• 0 Posts
  • 21 Comments
Joined 2 years ago
cake
Cake day: July 15th, 2023

help-circle
  • That’s correct, it is just plain text and it can easily be spoofed. You should never perform an auth check of any kind with the user agent.

    In the above examples, it wouldn’t really matter if someone spoofed the header as there generally isn’t a benefit to the malicious agent.

    Where some sites get into trouble though is if they have an implicit auth check using user agents. An example could be a paywalled recipe site. They want the recipe to be indexed by Google. If I spoof my user agent to be Googlebot, I’ll get to view the recipe content they want indexed, bypassing the paywall.

    But, an example of a more reasonable use for checking user agent strings for bots might be regional redirects. If a new user comes to my site, maybe I want to redirect to a localized version at a different URL based on their country. However, I probably don’t want to do that if the agent is a bot, since the bot might be indexing a given URL from anywhere. If someone spoofed their user agent and they aren’t redirected, no big deal.


  • User agents are useful for checking if the request was made by a (legitimate self-identifying) bot, such as Googlebot.

    It could also be used in some specific scenarios where you control the client and want to easily identify your client traffic in request logs.

    Or maybe you offer a download on your site and you want to reorder your list to highlight the most likely correct binary for the platform in the user agent.

    There are plenty of reasonable uses for user agent that have nothing to do with feature detection.





  • elrik@lemmy.worldtoMemes@lemmy.mlWho needs Skynet
    link
    fedilink
    English
    arrow-up
    17
    ·
    8 months ago

    The relative number here might be more useful as long as it’s understood that Google already has significant emissions. It’s also sufficient to convey that they’re headed in the wrong direction relative to their goal of net zero. A number like 14.3 million tCO₂e isn’t as clear IMO.







  • I recently went through these exact pains trying to contribute to a project that exclusively ran through Discord and eventually had to give up when it was clear they would never enable issues in their GitHub repos for “reasons.”

    It was impossible to discover the history behind anything. Even current information was lost within days, having to rehash aspects that were already investigated and decided upon.






  • elrik@lemmy.worldtoMemes@sopuli.xyz13 Months
    link
    fedilink
    English
    arrow-up
    2
    ·
    1 year ago

    Do you understand how many computer programs will crash when you try to introduce a “month” consisting of a single day for this New Year holiday, or alternatively a day which does not have a corresponding month?

    Is your Netflix subscription going to renew in December, and then next in January, or is there a troll of a month sitting in between where you’re charged for a day?

    How many schedulers have rules like the second Tuesday of the month, or the last Friday of the month, and those days don’t even exist!

    Is this special holiday even assigned a weekday? If it is, do we repeat the same weekday twice to keep the 28 day months on the same weekday schedule?

    Madness! /S