* Changing user agent on eww @ 2014-01-18 13:10 Vibhav Pant 2014-01-18 14:16 ` Rüdiger Sonderfeld 0 siblings, 1 reply; 12+ messages in thread From: Vibhav Pant @ 2014-01-18 13:10 UTC (permalink / raw) To: emacs-devel@gnu.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Is it possible to change the user agent for fetching pages on eww (something like a variable or a command)? - -- Vibhav Pant vibhavp@gmail.com Sent from my Android device with K-9 Mail. Please excuse my brevity. -----BEGIN PGP SIGNATURE----- Version: APG v1.0.9 iQI9BAEBCAAnBQJS2n0qIBxWaWJoYXYgUGFudCA8dmliaGF2cEBnbWFpbC5jb20+ AAoJEO86onTybWtcxt0P/iHQo6QlKrIH3pQ8jm0wg36eEAHadIcTewc0JFQcc9q/ f94nhXtJVeoP8Zr2JfIZ2wftIbeLtJd5OEA+9aFrgFg7aGr4TMaBYRo4PcLi2HKS l9NS6y+U06KSBMmVraWL1OCxAYxHyLyMkb8YXMTfx4+cKlJKG6YYkWgfx4uWiJEG 43/Z/K/2Wqwnr0A5HFYhtbH5n2WuduOakaJGulNQFmJCkspFkW1JwoOeRcKkyJOJ LoVR2aNvo52CDExpavgt8H5zbBrgTpZCQyclbn0yzSz3ThGqB3SXFbtqUdkwNA0A LNogV7snNi2HC/KpHxNop3CD9lGAWfjeLKZ930i9JI1CXej62lNJLfDe2rAyXEaC AxvhqlQAP/9sQs6u8gYulryzIZ1ShLBfu/DP7kqcIITEUuueWwKChJ3waCGRNfNY xUrOQPilm/VtUoT0CtV3w8jSgP2xIdx5SGjiMwooR5k2s9Y7NNvn5n0GcB5QRvU/ oUE6fmKFDGWLCif0SumcKov9cznb+UiIvNriObbM3REYYHtYNbpczaKOTOCr3soC 8INgFai/fP50bgEwX2yvsKAcZxvOYujU+nFYpglIuNdKnjFcpeBPCr6VFUgEj1DB sB1R6QY1FgZh8baWauHt4poaMandcwHYRQGUL3atgQpxN1I0blKYP4BTWlAErrvf =Pxfv -----END PGP SIGNATURE----- ^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: Changing user agent on eww 2014-01-18 13:10 Changing user agent on eww Vibhav Pant @ 2014-01-18 14:16 ` Rüdiger Sonderfeld 2014-01-18 17:02 ` Vibhav Pant 2014-01-23 23:52 ` Changing user agent on eww [OT] Trent W. Buck 0 siblings, 2 replies; 12+ messages in thread From: Rüdiger Sonderfeld @ 2014-01-18 14:16 UTC (permalink / raw) To: emacs-devel; +Cc: Vibhav Pant On Saturday 18 January 2014 18:40:02 Vibhav Pant wrote: > Is it possible to change the user agent for fetching pages on eww (something > like a variable or a command)? -- Kinda, eww uses url.el to fetch webpages. Url.el has no direct variable to set the User-agent. But if you set `url-privacy-level' to `paranoid' no User- agent is sent at all. The function `url-http-user-agent-string' is used to create the User-agent string. You should be able to override it, to send whatever User-agent string you prefer. Maybe we should add a variable for the user agent to make it easier to customize. Regards, Rüdiger ^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: Changing user agent on eww 2014-01-18 14:16 ` Rüdiger Sonderfeld @ 2014-01-18 17:02 ` Vibhav Pant 2014-01-23 23:52 ` Changing user agent on eww [OT] Trent W. Buck 1 sibling, 0 replies; 12+ messages in thread From: Vibhav Pant @ 2014-01-18 17:02 UTC (permalink / raw) To: Rüdiger Sonderfeld; +Cc: emacs-devel -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Rüdiger Sonderfeld writes: > The function `url-http-user-agent-string' is used to > create the User-agent string. You should be able to override it, to send > whatever User-agent string you prefer. Maybe we should add a variable for the > user agent to make it easier to customize. I had a look at the function url-http-create-request. The user-agent string is set by simply calling url-http-user-agent-string, which in turn concats the "User Agent: URL/" and the URL package version. This could be customised by adding a user-defined variable (string) url-(custom-)user-agent-string, which the user-agent-string could return. This could be nil by default, in which case the vanila string would be returned. If this sounds good, I can create a patch this. - -- Vibhav Pant vibhavp@gmail.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBCgAGBQJS2rOSAAoJEO86onTybWtcSfQP/RF+6bpn/nG5+l7e0H1V8qQR 1iWwj90yj8mljnnnEGixnezCPvxudR/UIrXgDl0qzP7qUGF94LSzdI4MJGDmHhOV BYycEIbe2kw1LwzQWX38cSk6LRGaa8Ad5tJu82in8RIn8dU6WysfLEAYXfcDuen8 qa5I3CV1hX+IybrKIQ1wkPM7pQ4FhJW4EsFXTiN1SyIvYRQDit0DUSBuc8/1OVFN taGfQEa66JG5subZvtyESBPh/SXHEbbq89FG3S1ESMnOhg1d8VwS0TI7pT7iBXwT J5PwmyTdM45paa6EcXy1ZUI3ru62UuQXIDdVASRWCQuaqH/Xcgh8vlgR8rd3W8nl KkpGyV2O6BTJ1QEDtP2J4jmPzl4Szh/X1XLCljZKAuqENcusAaK3N5IDT0b2QQCy DE1kp7h57kp0NthxGDY0hnLmtMYRIt59boVZewg8nhIi/TUnfTQacBtsKb78zZFi JDSLmAoHHV0r8QMm5hbDskAwWTYYKt76dmnMODKecV4QEVYFL+C1DAvVj1Aur8sK +v7bjYc4/c0IPCPm+jBDfAvsq4b+NBc7BLDyyHReppOXjmnaEfyHFEyjm40zSbuS kLFqfzG6dO6By8IDZVDllycejqFwrcmsW7yrJ72vnP8lQZwCT+k84E2yexTd6DzR yP5ffQXBBZwXnvNlMmeu =Ewxz -----END PGP SIGNATURE----- ^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: Changing user agent on eww [OT] 2014-01-18 14:16 ` Rüdiger Sonderfeld 2014-01-18 17:02 ` Vibhav Pant @ 2014-01-23 23:52 ` Trent W. Buck 2014-01-24 1:50 ` Stefan Monnier 1 sibling, 1 reply; 12+ messages in thread From: Trent W. Buck @ 2014-01-23 23:52 UTC (permalink / raw) To: emacs-devel Rüdiger Sonderfeld <ruediger@c-plusplus.de> writes: > On Saturday 18 January 2014 18:40:02 Vibhav Pant wrote: >> Is it possible to change the user agent for fetching pages on eww (something >> like a variable or a command)? -- > > Kinda, eww uses url.el to fetch webpages. Url.el has no direct > variable to set the User-agent. But if you set `url-privacy-level' to > `paranoid' no User- agent is sent at all. I used to do that, until Wikipedia (and her sister projects) started returning an empty page if UA wasn't set, on the theory that you must be a really inept leecher -- so inept you didn't start with wget or curl. Hmm... I wonder if https://panopticlick.eff.org/ rates "no UA" as being *more* identifiable than spoofing it to something commonplace? :-) ^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: Changing user agent on eww [OT] 2014-01-23 23:52 ` Changing user agent on eww [OT] Trent W. Buck @ 2014-01-24 1:50 ` Stefan Monnier 2014-01-24 4:27 ` chad 2014-01-24 14:55 ` Richard Stallman 0 siblings, 2 replies; 12+ messages in thread From: Stefan Monnier @ 2014-01-24 1:50 UTC (permalink / raw) To: Trent W. Buck; +Cc: emacs-devel > Hmm... I wonder if https://panopticlick.eff.org/ rates "no UA" as being > *more* identifiable than spoofing it to something commonplace? :-) BTW, I was recently thinking about this "http header fingerprinting" problem and was wondering if anybody has tried to randomize their header. More specifically, change part of the header for each request. An obvious option is to add a counter to the "user-agent", and to add a "blur" factor to the language options. E.g. my "en-us,fr-ch;q=0.8,es-ar;q=0.6,en;q=0.4,de;q=0.2" appears to be very rare, but if it keeps changing from en-us,fr-ch;q=0.80000234,es-ar;q=0.60000765,en;q=0.40000345,de;q=0.20000123 to en-us,fr-ch;q=0.80000983,es-ar;q=0.60000923,en;q=0.40000186,de;q=0.20000236 to ... then a naive fingerprinting will be fooled into thinking it's coming from a different user. Stefan ^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: Changing user agent on eww [OT] 2014-01-24 1:50 ` Stefan Monnier @ 2014-01-24 4:27 ` chad 2014-01-24 14:55 ` Richard Stallman 1 sibling, 0 replies; 12+ messages in thread From: chad @ 2014-01-24 4:27 UTC (permalink / raw) To: Stefan Monnier; +Cc: Trent W. Buck, EMACS development team [-- Attachment #1: Type: text/plain, Size: 1113 bytes --] On Thu, Jan 23, 2014 at 5:50 PM, Stefan Monnier <monnier@iro.umontreal.ca>wrote: > > Hmm... I wonder if https://panopticlick.eff.org/ rates "no UA" as being > > *more* identifiable than spoofing it to something commonplace? :-) > > BTW, I was recently thinking about this "http header fingerprinting" > problem and was wondering if anybody has tried to randomize > their header. > More specifically, change part of the header for each request. > An obvious option is to add a counter to the "user-agent", and to add > a "blur" factor to the language options. > > E.g. my "en-us,fr-ch;q=0.8,es-ar;q=0.6,en;q=0.4,de;q=0.2" appears to be > very > rare, but if it keeps changing from > > en-us,fr-ch;q=0.80000234,es-ar;q=0.60000765,en;q=0.40000345,de;q=0.20000123 > to > en-us,fr-ch;q=0.80000983,es-ar;q=0.60000923,en;q=0.40000186,de;q=0.20000236 > to ... > then a naive fingerprinting will be fooled into thinking it's coming > from a different user. > It's not a bad idea, but I wouldn't try it specifically with q-values, as they're likely discarded by the server before they get to the browser-id step. ~Chad [-- Attachment #2: Type: text/html, Size: 1664 bytes --] ^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: Changing user agent on eww [OT] 2014-01-24 1:50 ` Stefan Monnier 2014-01-24 4:27 ` chad @ 2014-01-24 14:55 ` Richard Stallman 2014-01-24 16:13 ` Stefan Monnier 1 sibling, 1 reply; 12+ messages in thread From: Richard Stallman @ 2014-01-24 14:55 UTC (permalink / raw) To: Stefan Monnier; +Cc: trentbuck, emacs-devel [[[ To any NSA and FBI agents reading my email: please consider ]]] [[[ whether defending the US Constitution against all enemies, ]]] [[[ foreign or domestic, requires you to follow Snowden's example. ]]] More specifically, change part of the header for each request. An obvious option is to add a counter to the "user-agent", and to add a "blur" factor to the language options. If you have the same IP address each time, they will know anyway that it is you. However, if you change the user agent every time the IP address changes, that will do more good. But you need to vary among user agent strings which are themselves fairly common. -- Dr Richard Stallman President, Free Software Foundation 51 Franklin St Boston MA 02110 USA www.fsf.org www.gnu.org Skype: No way! That's nonfree (freedom-denying) software. Use Ekiga or an ordinary phone call. ^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: Changing user agent on eww [OT] 2014-01-24 14:55 ` Richard Stallman @ 2014-01-24 16:13 ` Stefan Monnier 2014-01-25 13:27 ` Richard Stallman 0 siblings, 1 reply; 12+ messages in thread From: Stefan Monnier @ 2014-01-24 16:13 UTC (permalink / raw) To: Richard Stallman; +Cc: trentbuck, emacs-devel > If you have the same IP address each time, they will know anyway that > it is you. As soon as we switch to IPv6, that's true. But for now, I often share (at the same time) a single IPv4 address with various people. > However, if you change the user agent every time the IP address changes, > that will do more good. But you need to vary among user agent strings > which are themselves fairly common. The idea is to completely give up on the idea of "blending into the mass", since header-finger-printing lets them distinguish individuals among the mass anyway. So instead your user-agent string will be unique (instead of common), but you'll never reuse the same one. Stefan ^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: Changing user agent on eww [OT] 2014-01-24 16:13 ` Stefan Monnier @ 2014-01-25 13:27 ` Richard Stallman 2014-01-25 21:51 ` Stefan Monnier 2014-01-26 13:47 ` Simon Leinen 0 siblings, 2 replies; 12+ messages in thread From: Richard Stallman @ 2014-01-25 13:27 UTC (permalink / raw) To: Stefan Monnier; +Cc: trentbuck, emacs-devel [[[ To any NSA and FBI agents reading my email: please consider ]]] [[[ whether defending the US Constitution against all enemies, ]]] [[[ foreign or domestic, requires you to follow Snowden's example. ]]] As soon as we switch to IPv6, that's true. We will need to change our IPv6 addresses, not stick with the same one. But for now, I often share (at the same time) a single IPv4 address with various people. In the same computer? In different computers? The idea is to completely give up on the idea of "blending into the mass", since header-finger-printing lets them distinguish individuals among the mass anyway. So instead your user-agent string will be unique (instead of common), but you'll never reuse the same one. I am not convinced. If they can tell it's always you, from your IP, the fact that your header data changes in a specific would only identify which browser you use. To use a header string that blends in is the only way. -- Dr Richard Stallman President, Free Software Foundation 51 Franklin St Boston MA 02110 USA www.fsf.org www.gnu.org Skype: No way! That's nonfree (freedom-denying) software. Use Ekiga or an ordinary phone call. ^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: Changing user agent on eww [OT] 2014-01-25 13:27 ` Richard Stallman @ 2014-01-25 21:51 ` Stefan Monnier 2014-01-26 13:47 ` Simon Leinen 1 sibling, 0 replies; 12+ messages in thread From: Stefan Monnier @ 2014-01-25 21:51 UTC (permalink / raw) To: Richard Stallman; +Cc: trentbuck, emacs-devel > But for now, I often share > (at the same time) a single IPv4 address with various people. > In the same computer? In different computers? Different computers, all behind a NAT router. Stefan ^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: Changing user agent on eww [OT] 2014-01-25 13:27 ` Richard Stallman 2014-01-25 21:51 ` Stefan Monnier @ 2014-01-26 13:47 ` Simon Leinen 2014-01-26 14:35 ` Yuri Khan 1 sibling, 1 reply; 12+ messages in thread From: Simon Leinen @ 2014-01-26 13:47 UTC (permalink / raw) To: rms; +Cc: trentbuck, Stefan Monnier, emacs-devel > We will need to change our IPv6 addresses, not stick with the same one. FYI, changing the source IPv6 address for outgoing connections is foreseen as a host-level privacy mechanism, see RFC 4941. A typical OS implementation is to change the address roughly every 24 hours. I think this has been the default on Windows for several years; it can also be enabled on GNU/Linux and Mac OS X, but I'm not sure it's the default. So at least a basic level of address-changing can be achieved relatively easily using today's OSes. -- Simon. ^ permalink raw reply [flat|nested] 12+ messages in thread
* Re: Changing user agent on eww [OT] 2014-01-26 13:47 ` Simon Leinen @ 2014-01-26 14:35 ` Yuri Khan 0 siblings, 0 replies; 12+ messages in thread From: Yuri Khan @ 2014-01-26 14:35 UTC (permalink / raw) To: Simon Leinen; +Cc: trentbuck, Emacs developers, rms, Stefan Monnier On Sun, Jan 26, 2014 at 8:47 PM, Simon Leinen <simon.leinen@gmail.com> wrote: >> We will need to change our IPv6 addresses, not stick with the same one. > > FYI, changing the source IPv6 address for outgoing connections is > foreseen as a host-level privacy mechanism, see RFC 4941. On the other hand, the end user can only change their IPv6 address within the range allocated to them. An individual user is likely to have a /48 network. Sites will most probably drop the lower 80 bits when tracking users. ^ permalink raw reply [flat|nested] 12+ messages in thread
end of thread, other threads:[~2014-01-26 14:35 UTC | newest] Thread overview: 12+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2014-01-18 13:10 Changing user agent on eww Vibhav Pant 2014-01-18 14:16 ` Rüdiger Sonderfeld 2014-01-18 17:02 ` Vibhav Pant 2014-01-23 23:52 ` Changing user agent on eww [OT] Trent W. Buck 2014-01-24 1:50 ` Stefan Monnier 2014-01-24 4:27 ` chad 2014-01-24 14:55 ` Richard Stallman 2014-01-24 16:13 ` Stefan Monnier 2014-01-25 13:27 ` Richard Stallman 2014-01-25 21:51 ` Stefan Monnier 2014-01-26 13:47 ` Simon Leinen 2014-01-26 14:35 ` Yuri Khan
Code repositories for project(s) associated with this public inbox https://git.savannah.gnu.org/cgit/emacs.git This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox; as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).