3 ms·
Not that the average user necessarily knows this, but in principle can't the user agent string sent by the browser be spoofed?
by gajjanag 11y ago
Not that the average user necessarily knows this, but in principle can't the user agent string sent by the browser be spoofed?
- datalist 11y agoSure, but its not about user agents.
- benburton 11y agoHow else would you detect the operating system of the client making the request?
- nirvdrum 11y agoI have no idea if the the trackers are doing this or not, but you could use TCP/IP stack fingerprinting. It's a bit costly, so I doubt it's in use. But it could be one way to achieve it. It's certainly not 100% accurate, but my experience with nmap is the detection works surprisingly well: https://nmap.org/book/man-os-detection.html https://nmap.org/book/man-os-detection.html
- djrogers 11y agoThat requires the server to be able to make network requests to the host - not gonna happen for most users busting your site.
- deno 11y agoOnly if you use nmap as-is. Also majority of torrent software uses UPnP IGD to open TCP port (which is then advertised to the tracker). I’m not sure but I think µTorrent on Windows also listens on the Toredo provided IPv6 address.
- tokenizerrr 11y agoWhat do you think it's about, then?
- leni536 11y agoSure but chances are that 90% of the users don't know how to do it. Also it's a good warning for the users. It's primarily not for protecting the torrent site but for protecting the users anyway.