News for hackers. Stuff that matters.
Re:Starting January 4 Google will block sign-ins from embedd... by sheerun on Thursday November 19, 2020 @06:56PM (#25155879)
I guess the easiest solution is to use Firefox User Agent. It's obsolete header after all, isn't it?
Re:Starting January 4 Google will block sign-ins from embedd... by Wowfunhappy on Thursday November 19, 2020 @07:25PM (#25156068)
Funny thing about that. From the article:

> Google says: "The browser must identify itself clearly in the User-Agent. The browser must not try to impersonate another browser like Chrome or Firefox." We cannot comply with this because user agent spoofing is required for compatibility with various Google websites.

The author is concerned that Google will become increasingly aggressive about detecting alternate browsers, since it's clearly against the rules and they certainly have the capability.

Re:Starting January 4 Google will block sign-ins from embedd... by freshhawk on Thursday November 19, 2020 @07:52PM (#25156245)
I think a lot of people are forgetting that Google saying "the browser must not try to impersonate another browser" is a fairly funny part in itself.

Everyone remembers the User-Agent for Chrome starts with "Mozilla/5.0" right? It has always impersonated another browser for compatibility reasons. For so long that we take this for granted now.

Re:Starting January 4 Google will block sign-ins from embedd... by chrisweekly on Thursday November 19, 2020 @11:29PM (#25157316)
Yes, this! Here's my favorite send-up of the history of the User-Agent header (hard to believe it was already 12 years ago(!) when it first made me laugh)

https://webaim.org/blog/user-agent-string-history/comment-pa...

Re:Starting January 4 Google will block sign-ins from embedd... by kevin_thibedeau on Thursday November 19, 2020 @09:39PM (#25156860)
Make sure every alternate browser has accessibility specific features. Then smack them down with the ADA.
Re:Starting January 4 Google will block sign-ins from embedd... by Wowfunhappy on Thursday November 19, 2020 @09:52PM (#25156923)
Actually, when I was reading Google's blog post, this rule jumped out to me:

> The browser must not provide automation features. This includes scripts that automate keystrokes or clicks, especially to perform automatic sign-ins.

Automating keystrokes and/or clicks could absolutely be necessary for accessibility.

Re:Starting January 4 Google will block sign-ins from embedd... by nitrogen on Thursday November 19, 2020 @10:16PM (#25157027)
Doesn't Chrome itself provide automation features that are used by integration testing frameworks?
Re:Starting January 4 Google will block sign-ins from embedd... by thayne on Friday November 20, 2020 @12:14AM (#25157502)
yes it does.
Re:Starting January 4 Google will block sign-ins from embedd... by User23 on Thursday November 19, 2020 @11:12PM (#25157238)
Sounds like they're worried about fake ad clicks.
Re:Starting January 4 Google will block sign-ins from embedd... by Semaphor on Thursday November 19, 2020 @11:18PM (#25157268)
What does logging into google have to do with fake adclicks?
Re:Starting January 4 Google will block sign-ins from embedd... by londons_explore on Thursday November 19, 2020 @11:40PM (#25157350)
The ad clickspam system uses the logged in user (or lack of) as a strong signal.
Re:Starting January 4 Google will block sign-ins from embedd... by Semaphor on Thursday November 19, 2020 @11:55PM (#25157424)
Thanks.
Re:Starting January 4 Google will block sign-ins from embedd... by gruez on Thursday November 19, 2020 @06:59PM (#25155907)
...until they introduce browser fingerprinting to prevent such shenanigans. I'm sure they already have the infrastructure/code in place, given that they also run recaptcha.