Live data from Hacker News

Ask HN: Why does the US Visa application website do a port-scan of my network?

news.ycombinator.com

141–150 of 269 posts

Re: Ask HN: Why does the US Visa application website do a port-scan of my network?

#141
post #4

My biggest grief with that site is that it's like something from the 90s.

Yeah it should have a fixed header and footer along with a pop-up consent drawer so you can only see 10% of the actual site content. So much better. Modern web design is a joke.

t-shirt worthy quote - "modern web design is a joke" ;)

Re: Ask HN: Why does the US Visa application website do a port-scan of my network?

#142
post #65
post #46

Earlier quoted context omitted.

That would be quite clever for an incredibly horrible website. The other day my SO, who is a Turkish citizen, was filling up her visa application and after half an hour of meticulous form filling the system just kick her out. I think the session times out or something. If you haven't created an account or you haven't write down the current application ID everything is lost. In the process she was also directed to a n…

The hard truth of it all is that both the US and (partially) the EU don’t want to make this easier because seeing as wanting “outside” people is now a political liability. You may want to adjust your expectations around that.

[deleted]

Re: Ask HN: Why does the US Visa application website do a port-scan of my network?

#143
post #89
post #48

Earlier quoted context omitted.

The scam websites are probably owned by someone who works in the Indian govt.

Almost certainly, entire industries have been given over to indian scammers and their government allies.

damn bro, how bad situation on there????

I know that Indian scam stereotype is racist and bad but how much it is "that bad"

Re: Ask HN: Why does the US Visa application website do a port-scan of my network?

#144
post #68
post #46

Earlier quoted context omitted.

That would be quite clever for an incredibly horrible website. The other day my SO, who is a Turkish citizen, was filling up her visa application and after half an hour of meticulous form filling the system just kick her out. I think the session times out or something. If you haven't created an account or you haven't write down the current application ID everything is lost. In the process she was also directed to a n…

You might be making the assumption that the US wants to make the process easier.

The purpose of a system is what it does.

Re: Ask HN: Why does the US Visa application website do a port-scan of my network?

#145
post #48

Earlier quoted context omitted.

Another data point - 5he Indian visa system is similar. The official website ending in .gov.in, which is hard to find, offers a visa for $10 and minimal hassle. The scam websites, with better SEO sell the same shit for $80. They’re just proxying your application to the real website and pocketing the difference. It would be good if the Indian government could block the scammers but I guess it’s a lower priority for th…

The scam websites are probably owned by someone who works in the Indian govt.

This was the case with Ghana. The Embassy in the US had an unofficial offical partnership with an expediter scam (charge more for faster shipping, looks very official). They fired the whole visa staff when it finally came to light. Probably because someone forgot to let their manager's manager in on the scam.

Re: Ask HN: Why does the US Visa application website do a port-scan of my network?

#146
post #86

Earlier quoted context omitted.

I'm not too familiar with network side stuff. What would a port scan be able to detect that would indicate that you're a scammer?

Just a guess, but maybe a typical bot has a webserver, ssh server, some other servers running on the same machine, whereas a typical Visa applicant doesn't.

Or a browser automation server (Marionette/CDP). I seem to remember watching a presentation where it was mentioned you could detect them this way, but I don't remember where or what it was called. this one: https://www.youtube.com/watch?v=4nZD6ee2Xo8 (WHY2025: Stealth Web Scraping Techniques for OSINT)

Re: Ask HN: Why does the US Visa application website do a port-scan of my network?

#147

Earlier quoted context omitted.

It’s only being phased out on Chrome, by Google.

Yes, to make us safer, now you enable developer mode and disable signature checking to install it locally, thanks Google

Soon, you won't be able to install it locally because the API it relies on will no longer be available. Use Firefox.

Re: Ask HN: Why does the US Visa application website do a port-scan of my network?

#148
post #52

Earlier quoted context omitted.

uMatrix is archived and I think uBlockOrigin is now advised to use(which incorporate uMatrix by enabling advanced settings) For those who want to try blocking more stuff you can enable hard mode and bind relax blocking mode keyboard shortcut I'd recommend also enabling filter lists(I advice yokoffing/filterlists and your region/language) https://github.com/gorhill/uBlock/wiki/Blocking-mode:-hard-m...

But uBlockOrigin UI is so much worse... Besides, uMatrix works fine. It's that kind of program that doesn't need any updates.

I would really like an intuitive UI for people who don't want to do 'a project' to get their config tight.

Re: Ask HN: Why does the US Visa application website do a port-scan of my network?

#149
post #92

Earlier quoted context omitted.

[flagged]

I don't see how blaming the pre-existing website on the current administration makes sense.

People really really dislike when you point out that the democrats are also broadly anti immigration in practice. They forget Biden deported 4.6 million people vs Trump's 2 million.

Re: Ask HN: Why does the US Visa application website do a port-scan of my network?

#150

Earlier quoted context omitted.

How does it manage to hide the requests to 127.0.0.1 from the network tab?

The requests are not made, because some operating systems prevent this. If you're on OSX, the permission to "discover on the local network" prevents it from happening ( System Settings -> Privacy & Security -> Local Network -> yourbrowser ) Could also be 'network' permissions on firefox ( Go to Settings > Privacy & Security > Permissions ) which is on a per site level, but iirc that could be set site-wide at some poi…

Looks like this is new to MacOS 15 Sequoia, as I don’t see a Local Network option in Sonoma.
Post reply on HN