News for hackers. Stuff that matters.
Re:Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” i... by stavros on Wednesday March 27, 2019 @09:22PM (#19508205)
We don't need user agents for that. There's an easy way to tell whether a visitor wants a cleaner view of a page, without Javascript: Yes.
Re:Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” i... by mehrdadn on Wednesday March 27, 2019 @09:25PM (#19508227)
I said "mobile", not "cleaner". Sizes and aspect ratios are different on phones than PCs.
Re:Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” i... by dragonwriter on Thursday March 28, 2019 @03:39AM (#19510122)
> I said "mobile", not "cleaner". Sizes and aspect ratios are different on phones than PCs.

User agent doesn't tell you size or aspect ratio.

Even if you know I'm running Chrome on Android on a Galaxy Note 8, you don't know the size (physical or pixel) or aspect ratio of the viewport, because: (1) I may or may not be viewing in side by side windows, (2) the screen can be in any of three resolutions, (3) the screen can be portrait or landscape, (4) the browser may or may not be set to use the full space on the long dimension of the screen.

OTOH, CSS Media Queries answer these questions.

Re:Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” i... by devit on Wednesday March 27, 2019 @09:39PM (#19508314)
Not necessarily. Websites should use CSS media queries to work at all aspect ratios and sizes without needing server-side code or JavaScript.
Re:Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” i... by realusername on Wednesday March 27, 2019 @09:28PM (#19508245)
the could be accomplished just by having User-Agent: mobile, all the other data in the user-agent are useless for this purpose.
Re:Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” i... by jrochkind1 on Wednesday March 27, 2019 @09:53PM (#19508401)
There is presumably some way, at least hypothetically, to fix the mess that User-Agent has become. (Everybody is 'Mozilla' now! And yet somehow a unique snowflake 'Mozilla' that lets you be tracked...)

But it's not quite that. It's not that a device is "mobile" instead of "stationary" that matters. It's maybe that it's a touch screen. It's maybe that it's a small screen. (With an especially uneven aspect ratio?) Maybe that it's handheld. It's maybe the combination of all of those things. But it's not really that it's "mobile" exactly. And there are, and possibly will be increasing proportions of, devices that have some but not all of these qualities we package together in our brains as 'typical mobile'

Re:Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” i... by realusername on Wednesday March 27, 2019 @10:20PM (#19508575)
All of those small differences of mobile devices are better served by media queries I personally think. You could replace "mobile" in my example by "small-screen" if you prefer.
Re:Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” i... by jrochkind1 on Thursday March 28, 2019 @09:59AM (#19512223)
Agreed. Media queries need to be improved though. There are no good media queries to detect "touch screen" and/or "no keyboard or mouse/pointer, only touch screen", only JS hacks that attempt it. This can matter. But yes, improving media query (or input method query?) APIs for both CSS and JS is, I agree, the correct solution to User-Agent madness. It's just not entirely straightforward or obvious or easy, and as always getting all browsers on the same page is an issue.
Re:Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” i... by mehrdadn on Wednesday March 27, 2019 @09:36PM (#19508292)
Well at least we acknowledged there's some utility.

Now consider that mobile devices are different as well..

Re:Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” i... by realusername on Wednesday March 27, 2019 @10:19PM (#19508565)
The current user agent does not give you much insight about what type of mobile device you have anyway, especially on Android.
Re:Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” i... by rkeene2 on Thursday March 28, 2019 @12:17AM (#19509203)
I use Firefox for Android on ChromeOS -- it produces interesting results.
Re:Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” i... by acheron on Wednesday March 27, 2019 @10:10PM (#19508509)
I have been having a shitty day and your comments in this article have honestly cheered me up a bit. Thank you!
Re:Cisco Fixes RV320/RV325 Vulnerability by Banning “curl” i... by StavrosK on Thursday March 28, 2019 @06:18AM (#19510804)
<3