Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

news.ycombinator.com

Post reply on HN
Print view View original

91–100 of 204 posts

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#91

Post by millzlane »

barbs wrote: post #88
amyjess wrote: post #59

This is worrying since I have accidently opened dev tools hundreds of times by clicking both mouse buttons when my cursor is near the bottom of the screen. I have a tic disorder (not Tourette's, because my tics are all nonverbal). One of my tics is that I mash both mouse buttons over empty space pretty frequently. I even go out of my way to keep my cursor positioned over empty space so I can mash the mouse buttons wh…

I wonder if there's a plugin that could remove the context menu entry.

May not need one for firefox. Disable devtools.inspector.enabled in about:config.

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#93

Post by akira2501 »

lotsofpulp wrote: post #70
aendruk wrote: post #49

Reminds me of my experiences with UnitedHealthcare’s website. If I try to log in with Firefox + uBO I get mysterious permissions errors and “something went wrong” messages for the next few hours, even after switching browsers. Use Chromium from the beginning though and it’s smooth sailing. And of course their “tech” support is beyond useless about this.

Lots of websites make me disable content blockers on Safari too, or even not let me use Safari (maybe because of Apple’s Private Relay?). The part I do not understand is even websites that verify you via 2FA do this, so I assume their goal is to track you no matter what.

In the general case, I assume it's mostly just bad coding practices, and developers not testing how their site performs with an ad or cookie blocker active.

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#94

Post by eternityforest »

amyjess wrote: post #59

This is worrying since I have accidently opened dev tools hundreds of times by clicking both mouse buttons when my cursor is near the bottom of the screen. I have a tic disorder (not Tourette's, because my tics are all nonverbal). One of my tics is that I mash both mouse buttons over empty space pretty frequently. I even go out of my way to keep my cursor positioned over empty space so I can mash the mouse buttons wh…

This is why I despise gestural focused computing. Of all the features in any software, I think my least favorite is pull-to-refresh.

I suspect that would be easy to solve with smarter context menus that could ignore clicks likely to be accidental, since "Accidentally clicking the thing that just popped up before you even see it" is a common ish mistake worth implementing workarounds for.

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#95

Post by karaterobot »

eminent101 wrote: post #55

Isn't this spying on the user without user's consent? Me opening dev tools to view the source is a private activity. Is it okay to collect this kind of info and use it to block access? Are there no regulations against this?

I don't know how they're doing it, but I assume they're using data given to them by your browser, e.g. measuring the difference in height/width between the window and the viewport. Either that, or (as someone upthread suggested) they're reading a request your browser sends for mapping files, which would again be information you provided. If anything, I guess your browser is the one spying on you, by providing this information. But, realistically, I don't think it counts as spying either way. Hostile behavior on Mailchimp's part, yes. Dumb idea, yes.

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#99

Post by dylan604 »

pupppet wrote: post #71
Retr0id wrote: post #64

Earlier quoted context omitted.

Rather than it being dev tools itself, I think it's more likely that your injected tags got POSTed to an API endpoint (or similar) in unescaped format, and were categorised by a WAF as attempted XSS. It's common for WAFs to block you for this kind of thing, unfortunately. Still ridiculous, but not quite the same thing as being banned for opening dev tools (of course, I am also speculating here, I guess we'd need to h…

Actually just opening the dev tools triggers it. The blacklist seems to expire on its own so I went ahead and opened the dev tools and did nothing more, reloaded, blocked.

This is interesting as something I've never thought about. What signaling to the server does the browser do when devtools are opened, and I guess I have to ask why is it signaling to the server anything at all if it is?

Edit: i see that people have replied with answers to this further down the page

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#100

Post by 1970-01-01 »

https://mailchimp.com/about/security/#Protecting_Ourselves_A...

>Yes, you heard that correctly. We can secure ourselves like Fort Knox, but if your computer gets compromised and someone gets into your Mailchimp account, that's not good for either of us.

So mailchimp is SOC2, ISO, PCI, etc. and still gets worried about themselves if a user account is hacked.

Post reply on HN