Live data from Hacker News

Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

news.ycombinator.com

1–10 of 204 posts

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#3
Are you seeing any network requests or data transmitted over open websockets to confirm this is actually the case?

I get it that people like to complain about stuff on HN (I recently had a thread too) but there needs to be evidence for people to go off of.

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#6

Are you seeing any network requests or data transmitted over open websockets to confirm this is actually the case? I get it that people like to complain about stuff on HN (I recently had a thread too) but there needs to be evidence for people to go off of.

Open the inspector, reload the page and you'll see:

"Request Blocked

We blocked your request because the IP address you’re using looks suspicious. This issue will usually resolve itself after a short period of time, and you can try your request again. You can also try using a different IP address to see if that resolves the issue.

If you need additional help, you can try one of these support options.

Reference Number: #####"

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#9
It's pretty common as an account hijacking vector, right?

Hackers tell non-techies to paste things into the console, which can then share cookies or access tokens with the attacker.

Obviously the browser is "owned" by the client, so a sufficiently motivated techie could bypass this any number of ways. But it prevents some number of non-techies from security issues.

Re: Tell HN: MailChimp blacklists your IP if you open the browser's dev tools

#10
post #6

Are you seeing any network requests or data transmitted over open websockets to confirm this is actually the case? I get it that people like to complain about stuff on HN (I recently had a thread too) but there needs to be evidence for people to go off of.

Open the inspector, reload the page and you'll see: "Request Blocked We blocked your request because the IP address you’re using looks suspicious. This issue will usually resolve itself after a short period of time, and you can try your request again. You can also try using a different IP address to see if that resolves the issue. If you need additional help, you can try one of these support options. Reference Number…

Thank you for the description. I assume they're using a bot management script which is set to block requests if devtools is open. For such websites, opening devtools in a separate window should work.

Some websites will try to throw you into a loop of debugger statements if they detect devtools being opened, which is harder to work around, but it doesn't seem to be the case here.

Post reply on HN