3 ms·
isn't JA4 also useless because it is so easy to spoof tls. For eg. cycletls for nodejs etc..
by cute_boi 1mo ago
isn't JA4 also useless because it is so easy to spoof tls. For eg. cycletls for nodejs etc..
- davidfischer 1mo agoIt will probably be useless one day. In practice, it is still useful today though not for this attack.
- johneth 1mo agoThere's also the JA4+ suite (https://github.com/FoxIO-LLC/ja4 https://github.com/FoxIO-LLC/ja4), in addition to standard JA4.
- arbol 28d agoYep curl cffi accurately spoofs JA4 for chrome. You need to detect client side as well.