Reverse-engineering Claude's client-side anti-fraud: Android binds hardware IDs, a China SIM card gives you away
dotey · x · 2026-10-21
A static reverse-engineering of Claude Code (Mac CLI, Mac App, Android) maps out its risk-control stack: Android is the strictest, using Sift fraud detection, SIM-country checks, and hardware-bound ANDROIDID + Play Integrity that survives reinstalls; Mac apps use randomized device IDs with Sentry/Datadog telemetry. The author lists eight classic mistakes that burn accounts: China SIM cards, wiping app data, sharing /.claude.json across accounts, switching accounts without rotating userData, routing only the main domain through residential IPs while telemetry goes through proxies, KYC-time IP checks (Turnstile, hCaptcha, Stripe 3DS, Persona), hammering requests after a restriction, and multi-accounting on one residential IP. Workflow used: DeepSeek Harness + flatkey.
More from Safety
- Paper claims ChatGPT silently builds psychological profiles of users, 96% of memories stored unasked — provenauthority · 2026-10-21
- Schmidt and Ferguson Argue China and the U.S. Are Building "Empires of AI" — marigo · 2026-10-21
- Protesters Demand AI Freeze Outside OpenAI's NYC Office; Analyst Sees Daily Protests by 2027 — LuizaJarovsky · 2026-10-21
- Compromised certs used to break into Xiaomi smart lights, firsthand test — basedjensen · 2026-10-21
- Sarah Archer: agent-found holes across the internet do feel like an AI problem — saranormous · 2026-10-21
- Polymarket opens book on OpenAI reporting another AI sandbox escape — Polymarket · 2026-10-21