25 ms·
Redditor thenickdude commented: > I found that in my hosts file the other day too, and I investigated to find why they're doing it at all. > They're using thi
by jt2190 6mo ago
Redditor thenickdude commented:
> I found that in my hosts file the other day too, and I investigated to find why they're doing it at all.
> They're using this to detect if you have Creative Cloud already installed when you visit on their website.
> When you visit https://www.adobe.com/home https://www.adobe.com/home, they load this image using JavaScript:
https://detect-ccd.creativecloud.adobe.com/cc.png https://detect-ccd.creativecloud.adobe.com/cc.png
> If the DNS entry in your hosts file is present, your browser will therefore connect to their server, so they know you have Creative Cloud installed, otherwise the load fails, which they detect.
> They used to just hit http://localhost:<various ports>/cc.png which connected to your Creative Cloud app directly, but then Chrome started blocking Local Network Access, so they had to do this hosts file hack instead.
- tdeck 6mo agoThis is clever in a way, but I wonder what the review process looks like on that team (I say that team because my experience at Adobe was that the company is very heterogeneous).
- dagmx 6mo agoThey’re still completely heterogeneous in my experience as someone who works with each of their teams. It’s like talking to completely different companies who have little idea what the others are doing.
- tdeck 6mo agoIt's because Adobe grew through acquisitions and they have a philosophy of "let teams keep working in the way that works for them".
- michaelbuckbee 6mo agoThe underlying intent here (figure out if it's an existing customer of our locally installed apps when they visit our website) doesn't seem bad, but I certainly dislike both the hosts file and localhost detection options. I'm curious if there's a "good" way to do this.
- ssdspoimdsjvv 6mo agoI dislike the intent too. A website should simply not be able to see which apps I've got installed. Imagine Facebook doing stuff like this in order to know what ads they should serve.
- porridgeraisin 6mo agoFairly certain they already do, atleast on mobile.
- 10729287 6mo agoJust do it by asking users to log in. Am I missing something here ?
- johntash 6mo agoNo that seems like the reasonable expectation to me too.
- ZoneZealot 6mo agoNext they'll be installing a font like TeamViewer did... https://community.teamviewer.com/English/discussion/124507/statement-on-teamviewer-installation-detection/p1 https://community.teamviewer.com/English/discussion/124507/s...
- evanjrowley 6mo agoNovel. A similar approach could be taken by other SaaS tools to comply with age verificaiton laws. Just write an entry to the client's hosts file that points to a subdomain corresponding to a particular birth year. Simple enough for legislative representatives to understand. /s