20 ms·

Browserprint: Browser fingerprint tool now can guess client OS even when spoofed

163 points by jerheinze 9y ago

Operyl 9y ago
"An error has occurred" while trying to fingerprint my browser in iOS, (not with the browser, but their toolset). Guess it failed to fingerprint me technically hah.
- M4v3R 9y ago
  Same here, Safari on iOS 10.3.1. I was curious about the result on the iOS because there are not many things you can customize on Apple devices.
nightbrawler 9y ago
Previous Discussion: https://news.ycombinator.com/item?id=12198358 https://news.ycombinator.com/item?id=12198358
kakarot 9y ago
I was a little concerned when it said I had a unique fingerprint out of the 25k tested so far, but then I remembered I'm spoofing a new user-agent every few minutes. It still managed to guess my true operating system of course :)
- tmalsburg2 9y ago
  Perhaps I misunderstand you but I think you're placing too much trust in changing the user agent. The method they are using doesn't depend on the user agent string and ignoring the user agent could even improve its performance. Further, I think it should be relatively easy to detect spoofing of user agent strings. For instance, if your user agent says your using a Linux browser but your fonts include nothing but the standard fonts on OSX, it's pretty clear then that your spoofing your user agent.
  - kakarot 9y ago
    I'm okay with the spoofing being detectable. The important thing is obfuscating myself to ad agencies. It's OK if I have a unique fingerprint, if that unique fingerprint is morphing every few minutes. What is interesting is that my unspoofed user agent is 3x more rare than the spoofed one, even though the spoofed one usually throws browser versions that are out of date. Unfortunately, my browser is still unique to the set of 25k whether spoofed or not. Enabling javascript helps a little, but then I can be audio fingerprinted which defeats the purpose. I definitely have an exotic configuration. KVM / Firefox / No 3rd Party Cookies / Blacklisted social media sites / Addons (including NoScript) that take various steps to lock down information leaks and prevent loading of blocked resources. I don't allow web fonts which is probably fairly exotic as well. If more would use script blockers and ad blockers maybe I wouldn't be unique, but it seems to be a trade-off between privacy and security. And I just kind of assume that privacy is off the table for now, so at least I can work towards having security. If I have to choose between the two, I'm more concerned with malware and being tracked through 3rd party resources like Google Fonts, Google APIs (I cache them and prevent subsequent resource loading) than I am being fingerprinted.
    - Gaelan 9y ago
      https://xkcd.com/1105/ https://xkcd.com/1105/
      - kakarot 9y ago
        Haha I love that one, and of course it's very relevant.
    - greglindahl 9y ago
      The point of this project is to not use the user-agent for fingerprinting.
      - kakarot 9y ago
        Are you saying it isn't worth spoofing your user agent?
- Eiriksmal 9y ago
  This tool provided some more insight into what the EFF already revealed about my browser: Yeah, my Fedora 24 Chrome UA string is fairly rare, but it's a unique (or nearly unique) font stack that rolls up into 18+ bits of entropy to nail my browser as me. EFF says my browser reveals enough information to be unique, out of their 260K+ tests they've run so far. Depressing. I can spoof the UA, but my fonts and plugins are giving me away. It's no surprise that Browserprint arrives at the same results with only 65K tests.
  - kakarot 9y ago
    Yeah, and attempting to obfuscate your plugins give you away. AFAIK fonts are an unsolved problem. :(
mpeg 9y ago
Guessing OS is pretty simple though, I recommend the book "Silence on the wire" [0] for a thorough explanation of passive network fingerprinting. TL;DR is that the each TCP stack has unique characteristics that are hard to spoof (you'd have to bypass the OS TCP stack and build your own that mimics another) and definitely out of reach for tools that run in sandboxed environments (like browser extensions) edit: Also, the author of that book, Michal Zalewski, made open source tool p0f [1] that implements some of those techniques to identify spoofed user agents. [0]: https://www.amazon.com/gp/product/1593270461 [1]: http://lcamtuf.coredump.cx/p0f3/
- celim307 9y ago
  Thanks for the book recommendation!
- j_s 9y ago
  Nice! https://amzn.com/dp/B008FRNHVY/ https://amzn.com/dp/B008FRNHVY/ $18
  - pbhjpbhj 9y ago
    $24 for me, perhaps i have a richer looking browser ...
    - sleepychu 9y ago
      $18 on kindle
    - j_s 9y ago
      Thanks for the heads-up, I fixed the link to point to the Kindle edition! Amazon has indeed gotten called out for these types of shenanigans in the past but that was a long time ago! https://en.wikipedia.org/wiki/Amazon.com_controversies#Differential_pricing https://en.wikipedia.org/wiki/Amazon.com_controversies#Diffe... I missed this related discussion last month: The High-Speed Trading Behind an Amazon Purchase | https://news.ycombinator.com/item?id=13963743 https://news.ycombinator.com/item?id=13963743
    - 9y ago
dijit 9y ago
it guessed I had a variant of Linux, yet I'm running FreeBSD with no spoofing of any kind. (which is corroborated in both the user agent and the javascript uname sections)
- FoeNyx 9y ago
  It guessed I had a variant of Windows, yet I'm running a Linux with no spoofing of any kind. By transitivity FreeBSD is a subvariant of Windows ... or maybe not.
- keithpeter 9y ago
  "Your user-agent string specifies your browser as being a variant of FIREFOX. Judging by your fingerprint we believe your browser is a variant of FIREFOX. Your user-agent string specifies your operating system as being a variant of UNKNOWN. Judging by your fingerprint we believe your operating system is a variant of WINDOWS." And yet User agent is parsed as "Mozilla/5.0 (X11; OpenBSD amd64; rv:49.0) Gecko/20100101 Firefox/49.0 SeaMonkey/2.46". Which is actually the case.
pweissbrod 9y ago
Apparently with firefox there is a request to enable flash (which i purposely dont install) I'm led to assume adobe flash is the piece which actually divulges all the secrets about my machine. Not surprising.
- ccheney 9y ago
  I don't think this is the case. It seems to be a part of the overall fingerprinting test and having Flash disabled didn't block me from viewing the final results.
- 27182818284 9y ago
  There are a lot more sneaky ways such as http://diracdeltas.github.io/sniffly/ http://diracdeltas.github.io/sniffly/ that are often combined
- qwertwerker 9y ago
  Flash makes it easier to get some of the information like your system fonts, but JavaScript get the same information it's just more difficult. It has to cycle through a list of fonts and test for them individually rather than Flash which just gives the full list of fonts you have installed.
michaelsbradley 9y ago
TorBrowser 7.0a3: indicates it's running on Windows, but my OS was fingerprinted as Linux. I'm actually running it on macOS.
- andrewclunn 9y ago
  Under a VM, or a BSD jail?
  - michaelsbradley 9y ago
    No.
j_s 9y ago
Is lower-level fingerprinting enough to detect the difference between ARM / x86 linux? How far would I have to go to setup a truly legit honeypot on a Raspberry Pi? Is anyone already doing this? The following article doesn't get into userland IP stack: https://www.redpill-linpro.com/sysadvent/2016/12/19/raspberry-pi-honeynet.html https://www.redpill-linpro.com/sysadvent/2016/12/19/raspberr...
dbg31415 9y ago
My fonts gave me away... Damn fonts, I need those for various design files I open. Any way to limit my browser's access to my system fonts?
- qwertwerker 9y ago
  Version 52 of Firefox lets you use a whitelist http://www.ghacks.net/2016/12/28/firefox-52-better-font-fingerprinting-protection/ http://www.ghacks.net/2016/12/28/firefox-52-better-font-fing...
  - dbg31415 9y ago
    This works. (Don't forget to disable Flash.) Canvas and Character Sizes are still making me fairly unique... Any ideas there?
    - qwertwerker 9y ago
      Canvas is trickier! There's some add-ons out there that disable it in various ways so they're your best bet I'd say (assuming canvas not working gives away less information than it does normally, it's hard to tell). For character sizes I'm not sure if there's many useful defences against it, I would have thought it'll depend on a number of things, the Tor Browser might defend against it well, you'd have to give it a look.
      - dbg31415 9y ago
        Yeah, I can't find much that gave any meaningful protection. I tried various Firefox and Chrome extensions, tried Tor... The problem is that at a certain point with security, everything just stops working. Wasn't able to get any sort of meaningful protection that still let me do much of anything... including run the Browserprint tool.
        qwertwerker 9y ago
        Sounds like the same problem I've run into in my college project :). It's really tricky to get the balance right with privacy/usability, unless the browsers put more work in to it one of the only good options is to either constantly switch browsers or use different browsers for different types of browsing.
lossolo 9y ago
Wrote my thesis about passive and active fingerprinting, it's very easy to do, most operating systems network stacks have different default values like window size, ttl etc. p0f[1] was pretty good back then. http://lcamtuf.coredump.cx/p0f3/ http://lcamtuf.coredump.cx/p0f3/
arnon 9y ago
I had a project I did for university a few years back, and we'd identify the browser or application just by looking at the timing information between packets (without looking at ports, source/destination, etc.). We could identify malware with around 85% accuracy, which was pretty good without any other marker.
- ArchReaper 9y ago
  That sounds really interesting, do you have any publicly available documentation or articles about it?
- unexistance 9y ago
  found it http://arnon.dk/malicious-traffic-detection-using-traffic-fingerprints/ http://arnon.dk/malicious-traffic-detection-using-traffic-fi...
joshdance 9y ago
What are the legitimate uses for fingerprinting?
- educar 9y ago
  Mostly ad tracking.
  - eli 9y ago
    In general, sure, but ad networks don't care about OS spoofing.
    - educar 9y ago
      No, the point is they can serve up targeted ads using browser fingerprint
      - eli 9y ago
        Detecting OS despite a spoofed user agent is not relevant to that goal
- ambicapter 9y ago
  The same reason you would ever want to identify an actor. Possibly he is abusing your system and taking advantage of his relative anonymity.
- michaelt 9y ago
  "Legitimate" is a subjective term, obviously, but I've heard of it being used in anti-fraud tools [1] - presumably as one of a suite of inputs into a risk estimation model. Of course, whether it's effective or just marketing is difficult to prove :) [1] https://blogs.wsj.com/digits/2010/12/01/evercookies-and-fingerprinting-finding-fraudsters-tracking-consumers/ https://blogs.wsj.com/digits/2010/12/01/evercookies-and-fing...
  - slv77 9y ago
WEBSHITWEEKLY 9y ago
got " An error has occurred. " typical webshit.
- WillyOnWheels 9y ago
  Worked for me on 3 different browsers. Are you using lynx?
  - Gaelan 9y ago
    Fails on iOS safari for me.
  - WEBSHITWEEKLY 9y ago
    palecoon, webgl disabled, noscript, images >15k disabled, only first party javbascript
    - WillyOnWheels 9y ago
      dammit you tricked me into googlling 'palecoon'. suckered.
Kipters 9y ago
It failed to recognize my browser as Edge, it thinks it's Firefox http://browserprint.info/view?source1=UUID&UUID1UUID=fa204a95-8046-441e-9e97-33a0eb6ddb80 http://browserprint.info/view?source1=UUID&UUID1UUID=fa204a9...
- lucb1e 9y ago
  Wishful thinking?
floatboth 9y ago
Heh, my WebGL renderer "ANGLE (AMD Radeon (TM) RX 480 Direct3D11 vs_5_0 ps_5_0)" is unique. And character sizes o_0
OJFord 9y ago
My randomised user-agent happened to tell it the truth, but browserprint 'detected' that I was instead using a different OS and browser. I'm also using a fingerprint-blocking plugin, which seems to be doing its job!
- jwilk 9y ago
  Randomized U-A makes you stand out. You want single U-A that many other people use.
  - OJFord 9y ago
    I'll double check my settings, but I believe it's randomised among a set common choices. The may well be no additional value to that, though.
reneberlin 9y ago
damn, it doesn't work on lynx. should i update my browser?
nayuki 9y ago
I keep failing the CAPTCHA. Why is this part designed so badly?
- st0le 9y ago
  That is exactly what a bot would say.
- PhantomGremlin 9y ago
  So did I. Did you have JavaScript disabled? I did. At least Panopticlick gives me something useful w/o JS. Crickets from this site.
nayuki 9y ago
Seems similar to Panopticlick which was released years ago: https://panopticlick.eff.org/ https://panopticlick.eff.org/
- nosuchthing 9y ago
  One of the first things listed on the page: Browserprint is a free open source project designed to provide the same and better functionality as the original Panopticlick.
lightedman 9y ago
Still hasn't guessed my MenuetOS box.
ArtDev 9y ago
Both Hulu and Netflix block Ubuntu, so this sucks for people like me who use Linux as their primary media OS. Hopefully this doesn't catch on or we have to find another way to spoof these sites.
bradknowles 9y ago
Hmm. Doesn't seem to work on iOS. ;)

163 points by jerheinze 9y ago

"An error has occurred" while trying to fingerprint my browser in iOS, (not with the browser, but their toolset). Guess it failed to fingerprint me technically hah.

M4v3R 9y ago
Same here, Safari on iOS 10.3.1. I was curious about the result on the iOS because there are not many things you can customize on Apple devices.

nightbrawler 9y ago

Previous Discussion: https://news.ycombinator.com/item?id=12198358 https://news.ycombinator.com/item?id=12198358

kakarot 9y ago

I was a little concerned when it said I had a unique fingerprint out of the 25k tested so far, but then I remembered I'm spoofing a new user-agent every few minutes. It still managed to guess my true operating system of course :)

tmalsburg2 9y ago
Perhaps I misunderstand you but I think you're placing too much trust in changing the user agent. The method they are using doesn't depend on the user agent string and ignoring the user agent could even improve its performance. Further, I think it should be relatively easy to detect spoofing of user agent strings. For instance, if your user agent says your using a Linux browser but your fonts include nothing but the standard fonts on OSX, it's pretty clear then that your spoofing your user agent.
- kakarot 9y ago
  I'm okay with the spoofing being detectable. The important thing is obfuscating myself to ad agencies. It's OK if I have a unique fingerprint, if that unique fingerprint is morphing every few minutes. What is interesting is that my unspoofed user agent is 3x more rare than the spoofed one, even though the spoofed one usually throws browser versions that are out of date. Unfortunately, my browser is still unique to the set of 25k whether spoofed or not. Enabling javascript helps a little, but then I can be audio fingerprinted which defeats the purpose. I definitely have an exotic configuration. KVM / Firefox / No 3rd Party Cookies / Blacklisted social media sites / Addons (including NoScript) that take various steps to lock down information leaks and prevent loading of blocked resources. I don't allow web fonts which is probably fairly exotic as well. If more would use script blockers and ad blockers maybe I wouldn't be unique, but it seems to be a trade-off between privacy and security. And I just kind of assume that privacy is off the table for now, so at least I can work towards having security. If I have to choose between the two, I'm more concerned with malware and being tracked through 3rd party resources like Google Fonts, Google APIs (I cache them and prevent subsequent resource loading) than I am being fingerprinted.
  - Gaelan 9y ago
    https://xkcd.com/1105/ https://xkcd.com/1105/
    - kakarot 9y ago
      Haha I love that one, and of course it's very relevant.
  - greglindahl 9y ago
    The point of this project is to not use the user-agent for fingerprinting.
    - kakarot 9y ago
      Are you saying it isn't worth spoofing your user agent?
Eiriksmal 9y ago
This tool provided some more insight into what the EFF already revealed about my browser: Yeah, my Fedora 24 Chrome UA string is fairly rare, but it's a unique (or nearly unique) font stack that rolls up into 18+ bits of entropy to nail my browser as me. EFF says my browser reveals enough information to be unique, out of their 260K+ tests they've run so far. Depressing. I can spoof the UA, but my fonts and plugins are giving me away. It's no surprise that Browserprint arrives at the same results with only 65K tests.
- kakarot 9y ago
  Yeah, and attempting to obfuscate your plugins give you away. AFAIK fonts are an unsolved problem. :(

mpeg 9y ago

Guessing OS is pretty simple though, I recommend the book "Silence on the wire" [0] for a thorough explanation of passive network fingerprinting. TL;DR is that the each TCP stack has unique characteristics that are hard to spoof (you'd have to bypass the OS TCP stack and build your own that mimics another) and definitely out of reach for tools that run in sandboxed environments (like browser extensions) edit: Also, the author of that book, Michal Zalewski, made open source tool p0f [1] that implements some of those techniques to identify spoofed user agents. [0]: https://www.amazon.com/gp/product/1593270461 [1]: http://lcamtuf.coredump.cx/p0f3/

celim307 9y ago
Thanks for the book recommendation!
j_s 9y ago
Nice! https://amzn.com/dp/B008FRNHVY/ https://amzn.com/dp/B008FRNHVY/ $18
- pbhjpbhj 9y ago
  $24 for me, perhaps i have a richer looking browser ...
  - sleepychu 9y ago
    $18 on kindle
  - j_s 9y ago
    Thanks for the heads-up, I fixed the link to point to the Kindle edition! Amazon has indeed gotten called out for these types of shenanigans in the past but that was a long time ago! https://en.wikipedia.org/wiki/Amazon.com_controversies#Differential_pricing https://en.wikipedia.org/wiki/Amazon.com_controversies#Diffe... I missed this related discussion last month: The High-Speed Trading Behind an Amazon Purchase | https://news.ycombinator.com/item?id=13963743 https://news.ycombinator.com/item?id=13963743
  - 9y ago

dijit 9y ago

it guessed I had a variant of Linux, yet I'm running FreeBSD with no spoofing of any kind. (which is corroborated in both the user agent and the javascript uname sections)

FoeNyx 9y ago
It guessed I had a variant of Windows, yet I'm running a Linux with no spoofing of any kind. By transitivity FreeBSD is a subvariant of Windows ... or maybe not.
keithpeter 9y ago
"Your user-agent string specifies your browser as being a variant of FIREFOX. Judging by your fingerprint we believe your browser is a variant of FIREFOX. Your user-agent string specifies your operating system as being a variant of UNKNOWN. Judging by your fingerprint we believe your operating system is a variant of WINDOWS." And yet User agent is parsed as "Mozilla/5.0 (X11; OpenBSD amd64; rv:49.0) Gecko/20100101 Firefox/49.0 SeaMonkey/2.46". Which is actually the case.

pweissbrod 9y ago

Apparently with firefox there is a request to enable flash (which i purposely dont install) I'm led to assume adobe flash is the piece which actually divulges all the secrets about my machine. Not surprising.

ccheney 9y ago
I don't think this is the case. It seems to be a part of the overall fingerprinting test and having Flash disabled didn't block me from viewing the final results.
27182818284 9y ago
There are a lot more sneaky ways such as http://diracdeltas.github.io/sniffly/ http://diracdeltas.github.io/sniffly/ that are often combined
qwertwerker 9y ago
Flash makes it easier to get some of the information like your system fonts, but JavaScript get the same information it's just more difficult. It has to cycle through a list of fonts and test for them individually rather than Flash which just gives the full list of fonts you have installed.

michaelsbradley 9y ago

TorBrowser 7.0a3: indicates it's running on Windows, but my OS was fingerprinted as Linux. I'm actually running it on macOS.

andrewclunn 9y ago
Under a VM, or a BSD jail?
- michaelsbradley 9y ago
  No.

j_s 9y ago

Is lower-level fingerprinting enough to detect the difference between ARM / x86 linux? How far would I have to go to setup a truly legit honeypot on a Raspberry Pi? Is anyone already doing this? The following article doesn't get into userland IP stack: https://www.redpill-linpro.com/sysadvent/2016/12/19/raspberry-pi-honeynet.html https://www.redpill-linpro.com/sysadvent/2016/12/19/raspberr...

dbg31415 9y ago

My fonts gave me away... Damn fonts, I need those for various design files I open. Any way to limit my browser's access to my system fonts?

qwertwerker 9y ago
Version 52 of Firefox lets you use a whitelist http://www.ghacks.net/2016/12/28/firefox-52-better-font-fingerprinting-protection/ http://www.ghacks.net/2016/12/28/firefox-52-better-font-fing...
- dbg31415 9y ago
  This works. (Don't forget to disable Flash.) Canvas and Character Sizes are still making me fairly unique... Any ideas there?
  - qwertwerker 9y ago
    Canvas is trickier! There's some add-ons out there that disable it in various ways so they're your best bet I'd say (assuming canvas not working gives away less information than it does normally, it's hard to tell). For character sizes I'm not sure if there's many useful defences against it, I would have thought it'll depend on a number of things, the Tor Browser might defend against it well, you'd have to give it a look.
    - dbg31415 9y ago
      Yeah, I can't find much that gave any meaningful protection. I tried various Firefox and Chrome extensions, tried Tor... The problem is that at a certain point with security, everything just stops working. Wasn't able to get any sort of meaningful protection that still let me do much of anything... including run the Browserprint tool.
      - qwertwerker 9y ago
        Sounds like the same problem I've run into in my college project :). It's really tricky to get the balance right with privacy/usability, unless the browsers put more work in to it one of the only good options is to either constantly switch browsers or use different browsers for different types of browsing.

lossolo 9y ago

Wrote my thesis about passive and active fingerprinting, it's very easy to do, most operating systems network stacks have different default values like window size, ttl etc. p0f[1] was pretty good back then. http://lcamtuf.coredump.cx/p0f3/ http://lcamtuf.coredump.cx/p0f3/

arnon 9y ago

I had a project I did for university a few years back, and we'd identify the browser or application just by looking at the timing information between packets (without looking at ports, source/destination, etc.). We could identify malware with around 85% accuracy, which was pretty good without any other marker.

ArchReaper 9y ago
That sounds really interesting, do you have any publicly available documentation or articles about it?
unexistance 9y ago
found it http://arnon.dk/malicious-traffic-detection-using-traffic-fingerprints/ http://arnon.dk/malicious-traffic-detection-using-traffic-fi...

joshdance 9y ago

What are the legitimate uses for fingerprinting?

educar 9y ago
Mostly ad tracking.
- eli 9y ago
  In general, sure, but ad networks don't care about OS spoofing.
  - educar 9y ago
    No, the point is they can serve up targeted ads using browser fingerprint
    - eli 9y ago
      Detecting OS despite a spoofed user agent is not relevant to that goal
ambicapter 9y ago
The same reason you would ever want to identify an actor. Possibly he is abusing your system and taking advantage of his relative anonymity.
michaelt 9y ago
"Legitimate" is a subjective term, obviously, but I've heard of it being used in anti-fraud tools [1] - presumably as one of a suite of inputs into a risk estimation model. Of course, whether it's effective or just marketing is difficult to prove :) [1] https://blogs.wsj.com/digits/2010/12/01/evercookies-and-fingerprinting-finding-fraudsters-tracking-consumers/ https://blogs.wsj.com/digits/2010/12/01/evercookies-and-fing...
- slv77 9y ago

WEBSHITWEEKLY 9y ago

got " An error has occurred. " typical webshit.

WillyOnWheels 9y ago
Worked for me on 3 different browsers. Are you using lynx?
- Gaelan 9y ago
  Fails on iOS safari for me.
- WEBSHITWEEKLY 9y ago
  palecoon, webgl disabled, noscript, images >15k disabled, only first party javbascript
  - WillyOnWheels 9y ago
    dammit you tricked me into googlling 'palecoon'. suckered.

Kipters 9y ago

It failed to recognize my browser as Edge, it thinks it's Firefox http://browserprint.info/view?source1=UUID&UUID1UUID=fa204a95-8046-441e-9e97-33a0eb6ddb80 http://browserprint.info/view?source1=UUID&UUID1UUID=fa204a9...

lucb1e 9y ago
Wishful thinking?

floatboth 9y ago

Heh, my WebGL renderer "ANGLE (AMD Radeon (TM) RX 480 Direct3D11 vs_5_0 ps_5_0)" is unique. And character sizes o_0

OJFord 9y ago

My randomised user-agent happened to tell it the truth, but browserprint 'detected' that I was instead using a different OS and browser. I'm also using a fingerprint-blocking plugin, which seems to be doing its job!

jwilk 9y ago
Randomized U-A makes you stand out. You want single U-A that many other people use.
- OJFord 9y ago
  I'll double check my settings, but I believe it's randomised among a set common choices. The may well be no additional value to that, though.

reneberlin 9y ago

damn, it doesn't work on lynx. should i update my browser?

nayuki 9y ago

I keep failing the CAPTCHA. Why is this part designed so badly?

st0le 9y ago
That is exactly what a bot would say.
PhantomGremlin 9y ago
So did I. Did you have JavaScript disabled? I did. At least Panopticlick gives me something useful w/o JS. Crickets from this site.

nayuki 9y ago

Seems similar to Panopticlick which was released years ago: https://panopticlick.eff.org/ https://panopticlick.eff.org/

nosuchthing 9y ago
One of the first things listed on the page: Browserprint is a free open source project designed to provide the same and better functionality as the original Panopticlick.

lightedman 9y ago

Still hasn't guessed my MenuetOS box.

ArtDev 9y ago

Both Hulu and Netflix block Ubuntu, so this sucks for people like me who use Linux as their primary media OS. Hopefully this doesn't catch on or we have to find another way to spoof these sites.

bradknowles 9y ago

Hmm. Doesn't seem to work on iOS. ;)