Live data from Hacker News

Chrome phasing out support for User-Agent

infoq.com

191–200 of 329 posts

Re: Chrome phasing out support for User-Agent

#191
This is OK...I guess? I mean it's great to get rid of that overloaded carbuncle of user-agent, but that will just lead to a new round of interpreting "hints". shrug

Google is a serial abuser of user-agent already so this is somewhat ironic.

Re: Chrome phasing out support for User-Agent

#192
post #190

Earlier quoted context omitted.

Wait, Netflix et al use FairPlay in Safari on macOS? I'm surprised, because Fairplay is publicly crackable.

So is WideVine.

It is?! The only public way to decrypt that which I'm aware of stopped working 15 years ago.

Re: Chrome phasing out support for User-Agent

#193

Earlier quoted context omitted.

This is off topic but do you know why Edge is the only browser to support DRM for streaming? Or is that incorrect? I see lots of people who have to use edge on order to get 4k content from Netflix; presumably because of the DRM issues.

Other browsers support DRM too, but with different tradeoffs. Chrome uses Widevine, but one of Chrome's philosophies is that you should be able to wipe a Chrome install, reinstall Chrome, and have no trace that before/after are the same person. That means no leveraging machine-specific hardware details that would persist across installs. "Software-only DRM", essentially. Edge on Windows (and Safari on OSX) are able t…

Its absurd that paying customers get a worse experience than just using the piratebay.

Re: Chrome phasing out support for User-Agent

#194
post #36

The weird thing about this is that the only company I've seen doing problematic user-agent handling in recent years is Google themselves. They have released several products as Chrome-only, which then turned out to work fine in every other browser if they just pretended to be Chrome through the user agent. Same with their search pages, which on mobile were very bad in every non-Chrome browser purely based on user age…

Exactly. This is going to turn into a game of whack-a-mole whereby we need to load the latest firefox extension that tricks websites into thinking we're using Chrome.

Or we could build for Firefox. There's always that.

Re: Chrome phasing out support for User-Agent

#195
post #63

Earlier quoted context omitted.

I had been having an issue with Google Sheets and Firefox that the app decides to change row height randomly. On Firefox only. Obvious solution to which being...

> Obvious solution to which being... Installing an extension to spoof your user agent? Since we wouldn't want to reward Google being anti-competitive.

Or... quit using buggy app?

Re: Chrome phasing out support for User-Agent

#196
post #162
post #58

Earlier quoted context omitted.

> I don't really understand how this will result in any real difference in privacy or homogeneity of the web. It does a little: sites don't passively receive this information all the time, instead they have to actively ask for it. And browsers can say no, much like they can with blocking third party cookies. In any case I'm not sure privacy is the ultimate goal here: it's intended to replace the awful user agent snif…

Switching it from passive to active means you can count it towards https://github.com/bslassey/privacy-budget . Yes, sites can ask for all sorts of things, but if they ask for enough that they could plausibly be fingerprinting you then they start seeing their requests denied. (Disclosure: I work at Google, speaking only for myself)

Is the "privacy budget" an actual feature of chrome or just an idea? I've never heard of it until now.

Re: Chrome phasing out support for User-Agent

#198

Earlier quoted context omitted.

Other browsers support DRM too, but with different tradeoffs. Chrome uses Widevine, but one of Chrome's philosophies is that you should be able to wipe a Chrome install, reinstall Chrome, and have no trace that before/after are the same person. That means no leveraging machine-specific hardware details that would persist across installs. "Software-only DRM", essentially. Edge on Windows (and Safari on OSX) are able t…

Its absurd that paying customers get a worse experience than just using the piratebay.

Last time I used piratebay, I saw a lot of porn and malware/scam ads. I had to find and install a torrent client. Then I had to make sure I was downloading a movie that had enough seeders. And then I couldn't watch the movie until (and if) the download finished.

When I use netflix, I have a much better experience.

Re: Chrome phasing out support for User-Agent

#199

Earlier quoted context omitted.

Its absurd that paying customers get a worse experience than just using the piratebay.

Last time I used piratebay, I saw a lot of porn and malware/scam ads. I had to find and install a torrent client. Then I had to make sure I was downloading a movie that had enough seeders. And then I couldn't watch the movie until (and if) the download finished. When I use netflix, I have a much better experience.

You obviously haven't tried popcorntime.

Re: Chrome phasing out support for User-Agent

#200
post #171

Earlier quoted context omitted.

> I'm pretty sure that the webmasters responsible for this are using user agent string blocking as a naive attempt to block bots from scraping their site, but that assumes that the bots that they want to block actually send an accurate user agent string the first place. That is exactly what they are doing, and it works really well. We blocked user agents with lib in them at reddit for a long time. Any legit person bu…

> Any legit person building a legit bot would know to fake the agent string. What, that's totally backwards. Anyone using a bot to do things that might get blocked by publishers fakes the string, legit purposes should really show who / what they are.

It actually is encouraging people to have useful user agents. By default most people end up with a user agent that's something like "libcurl version foo.bar.baz", which isn't actually a description of who or what they are; given the prevalence of curl, it really just tells you that it's a program that uses http.
Post reply on HN