3xblah

28 ms·

181.
by 3xblah 7y ago
I wrote a non-graphical, text-only, command line method of searching booking.com a few years ago using only nc/tnftp/curl/etc., sed, links (for form submission) and tmux (to send keystrokes to links). It searches for hotels
182.
by 3xblah 7y ago
"My strategy was to MITM the mobile app and use the same API." Did the app use cert pinning What percentage of apps actually use cert pinning
183.
by 3xblah 7y ago
Direct link for those who do not want to use Google Javascript: https://raw.githubusercontent.com/nezaj/jobsearch-content/ma...
184.
by 3xblah 7y ago
It is true this forum is full of programmers. It is also true this forum is relatively "lightweight" and does not require Javascript to read and comment.
185.
by 3xblah 7y ago
Good to know they are monitoring the User-Agent header for security. A Chrome user changes her User-Agent header in Developer Tools, logs in to Gmail and finds that Google has sent her a "Security alert" e-mail message that a &quo
186.
by 3xblah 7y ago
If change/remove User-Agent header and disable Javascript, then can read single tweets and threads easily at mobile.twitter.com. No need to block anything.
187.
by 3xblah 7y ago
An objective person reading this comment, who otherwise knows nothing about this subject, might ask "If the so much of the web works without Javascript, then why is Javascript enabled by default." Google just made changes that req
188.
by 3xblah 7y ago
Better than a bookmark action would be a commandline option, similar to Firefox's -screenshot, which will work without starting X11. Something like -archive:warc
189.
by 3xblah 7y ago
Why is DOH only used for resolvers. What about authoritative servers. Caches are not authoritative soures of DNS data. Nameservers for registries and registrars do not offer DOH. DNS over HTTPS is only used for "recursive DNS".
190.
by 3xblah 7y ago
"Imagine having the last 30 years of web browsing history saved on your local machine." I believe the name for that experience was/is "Microsoft Windows".
191.
by 3xblah 7y ago
The new domain needed to log in is ssl.gstatic.com (not a new domain but a new requirement) As if there were not already enough domains (and redirects) required... just to log in
192.
by 3xblah 7y ago
Building DNS resolution into applications, bypassing the OS, is not something I like as a user. It robs me of control. Chrome started down this path and then withdrew. However Golang seems to encourage building applications that do their
193.
by 3xblah 7y ago
The Cloudflare TRR endpoint is mapped to a subdomain that indicates the user agent, i.e., browser, was distributed by Mozilla: mozilla.cloudflare-dns.com. The IP address for the subdomain is the same as for cloudflare-dns.com. Would this
194.
by 3xblah 7y ago
[deleted]
195.
by 3xblah 7y ago
NextDNS purports to be a DNS provider that will use public blocklists and filter queries and block ads and tracking like a PiHole. The Mozilla TRR policy states that the DNS provider must not filter any queries unless the user explicitly op
196.
by 3xblah 7y ago
If the user is sitting behind a filtered port 53, e.g., at a hotel, running her own resolver will not solve the problem. This filtering of port 53 may be growing in popularity among ISPs. If it is, then that means users cannot easily choos
197.
by 3xblah 7y ago
“For most users, it’s very hard to know where their DNS requests go and what the resolver is doing with them.” said Eric Rescorla, Firefox CTO. “Firefox’s Trusted Recursive Resolver program allows Mozilla to negotiate with providers on you
198.
by 3xblah 7y ago
Nothing in the filtered output that could cause a redirect. If HTTP 3xx redirect, maybe try using a cache URL instead, e.g., curl http://web.archive.org/web/20191214075242/https://www.washingtonpost.
199.
by 3xblah 7y ago
There is little need for this if one is using a text-only browser such as links/elinks that does not process Javascript or CSS. AMP look great in links/elinks, without any filtering. This is for folks who do not use text-only
200.
by 3xblah 7y ago
curl https://www.washingtonpost.com/outlook/the-accidental-book-review-that-made-jack-kerouac-famous/2019/12/13/23e94230-04b3-11ea-b17d-8b867891d39d_story.html?outputType=amp |tr -cd '\11\1
201.
by 3xblah 7y ago
"Public announcements by PIR, ISOC and Ethos Capital contain relevant facts that were not required in the request for approval." What facts? Why were those facts not required? Sounds like under the system in place there is little
202.
by 3xblah 7y ago
"The New Yorker The average load time is 102.127 seconds 431 requests" Author is asking for "text-only"; this of course only requires one request. curl -4o https://www.newyorker.com/magazine/2015
203.
by 3xblah 7y ago
"Just tried it now on a few different sites." Which sites?
204.
by 3xblah 7y ago
"I'm more than ready and willing to pay for a text-only version of every news website like the ones provided by NPR and CNN." How much is the author willing to pay? He is going to subscribe to "every news site"? T
205.
by 3xblah 7y ago
Comments here on User-Agent fail to mention how browsers can be distinguished by the headers they send and the ordering of those headers. For example, the User-Agent header might be the 9th header in a Chrome browser while in a Firefox bro
206.
by 3xblah 7y ago
Unfortunately, the popular graphical browsers AFAIK do not allow the user to disable CSS. Other news sites that use AMP, such as WSJ, use CSS as well as Javascript to annoy the user. Disabling Javascript is not enough. It is possible to
207.
by 3xblah 7y ago
"Technique #5: Use a terrible protocol Debugging is boring. Wouldn't you rather appeal to customers who write bug-free code on the first try? To really show disdain for your customers, use a proprietary protocol so that language s
208.
by 3xblah 7y ago
curl https://www.bloombergquint.com/amp/bq-blue-exclusive/silicon-valley-got-millions-to-let-siri-and-alexa-listen-in |sed -n 'N;/story-element-text">/p' > a.htm firefox a.ht
209.
by 3xblah 7y ago
"... that no one would be seen arguing against." They know some would argue against. What gives this away as "spin" is that they will not make these changes optional. A Google user cannot opt out of signing in with Javas
210.
by 3xblah 7y ago
Javascript is obviously not required for Google Mail to work. Browsers that do not support Javascript work just fine. If we adjust the user-agent string to match a "supported browser" there is no need to change any Google setting

More ›