You can set toString.name
Re:Building a WebAuthn Click Farm
by sometimesshit on Wednesday June 16, 2021 @12:56PM
(#27530730)
You can of course, but how about these?
(function(){ var a=function(){};a.prototype.toString=navigator.credentials.create.toString.bind(navigator.credentials.create); return new a();})().toString == Function.prototype.toString
yields false where
navigator.credentials.create.toString == Function.prototype.toString
yields true
Of course you can "just" modify Function.prototype.toString as well. And so on.
Re:Building a WebAuthn Click Farm
by sometimesshit on Thursday June 17, 2021 @01:58AM
(#27536498)
You know what that can be detected as-well. I'm trying to prove my point that it's endless cat and mouse game.
toString.name
Which results "bound toString" wheres real one results "toString"