Show HN: Fingerprinting browser-impersonating bots w/o JavaScript (open spec) (github.com)

6 points by rozetyp 3mo ago ↗ HN

I've published an open specification for a detection method I'm calling RQ4 (Request Context Fingerprinting). It analyzes whether HTTP request headers are logically consistent with real browser behavior - not just what headers are present, but whether they make sense together given the request context.

2 comments

[ 2.1 ms ] story [ 15.5 ms ] thread

jjgreen 3mo ago ↗

This looks interesting, it's a pity that the example site, https://rq4.dev/, "No JavaScript fingerprinting needed", fails without JavaScript (yes I get it, JS not needed but can be implemented in JS, but still, incongruous).

bitnoize 3mo ago ↗

Very interesting approach, thanks for sharing the research results.