Building a WebAuthn Click Farm

Re:Building a WebAuthn Click Farm by sometimesshit on Wednesday June 16, 2021 @12:56PM (#27530730)

You can of course, but how about these?

(function(){ var a=function(){};a.prototype.toString=navigator.credentials.create.toString.bind(navigator.credentials.create); return new a();})().toString == Function.prototype.toString

yields false where

navigator.credentials.create.toString == Function.prototype.toString

yields true

[ Parent | on HN ]

Re:Building a WebAuthn Click Farm by geocar on Wednesday June 16, 2021 @01:13PM (#27530928)

Of course you can "just" modify Function.prototype.toString as well. And so on.

[ Parent | on HN ]

Re:Building a WebAuthn Click Farm by sometimesshit on Thursday June 17, 2021 @01:58AM (#27536498)

You know what that can be detected as-well. I'm trying to prove my point that it's endless cat and mouse game.

[ Parent | on HN ]

Re:Building a WebAuthn Click Farm by geocar on Thursday June 17, 2021 @04:51AM (#27537474)

I think we're talking past each other then.

[ Parent | on HN ]