Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

news.ycombinator.com

Post reply on HN
Print view View original

51–60 of 204 posts

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#51

Post by iso1631 »

mh- wrote: post #26
ars wrote: post #14

Earlier quoted context omitted.

Or have it open before you visit the page. Assuming they are detecting a resize. But if they really detect a resize, anyone who actually does resize their page will be blocked as well. Doing that seems a bit insane to me.

it's been some years, but I think it's still possible to detect the viewport resize without a corresponding window resize, so the 'docked' DevTools can be inferred distinct from a resizing of the window.

enable/disable a menu or toolbar then. Not sure what full screen would do either

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#53

Post by zamadatix »

arbol wrote: post #39
xnx wrote: post #33

Earlier quoted context omitted.

I believe there are multiple techniques. One of them is detecting an abrupt decrease in the viewport size.

So ctrl/CMD left/right to move your window to one half of the screen might block you!? XD

That would create far too many false positives. The common way is to detect if window.innerWidth changed by a minimum threshold but window.outerWidth did not. The limitations of the method are built in sidebars (such as on Edge with the sidebar and search sidebar) could trigger it as well if your minimum width is not wide enough while on the other hand if your minimum width is too wide you won't catch the dev tools opening. The method is also limited in that undocked dev tools will not register a triggering change.

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#54

Post by runlevel1 »

srejk wrote: post #23

If it's detecting resize/sidebar, does the new "Search Google for foo" sidebar window trigger it too?

Sure does!

Give it a try: https://sindresorhus.com/devtools-detect/

For some reason it failed to flag it for one of my attempts, but it consistently flagged it for all the others.

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#57

Post by tenplusfive »

runlevel1 wrote: post #47
Boltgolt wrote: post #35

Earlier quoted context omitted.

Disabling javascript breakpoints usually does the trick. Devtools detection is often done by having a `debugger;` statement somewhere and timing of it triggered

A lot of them dynamically generate new anonymous functions to get around this. Last I looked (~1 year ago I think) neither Chrome nor Firefox supported disabling the keyword completely. Do you know if that's changed?

On Firefox its in the Debugger Tab of the DevTools. On the top right you can deactivate all breakpoints (which includes the debugger statement).

There is a similar button on chrome, but I am not sure if that also applies to the debugger statement.

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#58

Post by djbusby »

zamadatix wrote: post #41
djbusby wrote: post #32

When you open devtools, by default it will try to load source code maps for your JS and CSS. Very simple for a system to detect the request for the map file. If that's their vector turn off the autoloader and try from a clean IP.

Interesting to note. In Firefox "show original sources" seems to be enabled by default but in Chrome at least the settings checkbox is labeled "Allow DevTools to load resources, such as source maps, from remote file paths. Disabled by default for security reasons" and unchecked for me. Haven't checked Safari to see what its behavior is.

Hmm, I'm on Chrome 111 on Linux and there are two boxes for loading maps - one for JS and one for CSS.

Could yours be a Windows Group Policy from $WORK?

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#59

Post by amyjess »

This is worrying since I have accidently opened dev tools hundreds of times by clicking both mouse buttons when my cursor is near the bottom of the screen.

I have a tic disorder (not Tourette's, because my tics are all nonverbal). One of my tics is that I mash both mouse buttons over empty space pretty frequently. I even go out of my way to keep my cursor positioned over empty space so I can mash the mouse buttons when I need to, and it's not uncommon for me to move the cursor while mashing the buttons. If the cursor is towards the bottom of the screen, that's pretty much guaranteed to open dev tools, since all it takes is a small motion of the cursor with the right-click menu open to hit the 'Inspect' option.

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#60

Post by AlchemistCamp »

eminent101 wrote: post #55

Isn't this spying on the user without user's consent? Me opening dev tools to view the source is a private activity. Is it okay to collect this kind of info and use it to block access? Are there no regulations against this?

If it were a "private activity", they wouldn't know you did it. If your computer sends requests to their server about it, then it's not really fair of you to expect them not to be aware of it.
Post reply on HN