Re: user-agent spoofing info; working around site "requirements"

2020-04-11 Thread Anthony J. Bentley
Bryan Stenson writes: > Given: > - the bank has a HTTP interface > - the bank "requires" a specific browser/version > - the bank "requires" a specific set of closed-source operating systems > - OpenBSD ships recent browsers (chromium, firefox, etc) > > Problem: > When logging into said financial in

user-agent spoofing info; working around site "requirements"

2020-04-09 Thread Bryan Stenson
most of you already know this. tldr - inferring system requirements from the "user-agent" http header is useless/dangerous/silly, and your site/page stop (nothing new here...not sure why certain sites trust the user-provided data). This is not OpenBSD specific, but hopefully helpful for anyone wa