Show HN: Curl modified to impersonate Firefox and mimic its TLS handshake
1–10 of 62 posts
Re: Show HN: Curl modified to impersonate Firefox and mimic its TLS handshake
#2Very cool! Thanks for sharing - it’s always nice to learn about fingerprinting tricks and workarounds, from both a privacy and a “don’t unintentionally look like a bot” perspective.
What inspired the project?
Re: Show HN: Curl modified to impersonate Firefox and mimic its TLS handshake
#3[deleted]
Re: Show HN: Curl modified to impersonate Firefox and mimic its TLS handshake
#4>impersonate Firefox 95
you should really be impersonating an ESR version (eg. 91). Versions from the release channel is updated every month or so, and everyone has autoupdate enabled. Therefore unless you keep it up to date, your fingerprint is going to stick out like a sore thumb in a few months. On the other hand, ESR sticks to one version and shouldn't change significantly during its one year lifetime. It's still going to stick out to some extent (most people don't use ESR), but at least you have some enterprises who use ESR to blend into.
Re: Show HN: Curl modified to impersonate Firefox and mimic its TLS handshake
#5This might also be an interesting read for those curious about TLS fingerprinting: https://news.ycombinator.com/item?id=29472624
Re: Show HN: Curl modified to impersonate Firefox and mimic its TLS handshake
#6Cool, can't wait for anti-bot protection to start rejecting me because I use firefox.
Re: Show HN: Curl modified to impersonate Firefox and mimic its TLS handshake
#7Cool, can't wait for anti-bot protection to start rejecting me because I use firefox.
[deleted]
Re: Show HN: Curl modified to impersonate Firefox and mimic its TLS handshake
#8Very cool. I would have used Puppeteer/Playwright in a similar scenario, but thanks for sharing the bot detection trick they employ.
Re: Show HN: Curl modified to impersonate Firefox and mimic its TLS handshake
#9Very cool! Thanks for sharing - it’s always nice to learn about fingerprinting tricks and workarounds, from both a privacy and a “don’t unintentionally look like a bot” perspective. What inspired the project?
Motivation is in the blog post: https://lwthiker.com/reversing/2022/02/17/curl-impersonate-f...
Re: Show HN: Curl modified to impersonate Firefox and mimic its TLS handshake
#10Handy. Is the TCP handshake, or other details about socket behavior, ever get used for assessing the remote process, and in turn libraries written to mimic known patterns?