Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

news.ycombinator.com

Post reply on HN
Print view View original

161–170 of 204 posts

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#161

Post by sli »

iso1631 wrote: post #51
mh- wrote: post #26

Earlier quoted context omitted.

it's been some years, but I think it's still possible to detect the viewport resize without a corresponding window resize, so the 'docked' DevTools can be inferred distinct from a resizing of the window.

enable/disable a menu or toolbar then. Not sure what full screen would do either

That is exactly what ends up happening when you detect a viewport resize without a window resize and immediately assume it's the devtools. A user opens their bookmark sidebar and gets blacklisted, because the code simply assumes what's happened.

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#162

Post by sli »

Crosseye_Jack wrote: post #157
andrewstuart wrote: post #153

There as another site - I can't recall which - when you open developer tools it had a recruiting ad there and asked you to apply.

Many sites do it, but the one I always recall is reddit. EDIT: BBC news puts a rather fancy one in the console Facebook puts a warning about self xss in the console.

I remember discovering the BBC one because that's how I found out you can use CSS to style things in the console.

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#163

Post by opinionsonly01 »

amyjess wrote: post #59

This is worrying since I have accidently opened dev tools hundreds of times by clicking both mouse buttons when my cursor is near the bottom of the screen. I have a tic disorder (not Tourette's, because my tics are all nonverbal). One of my tics is that I mash both mouse buttons over empty space pretty frequently. I even go out of my way to keep my cursor positioned over empty space so I can mash the mouse buttons wh…

> I have a tic disorder (not Tourette's, because my tics are all nonverbal).

That's still Tourette's. Tourette's is described as an involuntary movement /or/ sound.

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#164

Post by deecewan »

iudqnolq wrote: post #82
djbusby wrote: post #32

When you open devtools, by default it will try to load source code maps for your JS and CSS. Very simple for a system to detect the request for the map file. If that's their vector turn off the autoloader and try from a clean IP.

Unfortunately console.log(foo) calls foo.toString() if and only if the console is open, and there is no way to disable this in Chrome or Firefox. Edit: You can redefine console.log to be a noop, but that's also detectable.

This is not true, at least in Chrome. I've tried with an object with the `toString` property set, and tried with a function with an updated prototype. In both cases, Chrome just...displays the object.

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#165

Post by guffins »

opinionsonly01 wrote: post #163
amyjess wrote: post #59

This is worrying since I have accidently opened dev tools hundreds of times by clicking both mouse buttons when my cursor is near the bottom of the screen. I have a tic disorder (not Tourette's, because my tics are all nonverbal). One of my tics is that I mash both mouse buttons over empty space pretty frequently. I even go out of my way to keep my cursor positioned over empty space so I can mash the mouse buttons wh…

> I have a tic disorder (not Tourette's, because my tics are all nonverbal). That's still Tourette's. Tourette's is described as an involuntary movement /or/ sound.

A diagnosis of Tourette’s requires multiple motor tics and at least one verbal tic.

EDIT: “vocal,” I should say, not “verbal”

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#166

Post by iudqnolq »

deecewan wrote: post #164
iudqnolq wrote: post #82

Earlier quoted context omitted.

Unfortunately console.log(foo) calls foo.toString() if and only if the console is open, and there is no way to disable this in Chrome or Firefox. Edit: You can redefine console.log to be a noop, but that's also detectable.

This is not true, at least in Chrome. I've tried with an object with the `toString` property set, and tried with a function with an updated prototype. In both cases, Chrome just...displays the object.

I just ran the poc I posted in this sibling comment[1] on Chrome Version 111.0.5563.65.

[1]: https://news.ycombinator.com/item?id=35240559

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#167

Post by danuker »

akira2501 wrote: post #93
lotsofpulp wrote: post #70

Earlier quoted context omitted.

Lots of websites make me disable content blockers on Safari too, or even not let me use Safari (maybe because of Apple’s Private Relay?). The part I do not understand is even websites that verify you via 2FA do this, so I assume their goal is to track you no matter what.

In the general case, I assume it's mostly just bad coding practices, and developers not testing how their site performs with an ad or cookie blocker active.

I don't buy that. Web devs know better than to suffer through ads. They block ads.

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#168

Post by danuker »

1123581321 wrote: post #34
tobr wrote: post #27

Earlier quoted context omitted.

Makes no sense. If you’re considering switching to a different provider, getting blocked makes it impossible to continue to use the service?

Yes it does. Say you're an agency sending email on behalf of several different organizations. If you export one to send through CampaignMonitor (usually list or domain approval related), the employee who pulled the HTML gets their hand slapped by the IP ban. It's less likely to happen next time with a different campaign or different client. I haven't actually experienced the IP ban but I've sent for the same organiza…

If my agency were hit with this, I'd plan switching ASAP.

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#170

Post by javajosh »

kxrm wrote: post #132
javajosh wrote: post #118

Earlier quoted context omitted.

The users of mailchimp don't need to make another mailchimp. They just need to handle their own email needs. That's a big difference. It's still not easy, and I would never be glib about it, especially since I've never run my own mail server on my own domain name before. But...several full-time jobs? How much mail do you need to send before postfix on a $5 VPS falls over? In terms of composing html mail that looks go…

> But...several full-time jobs? I think it depends on how important delivery is to your business. If your business team expects near 100% delivery and they want all the tracking features that give them insight into their promotional campaigns, then running email promotions on your own is quite a steep hill to climb. I run my own MTA on my own domain and only use it for verification purposes and I still have to fight…

>I know where I will point the my company

That's why "use another service" was first on the list of alternatives.

Post reply on HN