4 ms·
Devil’s advocate, whitelisting is often much more effective than blacklisting.
by unlinked_dll 7y ago
Devil’s advocate, whitelisting is often much more effective than blacklisting.
- davidgerard 7y agoThe devil has enough advocates already. This is incompetent behaviour, however you slice it.
- ChrisSD 7y agoWhitelisting or blacklisting UA strings is meaningless. Any actually malicious person is going to spoof that without even giving it much thought. It's only the honest people who are affected. Funnily enough Google itself used to advocate against detecting UA strings (I don't know if they still do). Mind you, groups within Google don't always listen to each other.
- lucb1e 7y agoIndeed, I'll happily (and honestly) report my user agent as PHP to you and add my email address to it so you can reach out if there are any problems, but if I notice you're blocking my proxy that removes your crap and turns a multi-megabyte news page (which I'm paying for) into something that loads instantly even on GPRS/EDGE, I'm just going to spoof it.