CanvasBlocker icon indicating copy to clipboard operation
CanvasBlocker copied to clipboard

Excellent addon, Please add More details on Navigator API >Navigator settings

Open DGjone44 opened this issue 3 years ago • 13 comments

Hi KKapsner. I request you to add more settings to customize OS and User Agent properties on Navigator API > Navigator settings page.

  1. Please add sub option under WINDOWS 64 bit & 32 bit> 1. Windows 10 2. Windows 8 3. Windows 8.1 4. Windows 7
  2. Submenu to select OSX version.
  3. Same settings to select OS versions for other Operating Systems.
  4. Please add Mobile devices , IOS, Android etc.

Thank you.

DGjone44 avatar Jun 05 '21 01:06 DGjone44

Classic spoofing that used to correctly set values using .overide in about config Classic example of Overide settings

DGjone44 avatar Jun 05 '21 01:06 DGjone44

Canvasblocker is not setting a .overide value in about :config settings, So test is returning RED value

image

DGjone44 avatar Jun 05 '21 01:06 DGjone44

After I set corresponding value for general.useragent.override in about:config manually RED error is gone.

image

DGjone44 avatar Jun 05 '21 01:06 DGjone44

After I set corresponding value for general.appVersion.override in about:config manually RED error is gone. image

DGjone44 avatar Jun 05 '21 01:06 DGjone44

image

DGjone44 avatar Jun 05 '21 01:06 DGjone44

My request is that Canvasblocker should automatically set these values in about:config to avoid detection and non matching values of useragents and getting detected.

DGjone44 avatar Jun 05 '21 01:06 DGjone44

Thanks for the detailed informations.

I can add more details in the navigator settings if someone provides me with the correct values for the other devices/OSes. Unfortunately I do not have the devices to get these (and do not have the time to create VMs for all of them). It would be enough to copy the result of the navigator test page (without navigator protection enabled) and paste it here.

The browser settings are a little bit trickier as only a chosen set of settings can be set by a WebExtension. Is the other screenshot you showed from a WebExtension or is it a legacy addon?

kkapsner avatar Jun 05 '21 12:06 kkapsner

image

DGjone44 avatar Jun 05 '21 15:06 DGjone44

Thank you. I will try to collect Navigator details.

DGjone44 avatar Jun 05 '21 15:06 DGjone44

Thanks for the detailed informations.

I can add more details in the navigator settings if someone provides me with the correct values for the other devices/OSes. Unfortunately I do not have the devices to get these (and do not have the time to create VMs for all of them). It would be enough to copy the result of the navigator test page (without navigator protection enabled) and paste it here.

The browser settings are a little bit trickier as only a chosen set of settings can be set by a WebExtension. Is the other screenshot you showed from a WebExtension or is it a legacy addon?

Could you lookup if its easy to fetch details from here. This can be searched with provided criteria. https://myip.ms/browse/myip/1/countryID/USA/createtime/2020-01-01%2001%3A52%3A11/isBot/0

image

DGjone44 avatar Jun 05 '21 20:06 DGjone44

As suspected this is a legacy addon and the techiques used there cannot be applied to CB. I opened https://bugzilla.mozilla.org/show_bug.cgi?id=1714854 to enable CB to set these settings.

Unfortunately the userAgent alone is not sufficient enough - if the other properties do not match you can easily be detected to use a spoofer. I did not find the other information on this page so I still need help to incorporate more presets (you can still enter your own values as you wish).

kkapsner avatar Jun 06 '21 12:06 kkapsner

Question: Is there a way I can see what even is being sent to server, for example a signup page is sending Keyboard Key presses Individually. Firefox Developer tools shows limited information under network.

DGjone44 avatar Jun 07 '21 19:06 DGjone44

If you don't see it in the developer tools you might have a rough time. Maybe Wireshark can help - but it's tricky when https is in place.

PS: I guess it's a web socket if it does not show up.

kkapsner avatar Jun 08 '21 11:06 kkapsner