4 ms·
They could access airbnb through something like the chrome dev tools protocol and feed the clean html to the client, with no JS (other than some click detection
by ttsda 7y ago
They could access airbnb through something like the chrome dev tools protocol and feed the clean html to the client, with no JS (other than some click detection). Would probably have latency issues but would get around most checks.
- megous 7y agoNow that would be quite interesting. But it may be waaay harder to do, without introducing all kinds of user visible quirks. Have you seen something like that done to a JS heavy website?
- ttsda 7y agoI implemented a (very initial) proof of concept of it using visual studio's dev tools[1], although there are better implementations of it out there as far as I can tell. My implementation forwards over all of the HTML when a change happens, but it's possible to access only the stuff that changes, and monitor such changes using CDP DOM events. I haven't seen it done in phishing sites but I don't visit them too often, although it's certainly possible! The visible stuff would be mostly the latency between interaction and stuff happening on the page, especially with hovering. [1] https://gist.github.com/tiagoad/2a2305a9156dea0e425fd57332a951e8 https://gist.github.com/tiagoad/2a2305a9156dea0e425fd57332a9...
- megous 7y agoThank you.