bug-gnuzilla
[Top][All Lists]
Advanced
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

bug#47276: Stuck at Cloudflare 'browser checks'

From: bill-auger
Subject: bug#47276: Stuck at Cloudflare 'browser checks'
Date: Mon, 10 May 2021 20:07:07 -0400 
i may have found a solution for this

there has been a long-standing debate in parabola, as to whether
spoofing the user-agent is a good anti-fingerprinting measure -
people tend to agree that it probably does more harm than good

for example, 'IceCat' in the user-agent string, actually presents
significantly more identifiable information than the generic
'Firefox' would

in addition to the user-agent string, there are javascript
properties, which identify the browser and host - these are
supposedly deprecated now; but they are available - icecat
reports: 'Windows NT 6.1', where i believe this would be
'Windows NT 10.0' on most current windows systems

related to this ticket, i have removed the user-agent
over-rides in parabola's iceweasel, for the reasons above -
the user-agent is now the same as archlinux and most other
distros (the defaults) - in doing so, the problem with login
to gitlab.com was resolved - i discovered that it is the
'general.platform.override' property, which is responsible for
the gitlab/cloudflare rejecting the browser - presumably,
because it conflicts with the user-agent information - setting
it to 'Linux x86_64' (manually) satisfied the browser check;
so this appears to be the general solution

at least, the 'oscpu' and 'platform' properties should be updated
to match the most common windows hosts - 'appVersion' also appears
to be wrong - the default value is '5.0 (X11)' (not the browser
version) - however, changing those properties to agree with the
user-agent string, is effectively removing the overrides (which
again, are deprecated)

here is a test page:
  <html><body><script type="text/javascript">
  document.write("codeName="   + navigator.appCodeName + "<br />");
  document.write("appName="    + navigator.appName     + "<br />");
  document.write("appVersion=" + navigator.appVersion  + "<br />");
  document.write("oscpu="      + navigator.oscpu       + "<br />");
  document.write("platform="   + navigator.platform    + "<br />");
  document.write("product="    + navigator.product     + "<br />");
  document.write("buildID="    + navigator.buildID     + "<br />");
  document.write("userAgent="  + navigator.userAgent   + "<br />");
  </script><body><html>

icecat:
  codeName=Mozilla
  appName=Netscape
  appVersion=78.0
  oscpu=Windows NT 6.1
  platform=Win32
  product=Gecko
  buildID=Gecko/20100101
  userAgent=Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 IceCat/78.0

arch (default values):
  appCodeName=Mozilla
  appName=Netscape
  appVersion=5.0 (X11)
  oscpu=Linux x86_64
  platform=Linux x86_64
  product=Gecko
  buildID=Gecko/20100101
  userAgent=Mozilla/5.0 (X11; Linux x86_64; rv:88.0) Gecko/20100101 Firefox/88.0
reply via email to
[Prev in Thread] Current Thread [Next in Thread]