4 ms·

Plenty of bots pretend to be Chrome via user agent, but if you look closely are actually running Headless Chromium. This is a very useful signal for fraud and a

Plenty of bots pretend to be Chrome via user agent, but if you look closely are actually running Headless Chromium. This is a very useful signal for fraud and abuse prevention.

thayne 1y ago
Let's ignore for the moment that this has been reverse engineered. If they only look at this header, then legitimate users using non-chrome browsers will get treated as bots. If the these headers are only used for chrome user agents, then it would be easy to bypass by using headless chromium with a user agent that spoofs firefox or safari.
- deleted 1y ago
  [deleted]
littlestymaar 1y ago
> This is a very useful signal for fraud and abuse prevention. Like people spoofing the Chrome UA in Firefox to avoid artificial performance degradation inflicted by Google on their websites...
TechDebtDevin 1y ago
This is what I don't get. Anybody scraping at scale is using headful browsers as fallback, this does nothing. I will just find the browser that works, and use it.