42
top 11 comments
sorted by: hot top controversial new old
[-] Hirom@beehaw.org 10 points 2 months ago

By spoofing the fingerprint, developers can make their automated tools impersonate real users more convincingly, thereby bypassing bot detections.

Many OSS projects and personal web servers have bot detection because they would otherwise drown under (AI) scrappers and other bots traffic. Hosting or bandwidth cost is often unsustainable without bot protection.

If you don't want to kill these projects, honor robots.txt by default, use throttling, don't try to circumvent bot blocks. Look if there's a purpose built API available to bots. If they don't want to offert such API, go find something else to do.

[-] ghodawalaaman@programming.dev 3 points 2 months ago

well if a person decide to use this attack small OSS projects server then we are failed as humanity. I shared this article to fight against big tech surveillance if people use it to damage FOSS project I highly discourage that behavior.

[-] Hirom@beehaw.org 9 points 2 months ago* (last edited 2 months ago)

The article focuses on techniques that help bots spoof browsers, to make them impersonate a typical human visitor.

It's not obvious how this helps people protect themselves against surveillance while being online. Using python scripting is not a practical way to browse. But it's handy to write scrappers.

It's certainly useful to misbehaving bots that try to evade anti-bots protection.

[-] LytiaNP@lemmy.today 2 points 2 months ago

Most open source projects just hit everything with a PoW captcha instead of trying to guess if a user is real or not, so trying to spoof enough to look like a real user won't change all that much anymore.

[-] Hirom@beehaw.org 6 points 2 months ago* (last edited 2 months ago)

That's true. The reason is there's lots of bot traffic spoofing real users, sometimes even going through residential proxies.

When bots spoof users well, the last option for projects is use these PoW captcha that annoy everyone. Enshitification continues.

[-] rottenmummy@lemmy.ml 8 points 2 months ago

Really nice article

[-] belated_frog_pants@beehaw.org 8 points 2 months ago

That ai header image is a real turnoff to anything they have to say

[-] MonkderVierte@lemmy.zip 4 points 2 months ago* (last edited 2 months ago)

I removed the Firefox' version number and half the internet broke. I replaced the whole string with Dillo 3/2.0 and this fixed most sites that "don't work" without JS.

Well, this was before the anti-scraping all-captcha now.

[-] ghodawalaaman@programming.dev 4 points 2 months ago

things were simpler back then 🤧

[-] eldavi@lemmy.ml 4 points 2 months ago

i had the same thought; this shit is going to suck when i'm old and disconnected enough to not understand what's going on.

[-] FG_3479@lemmy.world 1 points 2 months ago

What works for me is to use Firefox with tracking protection set to strict (or Librewolf with resistFingerprinting disabled and WebGL enabled), then install Jshelter and set it like below:

  • Time precision: High
  • Locally generated images: Little lies
  • Locally generated audio: Little lies
  • Graphic card information: Little lies for maximum privay or disabled to minimise captchas/shadowbans WebAssembly speed-up: Enabled
  • Everything else disabled as Firefox/Librewolf takes care of them

Once you do that, FingerprintJS Pro (fingerprint.com) should give you a different ID every time you clear cookies and change the IP.

this post was submitted on 18 Mar 2026
42 points (95.7% liked)

Privacy

48775 readers
509 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 6 years ago
MODERATORS