Started to get this message when accessing Reddit. I use LibreWolf as a browser, which does indeed provide a more generic user agent to combat fingerprinting, but nothing out of the ordinary either (Mozilla/5.0 (Windows NT 10.0; rv:109.0) Gecko/20100101 Firefox/119.0). Anyone else experiencing this?
Edit: seems to have resolved itself. Thanks for confirming I wasn’t doing anything wrong. Let’s hope this isn’t some new algorithm to test if for insufficient fingerprinting so Reddit can kick ad-resistant users.
You must log in or register to comment.
Reddit is corrupt. It probably has something to do with them wanting to track you, and they can’t track you if you have a blank user agent.
Stay here at Lemmy where humans are respected as humans instead of data mines. Life is more dignified here at Lemmy.
Stay here at Lemmy where humans are respected as humans instead of data mines. Life is more dignified here at Lemmy.
I like the sentiment, but it is so incredibly naive to think that there aren’t crawlers scraping every ounce of data from Lemmy as possible. While Lemmy itself may not be collecting user data (depending on who is hosting your home instances of choice), other data that is valuable can still be collected, particularly for LLM AI.
If you can access it, the data scrapers have already crawled it.
Especially considering the post from a little while ago showing that admins of Lemmy instances can see what individual users are upvoting and downvoting. There’s nothing to stop a bad actor from setting up an instance and just harvesting data.
admins of Lemmy instances can see what individual users are upvoting and downvoting
Everyone can see that via kbin. for example, here’s your comment.
(not sure about downvotes… you might have to work a bit more to see those.)
What else can admin see?
T H E F U T U R E
That’s all well and good but now that the smoke cleared it’s a Twitter/Mastodon situation
Yeah. You’re not wrong.
Ever since I discovered I can have infinite conversations with infinite people about infinite topics, I am addicted to this format.
Now see how they exploit us 😡
I’m my golden socialist utopia online platforms would flourish freely with each new conversation.
I don’t quite understand what you mean. I know Twitter has kind of gone to hell, but beyond that I’m not sure.
I think his point was that most conversations happen where people are, and people are still more on Twitter than Mastodon by multiple orders of magnitude even after the “exodus”.
Stay here at Lemmy where humans are respected as humans
I saw a post a few days ago where one Lemmy user threatened to triangulate another user via IP, and then hurt them, because they said Linux doesn’t work out of the box as well as windows in their experience.
This was on a main instance. The person didn’t get in any trouble.
Did you report the comment?
Yikes. That’s concerning.
But Linux DOES require more effort to set up than Windows. Who in the hell would deny that?
Yo Pop OS is working ony Surface pro 3 perfectly basically, definitely better than Windows 10 was.
Removed by mod
You can also see plenty of misogyny, non stop verbal abuse, etc.
Lemmy is basically a playground for 13 year olds with development difficulties.
I’m just going to highlight these two sentences, and ask you think really really hard about why this comment has more downvotes than upvotes.
Truth hurts 13yo kids and they do what they can do best - hit dat downside button hard!
deleted by creator
Damn. Lemmy is hella doomed when a response to an insane thing someone else did on Lemmy is “who the fuck cares?”.
Didn’t realize you support people threatening others based on a comment about an operating system.
deleted by creator
Until its your problem, lol.
Never has to be if they are an alt of someone in control of the instance.
Eh, I kind of see where he’s coming from. My response to threats like that is “have fun storming the castle, fuckface.”
Downvoters must not be Princess Bride fans.
deleted by creator
For someone who doesn’t care, you sure can’t shut up about it.
Look how little I care guys. Hey you. Yeah, you. Did you know I don’t care? Totally don’t, 110%. Make sure to tell your friends how few fucks I give about all of this.
Why am I still talking about it? Clearly because I care so little. I learned early on that the more you talk about something, the less you care. My utter inability to stop talking about it is the supreme sign of my achieving the pinnacle of carelessness.
Just look at how Reddit uses fingerprinting, absolutely part of their tracking
and they can’t track you if you have a blank user agent.
They absolutely can. A blank user agent is a fingerprint like any other.
Removed by mod
Removed by mod
Removed by mod
Removed by mod
Wish they would at least be honest in their messaging, the whole “quirky” official reddit branding doesn’t really work anymore now that they’ve gone full corporate mode
Au contraire, it’s totally kawaii-dystopia-punk! :P
- please use something unique and descriptive
Best I can do is “Mozilla/5.0 (Windows NT 10.0; Win64; x64)”
Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/118.0 master race checking in
Now that Web Environment Integrity is shut down, Reddit decides to take matters into their own hands…
Removed by mod
I honestly don’t think it has anything to do with that. Scrapers going to scrape. They just want more metadata to identify you and know what propaganda to feed to you based on our online habits. The amount of techniques to identify someone based on JS alone should stir a rebellion, but we just accept it. If you have JS enabled, I can tell you what OS you use, what kind of processor you have, info about your graphics card, monitor resolution, etc. I can even identify you based on how your computer renders graphics. Oh, you’ve disabled JS and opted out of us tracking you based on X, Y, Z… great, now we can identify you based on your privacy settings.
What is JS?
Javascript
If you’re on a website and you click a button and something happens other than going to a different page or downloading a file, it’s almost always because of JavaScript (JS)
It’s a programming language that’s built into most browsers that allows for interactive functionality. It’s implemented in a way that typically protects the security of the computer, because it doesn’t have access to the files on the computer or other sensitive things.
Because it can’t directly check a lot of things, browsers often provide a way for people writing websites to check what capabilities they can use.
This means there’s a way to ask "can I do 3d graphics using this particular feature?”.
The intent is so you can let your website handle computers that can’t do what you need, rather than just trying and crashing.Sufficiently determined people can ask for all of the various clues that are provided, and use that to make a pretty unique identifier for the computer, which they can then use to track you around the Internet.
Various ways of fixing this have been proposed, but they all fall short one way or another.
Either by making the web far less interactive than people have come to expect, making tracking easier but at least they’re not misusing the data, or requiring an unrealistic amount of reworking how the entire web works.
deleted by creator
Same here on firefox mobile just started 10 minutes ago
Im not tech certified so i just figured out its my privacy possum doing this user agent thing which i like
What’s a user agent?
Little descriptor your browser has to tell websites what it is and where it comes from
It also tells the website the OS you’re running, as well as the browser, and various version numbers of stuff.
One interesting experiment is to use a user agent changer to view a website, and watch how the website changes every time you load a new user agent.
Google will remove search options if you’re using Firefox (mobile?), for example. But if you change your user agent to say you have Chrome, even if you are actually using Firefox, those options magically come back and work. It’s almost as if that’s anti-competitive behavior or something…
It’s also how a lot of websites know whether or not to give you Windows executables or Mac executables, or Linux executables, etc.
Firefox with user agent as chrome
Firefox with user agent as firefox
Holy smokes, the whole graph is removed… and they moved up “Shopping”
Brilliant example. I think some of the search tools like date range or image color also get removed with the Firefox user agent, but I don’t quite remember.
It also tells the website the OS you’re running, as well as the browser, and various version numbers of stuff
While it’s true that many browsers choose to follow a convention that includes that info,
User-Agentis just a string, so something likefukuis a legitimate UAhttps://www.rfc-editor.org/rfc/rfc1945#section-10.15
curl -vA fuku example.com 2>&1 | grep -E '^[<>] (User|HTTP)'Really? Huh, TIL. Thanks.
Google also changes a bunch of features if you change the user agent to some really old or non existent browser versions.
I don’t think they are making Firefox worse on purpose. I think it’s just something they don’t bother to fix.
Before the paranoid think it’s invasive, it’s used mainly to tell the website what your browsers capabilities are, so that features work and render properly. And by “tell the website”, I mean they generally serve the same “code” to everyone, and your browser just uses different parts of it.
It’s not as big of a deal now, but browsers used to render things very differently and had unique style features. Safari is still a big offender of this.
The above Google search features probably means the developers being Google, probably just thoroughly tested the more niche features on Chrome. And probably at some point, other browsers like Safari shit the bed (common) because they used features that Safari didn’t support at the time, and decided to just disable them for Safari.
It’s also used to create a digital fingerprint so you can be tracked without downloading a cookie.
Uhh, I’m unaware of how that’s even possible. There is no uniquely identifiable information in the UA. Everyone keeping their browser and os up to date are going to fall into the same few buckets. Are you pulling that out of your ass, or do you actually know of a technique that abuses it?
It is one of dozens of things used to establish a unique fingerprint. Check this out, I bet you can be individually identified and tracked with nothing more than what your browser reveals, including the UA.
Reddit uses exactly this to enforce site bans so they can identify people that just change emails or even public ip addresses. It’s almost certainly used to create phantom profiles at hundreds of sites whether you make an account or not.
https://smartframe.io/blog/browser-fingerprinting-everything-you-need-to-know/
I think that they probably made it so their app looks nicer and want chrome to match, anyway then there’s apps that just block you if you’re not using chromium or derivatives, despite working on the browser you’re using. Ahem Ms-teams and another video conferencing software that I had to use.
Hello
Can confirm I have a problem with Reddit and I am empty inside.
Rel
tells a website what browser or app you’re using
RiF just kicked me out. I think reddit is trying to do another sweep to break unofficial apps/plug-ins/etc.
Patched boost still working can’t post as I’m temp banned for reporting spam
I’m temp banned for reporting spam
Funny how that works, isn’t it?
I got perma-banned for “mod abuse” for reporting too much misinformation.
The fuck are they doing over there
they do realise bullshit kills a platform
They do?
Well from an advertising point of view just look at Twitter loads of big advertisers pulling out due to the anout of shite on there now
It was still working for you until now? I uninstalled it several weeks ago because I couldn’t get anything. Kinda makes me want to reinstall it and try again.
My RIF hasn’t worked for months, but I think there is a way to patch it with Revanced? IDK, I haven’t tried it. I do miss the porn though.
There’s one called Stealth I got on recommendation from here. Can’t log in but NSFW subs are available and you can still build your own feed.
Sorry I guess it’s android only https://f-droid.org/en/packages/com.cosmos.unreddit/
deleted by creator
Patched Sync still working for me.
Couldn’t find any explanation on Google so I tried emailing them about this. I got back this lovely gem:
Reddit Support (Reddit Support) Nov 14, 2023, 15:29 PST
Hi there!
Thanks for contacting us! At this time, we are not currently accepting inquiries via email. If you need support with our API or have questions, please submit your request here.
Cheers, Your friends at Reddit
But VPN worked.
Happened to me yesterday (Windows 11, Chrome latest version.) A simple wipe of my browser files fixed it.
I don’t even know how to use an API, let alone write code more complex than a For or Do Until loop in VBA, which I literally learned on the job to automate a finance task I was picking up.
Either Spez is turning paranoid that everyone and their mother is leeching off his data, or this was a critical bug.
Spez is a morally bankrupt cuck anyway.
User agent blocking is typically done when they are trying to block bots or crawlers.
they’re trying to limit automated scrap or the like. avoid that domain as much as you can
Let’s hope this isn’t some new algorithm to test if for insufficient fingerprinting so Reddit can kick ad-resistant users.
Why hope that? That’s exactly what it is. If anything we should encourage shit like that so the site can crash and burn even more. They deserve nothing. It’s too bad many of the subreddit blackouts only lasted 48 hours, and even worse people gave up and went back to reddit.
Let’s hope they do something really crazy and start requiring ID for all users so more people will get fed up and leave.
oh no
anyway
Let’s hope this isn’t some new algorithm to test if for insufficient fingerprinting so Reddit can kick ad-resistant users.
Oh, it is. I assure you. Anything but lose ad revenue.
