Live data from Hacker News

Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

news.ycombinator.com

61–70 of 204 posts

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#61
post #49

Reminds me of my experiences with UnitedHealthcare’s website. If I try to log in with Firefox + uBO I get mysterious permissions errors and “something went wrong” messages for the next few hours, even after switching browsers. Use Chromium from the beginning though and it’s smooth sailing. And of course their “tech” support is beyond useless about this.

That website only works on Chrome for me, it doesn't let me login on Brave ... which is a flavor of Chromium, right?

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#62

How is this detected in js, if possible? Is there a dev tools open event or does it detect f keys and right click events?

One of the ways this is detected is by window resizing. You can see an example npm package that can detect devtools here: https://github.com/sindresorhus/devtools-detect

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#63
I have seen websites that leave a few "debugger" keywords in the code and then use timing code to detect if you have the dev tools open. that is, if it takes too long to get to a check point, as in a person had to click resume, you know the debugger is open. It is very crude method but I guess was the best they came up with.

On firefox the easy way to get around this is by disabling breakpoints, the harder way is a userscript.

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#64
post #17

I had to use their silly drag-and-drop email builder because I'm handing the email off to be edited by a non-dev. I dropped in a "Code" module so I could add some custom CSS but because a style tag generates no space, that module is no longer accessible via the UI as there's nothing to click on. So I thought oh brother I'll just inject a couple br tags via the Inspector and then poof, I'm in the doghouse.

Rather than it being dev tools itself, I think it's more likely that your injected
tags got POSTed to an API endpoint (or similar) in unescaped format, and were categorised by a WAF as attempted XSS. It's common for WAFs to block you for this kind of thing, unfortunately.

Still ridiculous, but not quite the same thing as being banned for opening dev tools (of course, I am also speculating here, I guess we'd need to hear from mailchimp to be sure).

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#65

That's an anticompetitive move. If you need to switch senders for some reason, the inspector is the only clean way to get an email's HTML into another ESP.

Could it be that MailChimp consider this move (copying their HTML template used with your e-mail content) to be copyright infringement ?

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#66

I used ChatGPT to get a refund from Mailchimp when their CKText editor failed to load on International Women's Day, preventing us from sending an email promotion that day. I opened the web inspector to show the library erroring when Mailchimp tried out a to load it, and also provided a screencast. I wasn't blocked, but I did receive a refund. So this must be a relatively new thing! If I were the OP, I would complain…

I don't understand why those strange people at hackernews downvoted you. I guess using ChatGPT makes them scared.

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#67
post #32

When you open devtools, by default it will try to load source code maps for your JS and CSS. Very simple for a system to detect the request for the map file. If that's their vector turn off the autoloader and try from a clean IP.

This is interesting as for a hackathon i was thinking of ways to identify this behavior too.

The source map requests was a more successful option. Also played around with "snap" resize but it was too agressive.

As for whatever the reason MailChimp would block your up is pretty ridiculous.

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#68

I used ChatGPT to get a refund from Mailchimp when their CKText editor failed to load on International Women's Day, preventing us from sending an email promotion that day. I opened the web inspector to show the library erroring when Mailchimp tried out a to load it, and also provided a screencast. I wasn't blocked, but I did receive a refund. So this must be a relatively new thing! If I were the OP, I would complain…

I don't understand why those strange people at hackernews downvoted you. I guess using ChatGPT makes them scared.

It's a nice story but missing some details that the sibling comment to yours requested.

I can haz prompt pls schappim?

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#69

I used ChatGPT to get a refund from Mailchimp when their CKText editor failed to load on International Women's Day, preventing us from sending an email promotion that day. I opened the web inspector to show the library erroring when Mailchimp tried out a to load it, and also provided a screencast. I wasn't blocked, but I did receive a refund. So this must be a relatively new thing! If I were the OP, I would complain…

I don't understand why those strange people at hackernews downvoted you. I guess using ChatGPT makes them scared.

He meant ChadGPT. I guess some people aren't ready for the New Jersey bro AI shakedown.

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#70
post #49

Reminds me of my experiences with UnitedHealthcare’s website. If I try to log in with Firefox + uBO I get mysterious permissions errors and “something went wrong” messages for the next few hours, even after switching browsers. Use Chromium from the beginning though and it’s smooth sailing. And of course their “tech” support is beyond useless about this.

Lots of websites make me disable content blockers on Safari too, or even not let me use Safari (maybe because of Apple’s Private Relay?).

The part I do not understand is even websites that verify you via 2FA do this, so I assume their goal is to track you no matter what.

Post reply on HN