Ga naar de inhoud

Deze pagina is nog niet in uw taal. U leest de Engelse tekst.

Blog

One proxy across five profiles: what the platform actually sees

Proxies cost money, and five profiles on one address look like sensible thrift. The platform meanwhile sees one address across five accounts and five different machines behind it. Which of those it joins up and which it cannot shows in the readings.

Het ARMANOS-team6 min

Where the platform starts

The address reaches the platform before any script does: it sits in every request, or the answer never gets back to you. Nobody is asked for permission here, and there is no switch that turns it off.

So two accounts from one address are the cheapest thing a platform can join up: nothing has to be compared, the number matched on its own. The fingerprint it reads afterwards, and with a script on the page.

  1. 1

    Reads the address

    It comes from the connection itself, before the first line of the page. The header only carries a middleman’s retelling, and a platform is not obliged to believe it.

  2. 2

    Looks for neighbours

    The platform has seen other accounts from this address and remembers which.

  3. 3

    Reads the machine

    Screen, graphics card, fonts and clock arrive by script on the page.

How many profiles land on one address

Put five profiles on one bought address and all five go out through it. Add a second address and the busier of the two still collects three.

Count by the worst address rather than by the average. Three accounts that met on one address are three linked accounts, even when the other two sit apart.

Addresses for five profilesOn the busiest address
One5 profiles
Two3 profiles
Three2 profiles
Four2 profiles
Five1 profile

How addresses are dealt round the circle

With several addresses there is no need to hand them out profile by profile: the program deals the list of profiles across the list of addresses in a circle, in the order you see the profiles on screen. Five profiles and two addresses give three and two, five and three give two, two and one.

The next deal continues the circle from the address where the last one stopped rather than starting over. Otherwise the same profiles would keep getting the same addresses, and the deal would be pointless.

A profile that is open right now is skipped, and a skipped profile does not consume its address: it goes to the next one in the list. So the circle stays even however many profiles are open at the moment of the deal.

Address rotation runs on the profile clock

A mobile proxy is bought for a frequent change of address, and changing it by button on five profiles in a row is tiresome. A profile gets a period of its own, and when it runs out the address changes by itself.

Only open profiles get a new address: a closed one has no use for it, and the proxy seller charges for the change. The first change counts from the moment the profile was opened, not from the program start, or a profile opened a minute ago would change its address at once.

A profile with no period of its own takes no part in rotation. Five profiles on one mobile address should therefore be counted per address rather than per profile: one change a minute per address, not five.

The machines behind one address differ

A profile takes its machine from its own seed, not from the address. So five profiles on one proxy name five different graphics cards and five different font sets to the platform. The screen drops out of that row: few sizes are in use, and two out of five will share one more often than not.

Of 34 fingerprint values, 20 differed across that five and 14 matched. Eight are held by the shared system template, four by the address itself, and two matched by chance: memory and the heap ceiling are drawn by lot as well. Another five will give another count, most often between 12 and 19.

Measured on five profiles from one addressHow many
Fingerprint values in all34
Differ across all five20
Match across all five14
Of those, held by the address4
Would differ without a shared address24

What comes from the address, not the profile

A profile takes its clock and its language from the country of the address, and rightly so: a German address on Kyiv time reads as a forgery. One address means one country, so one language across all five.

Five different languages behind one shared address would look worse than matching ones. A real network of five machines behind one router speaks the language of its country, not five at once.

When saving on addresses is fine

Five profiles of one person on one home address read to a platform as one family behind one router. Five ad accounts belonging to five different owners on that same address read differently.

Look at what the profiles do rather than at how many there are. Accounts that walk together in real life are not given away by a shared address; accounts that are supposed to be strangers are given away by it first.

How to check this yourself

Open two profiles on one address and read what the browser answers in each: address, language, graphics card. The first two have to match and the cards have to differ. The clock does not belong here: in a country with several zones it falls to a profile by lot, and two profiles on one address disagree more often than they agree.

If the address differs, one of the profiles is going around the proxy, and that costs more than any saving. If the screen and the card match, the two profiles are one machine, and the shared address is no longer the main trouble.

What this does not claim

  • It does not claim that a shared address stops being a signal because the machines behind it differ. A platform that links by address will link five accounts and never reach the fingerprint at all.
  • The clock comes from the country of the address, not from its city. On a US address five profiles get different zones out of those the country actually lives in: most often three zones among the five, sometimes four. A platform comparing the city against the clock will see that gap.
  • The numbers above were taken on five profiles of one template and the fingerprint generation current today. Another template and another generation give another layout.
  • No browser fixes behaviour. The same wording, one payment card and one daily rhythm link accounts regardless of address and machine.

Where you can see this yourself

Every number above comes out of code you can open and run.

Addresses are dealt round the profiles in one place
apps/desktop/src/lib/proxyRotate.js
Which profile gets which address is checked by running it, not by reading text
apps/desktop/test/proxy-round-robin.js
A fingerprint is derived from the profile id, so five profiles get five different ones
packages/shared/src/index.js · apps/desktop/test/fingerprint-consistency.js
A copied profile gets its own machine and carries no secrets over
apps/desktop/test/profile-clone.js
The country of the address is asked through the proxy itself and over a secure connection only
apps/desktop/src/lib/exitGeo.js · apps/desktop/test/exit-geo.js

Questions

How many profiles can go on one proxy?
There is no number that fits everyone. Count by the worst address: however many accounts met there is however many a platform links in one move.
A mobile proxy rotates the address by itself, is that enough?
Rotation helps against the history of an address and not against being simultaneous. Five profiles working within one hour from one address are seen together before the first rotation.
If the fingerprints differ, does a shared address still matter?
It does. Different machines remove one signal out of many, while the address stays shared and is read without a single script.
Why do five profiles on one address share the same language?
The language follows the country of the address. Five different languages behind one address would stand out more than matching ones: no real network looks like that.
Can ten addresses be spread across fifty profiles?
They can, and across closed profiles they land exactly five to an address. A profile that is open is skipped and keeps the address it has, but it does not hold its place: everyone standing behind it takes the next address around the ring. Hand out addresses with the profiles closed if an even layout matters to you.
What happens if I copy a profile instead of making a new one?
The copy gets its own screen, graphics card and fonts, while the two-factor key and the password stay in the original profile. Two copies with one machine are linked harder than two accounts from one address.

See what your own browser answers

The check reads 12 values right in your browser and sends none of them anywhere.