Show HN: Browser extension that spoofs your location data to match your VPN

Post by _gyhb » Sun, Jun 12, 2022, 3:03 PM UTC

VWWHFSfQ wrote: post #64

_gyhb wrote: post #2

Recently made this extension and interested in getting some feedback on it. Vytal can Spoof your timezone, locale, geolocation and user agent. This data can be used to track you or reveal your location. Most extensions that provide anti-fingerprinting features rely on content scripts to inject script tags into webpages. There are many limitations to script tag injections which you can read about here: https://palant.…

> It also makes the spoofing completely undetectable. It's my understanding that the usage of the debugger is detectable by scripts running on the page. I've actually come across content websites that will refuse to activate their features (play video) if the debugger is active. Similarly on Android some video streaming apps will refuse to load and play their content catalog if USB debugging is enabled.

Post by 0des » Sun, Jun 12, 2022, 3:09 PM UTC

ajvs wrote: post #54

0des wrote: post #4

Earlier quoted context omitted.

I dont want to dislike firefox, but I am starting to find new reasons to resent it. It seems like every other week there is something new I'm finding out about that gives me pause before running updates. Every new 'feature' brings me further and further away from feeling like it's a browser I can trust to be just a browser. Something has to change. Pocket, Allo, still taking the google allowance, absolutely squanderi…

Allo? I think you confused this with something else if you're referring to Google Allo chat app.

Post by TedDoesntTalk » Sun, Jun 12, 2022, 3:12 PM UTC

saurik wrote: post #51

WithinReason wrote: post #48

Earlier quoted context omitted.

Can you explain how Firefox (or Chrome) knows my location within 20m even if I use a VPN? Brave puts me where I think the VPN exit point is. For example: https://wikishootme.toolforge.org/

Many (most?) VPN mechanisms don't entirely remove access to the other routes from apps that manually request them, so even if an app isn't able to use something akin to "location services" on your device it might still easily be able to get access to your other IP addresses by sending requests with sockets manually bound to specific interfaces, and even might choose to lower the priority of information learned using…

Post by TedDoesntTalk » Sun, Jun 12, 2022, 3:21 PM UTC

yosito wrote: post #25

alam2000 wrote: post #24

Does it spoof IP location?

That's what you need a VPN for

Post by hericium » Sun, Jun 12, 2022, 4:47 PM UTC

_gyhb wrote: post #71

VWWHFSfQ wrote: post #64

Earlier quoted context omitted.

> It also makes the spoofing completely undetectable. It's my understanding that the usage of the debugger is detectable by scripts running on the page. I've actually come across content websites that will refuse to activate their features (play video) if the debugger is active. Similarly on Android some video streaming apps will refuse to load and play their content catalog if USB debugging is enabled.

How can you detect it? Which websites refuse to activate their features if the debugger is active?