Live data from Hacker News

Show HN: Browser extension that spoofs your location data to match your VPN

news.ycombinator.com

61–70 of 99 posts

Re: Show HN: Browser extension that spoofs your location data to match your VPN

#61
post #2

Recently made this extension and interested in getting some feedback on it. Vytal can Spoof your timezone, locale, geolocation and user agent. This data can be used to track you or reveal your location. Most extensions that provide anti-fingerprinting features rely on content scripts to inject script tags into webpages. There are many limitations to script tag injections which you can read about here: https://palant.…

if this were true then BBC would know I'm not watching from UK.

Re: Show HN: Browser extension that spoofs your location data to match your VPN

#62

This extension takes an interesting approach to spoofing data, which is nice! In my case, I’m interested in doing the same thing inside of Puppeteer for web scraping, unfortunately it seems like the only possible approach is similar to content scripts (for example https://github.com/berstend/puppeteer-extra/tree/master/pack... ) which leads to it being easily detected. Are there any similar approaches that can be use…

You can load extensions in puppeteer, also in headless with the experimental chrome mode. https://github.com/puppeteer/puppeteer/blob/main/docs/api.md...

The flags you need for headless extensions are --enable-features=UseOzonePlatform and --ozone-platform=headless, but tell puppeteer to run normally, not headless. That way it still uses full chrome but doesn't require a display server.

Re: Show HN: Browser extension that spoofs your location data to match your VPN

#64
post #2

Recently made this extension and interested in getting some feedback on it. Vytal can Spoof your timezone, locale, geolocation and user agent. This data can be used to track you or reveal your location. Most extensions that provide anti-fingerprinting features rely on content scripts to inject script tags into webpages. There are many limitations to script tag injections which you can read about here: https://palant.…

> It also makes the spoofing completely undetectable.

It's my understanding that the usage of the debugger is detectable by scripts running on the page. I've actually come across content websites that will refuse to activate their features (play video) if the debugger is active.

Similarly on Android some video streaming apps will refuse to load and play their content catalog if USB debugging is enabled.

Re: Show HN: Browser extension that spoofs your location data to match your VPN

#65

Earlier quoted context omitted.

Can you explain how Firefox (or Chrome) knows my location within 20m even if I use a VPN? Brave puts me where I think the VPN exit point is. For example: https://wikishootme.toolforge.org/

firefox has something called the mozilla location provider, which maps wifi access points to locations, which is similar to what google maps uses when you have gps disabled on mobile

Is there a way to turn that off? I never want my browser location services to work.

Re: Show HN: Browser extension that spoofs your location data to match your VPN

#66
post #57

Modern VPN usage means do not have understood the purpose of a VPN... Using a VPN as a proxy to circumvent geographical block is reasonable to a certain extent, but call them a privacy help, when you do not own the server is ridiculous...

VPNs help with privacy when the alternative is known to be malicious, as most US ISP connections are.

Re: Show HN: Browser extension that spoofs your location data to match your VPN

#67
post #2

Recently made this extension and interested in getting some feedback on it. Vytal can Spoof your timezone, locale, geolocation and user agent. This data can be used to track you or reveal your location. Most extensions that provide anti-fingerprinting features rely on content scripts to inject script tags into webpages. There are many limitations to script tag injections which you can read about here: https://palant.…

Can you explain how Firefox (or Chrome) knows my location within 20m even if I use a VPN? Brave puts me where I think the VPN exit point is. For example: https://wikishootme.toolforge.org/

You clicked "Allow" on the location request dialog, click deny and it won't do that.

Re: Show HN: Browser extension that spoofs your location data to match your VPN

#68
post #65

Earlier quoted context omitted.

firefox has something called the mozilla location provider, which maps wifi access points to locations, which is similar to what google maps uses when you have gps disabled on mobile

Is there a way to turn that off? I never want my browser location services to work.

Go to about:config () and set geo.enabled to false.

: if you're on Android, you'll need either an unstable version (Beta, Nightly) or a fork (Fennec from F-Droid) of Firefox to get access to that page because Mozilla decided users of the standard distribution can't be trusted with these settings.

Re: Show HN: Browser extension that spoofs your location data to match your VPN

#69
post #67

Earlier quoted context omitted.

Can you explain how Firefox (or Chrome) knows my location within 20m even if I use a VPN? Brave puts me where I think the VPN exit point is. For example: https://wikishootme.toolforge.org/

You clicked "Allow" on the location request dialog, click deny and it won't do that.

Of course, but how does it know? Where is the information from?

Re: Show HN: Browser extension that spoofs your location data to match your VPN

#70

So I've installed it. I'm tunneling to another country. Vytal says everything is correct for country B. However the site I'm testing posting to still detects that I'm outside their country. And I can't work out how :/

Very few websites/services actually use location to test geo-restriction (especially on browser. it's more common for mobile apps).

The most common reason why you VPN didn't work is that they simply block IP ranges of common used (proxy) servers. They also can check if the IP is "Native IP" (means it's actually registered in the country that the server is in.)

Post reply on HN