui utilize its gui for interaction with Instagram. On startup I will follow and view several of the accounts recommended to me, I will then view their profile and like random posts. I will then search hashtags and scroll through those - I can mainly only see new posts but this is alright as it is the small accounts that I will be targeting for my activity.

All of this is automated of course.

I have been running these bots without any bans for 2 days, I can currently create as many as I like for free, eventually I will be using aws servers for $0.02 per hour in parallel if I am not able to find any new bugs.

I am looking to monetize these accounts through drop shipping and eCommerce, as I do not have a good enough understanding on how to offer these bots as a service.

I want to be able to open a mutually beneficial line of communication so that we may further understand each others methods, I have optimized for efficiency and haven't had an account banned yet, and I believe this is the best method for scalability, but this will only be true if I am able to get a better understanding of its safety.

Also that is if you are still working on this project.

I will follow your journey

scepterali said:

Hey I'm interested to test accounts

Click to expand...

Kelvinyung said:

I would also like to test some accounts☺

Click to expand...

Staystyled said:

amazing progress man, am interested in some test accounts

Click to expand...

PabloGuy said:

Just read the 5 pages, you rock so hard!
Well done
Interested in an account

Click to expand...

rusgenya said:

@Digital Finger
Hello! can you give me one account per test? thank!

Click to expand...

progressor said:

Woukd like to test some accs aswell pls

Click to expand...

FPokemon said:

Just read all 5 pages, incredible work - Well Done!!

Would love to help you test a couple of accounts on IPv6, just let me know what type of testing you'd like to do

Click to expand...

yellowdot said:

Hey I am also interested in the account. Will provide you with feedback how it goes as well

Click to expand...

Any update, did any of you receive the account(s) and how did it go?

Digital Finger said:

If I told you that creating through app is much harder than through a browser.
Forget about spoofing device ID on an actual device or even factory resetting it.

It’s lot more complicated.

When I first started I thought it was going to be easier than I thought, I was quick to judge.

Try a third party then let me know how it goes.

Click to expand...

Curious, is it possible to create accounts via browser? I'm trying to create twitter accounts via browser automation, but having no success.