macedonga/beunblurred

Error 500 When try to connect to BeReal (French number)

Closed this issue · 8 comments

Hi, when I want to connect to BeUnblurred, the error 500 appears.
First I try the online version, but as it wasn't working, I ran it locally on my Mac.

When I looked at the logs, I found error 400 (Bad Request) with the BeReal API.

Capture d’écran 2025-01-02 à 23 25 15

I've put an excerpt of the error here, but if you need the full logs I've got them too

I'm on MacOS Sequoia 15.2, with Safari 18.2

I encountered the same issue on Windows locally. Yesterday, the login was successful, but today I received a 400 error. After trying to log in again, the same error occurred, and no verification code was sent. Other routes, such as feed fetching, work properly on a different account with valid tokens, so it seems only the login process is affected.

Same here, the route allowing opt to be sent is no longer working.

I checked the latest APK code, and nothing seems to have changed in that part, the requests are still made the same way as before. I thought the issue might be with the headers, especially the device ID, since all BeUnblurred users share the same one, and it could get banned. But since all other requests are working fine, I don’t think the headers are the problem. I even tried using different headers with a newer version of the app and another device ID, but I still got the same error.
Even when I used the same account on another device (the one I couldn't log into on my main device), everything worked perfectly there. That’s why I think the issue might be related to Arkose or something on BeReal’s servers, but I haven’t been able to figure out exactly what’s going wrong.
@macedonga Have you had a chance to look into this or find anything yet?

By the way @kerdofficial, can we talk in private ? I want to know how you're able to read the APK code even with all the pairipcore obfuscation...

I've been only reversing the iOS application since it seems easier to me but I'm curious how you can see the Android obfuscated code

Found the issue, it was Arkose.
Here's how I did it Vexcited/StayReal@ef88708

My implementation was similar to the one from BeUnblurred before, so I don't think the Arkose component update would take long.

By the way @kerdofficial, can we talk in private ? I want to know how you're able to read the APK code even with all the pairipcore obfuscation...

I've been only reversing the iOS application since it seems easier to me but I'm curious how you can see the Android obfuscated code

Sure, can you reach out on Discord? My @ is kerd23

Found the issue, it was Arkose. Here's how I did it Vexcited/StayReal@ef88708

My implementation was similar to the one from BeUnblurred before, so I don't think the Arkose component update would take long.

Great, fixed the issue for me too. Thanks!

Found the issue, it was Arkose.
Here's how I did it Vexcited/StayReal@ef88708

I pushed the changes, thanks a lot!

Yes it comes from here, everything work now.
Thank you very much!