3 ms·
Show HN: Fingerprinting browser-impersonating bots w/o JavaScript (open spec)
I've published an open specification for a detection method I'm calling RQ4 (Request Context Fingerprinting). It analyzes whether HTTP request headers are logically consistent with real browser behavior - not just what headers are present, but whether they make sense together given the request context.
- jjgreen 7mo agoThis looks interesting, it's a pity that the example site, https://rq4.dev/ https://rq4.dev/, "No JavaScript fingerprinting needed", fails without JavaScript (yes I get it, JS not needed but can be implemented in JS, but still, incongruous).
- bitnoize 7mo agoVery interesting approach, thanks for sharing the research results.