News for hackers. Stuff that matters.
Re:Why not to whitelist operating system user agents by danachow on Monday November 15, 2021 @02:25AM (#29224743)
Can anyone confirm this?

I don’t have a FreeBSD machine handy right now but I just switched user agent to FreeBSD amd64 on a Linux machine with Chromium 95 and have no issue with the front page or logging into chase.com. I have rarely encountered issues using this Linux/X11 setup on chase.com for years.

Is it possible they are using an ancient browser and incorrectly assuming it’s the OS part of the user agent?

Re:Why not to whitelist operating system user agents by kristopolous on Monday November 15, 2021 @02:36AM (#29224805)
I use it almost every day. I'm thinking The user is using a weird user agent/browser and misdiagnosed the problem.

It looks like Firefox but there's just so many small browsers these days. Honestly I'd need to see the offending code. If it's user agent testing, those strings should still be readable even in a compressed js unless they run it through an obfuscator

Re:Why not to whitelist operating system user agents by hericium on Monday November 15, 2021 @04:43AM (#29225550)
> should be readable even in a compressed js unless they run it through an obfuscator

User-Agent may be determined on a webserver/proxy level and request redirected silently to a page with JS just showing the banner. It does not have to be based on JS checking anything.

Re:Why not to whitelist operating system user agents by kafkaIncarnate on Monday November 15, 2021 @02:41AM (#29224829)
The small browsers thing sounds about right. Check the link he posted about the email someone received on Reddit. It's posted like it's a screenshot from Mutt or some other terminal mail editor. Looks more like they are flexing their email terminal usage not just copy/pasting the message (png for text? come'on!).

Probably using qutebrowser or something else like that.

Re:Why not to whitelist operating system user agents by chessmango on Monday November 15, 2021 @04:35AM (#29225508)
Just from the Reddit post as well - doesn't feel overly user-hostile or deserving of the 'JP Morgan Chase Bank admitting to me they hate Linux and BSD desktops and actively block them' title anyway.

If there's active blocking based on OS (from replies in this thread, evidence seems to be slim) then that's not great, but this seems to be pretty one-sided so far.

Re:Why not to whitelist operating system user agents by kristopolous on Monday November 15, 2021 @02:47AM (#29224858)
platform.js 1.3.1 is in there (https://github.com/bestiejs/platform.js/)

I see this from the pretty-printed version

    function a() {
            return /Android|webOS|iPhone|iPad|iPod|BlackBerry|IEMobile|Opera Mini/i.test(navigator.userAgent) ? "Device" : "Desktop"
        }

So let's try to just say I'm say, Opera Mini, still no dice. I tried a bunhch of these to no avail. I don't know how the OP got this.
Re:Why not to whitelist operating system user agents by kafkaIncarnate on Monday November 15, 2021 @02:54AM (#29224898)
Well that kind of matches the message he received from the website. It looks like they are just trying to notify you that there is a Chase Mobile App available (which for the average phone user, would be 99.9999% better than using a browser). Personally I wouldn't use a phone for banking but some people don't have laptops/desktops.
Re:Why not to whitelist operating system user agents by tentacleuno on Monday November 15, 2021 @08:14PM (#29235365)
> Personally I wouldn't use a phone for banking

Using your bank's mobile webapp is very useful when they, for some god awful reason, decide to use SafetyNet.

Re:Why not to whitelist operating system user agents by swills on Monday November 15, 2021 @09:36AM (#29227861)
The article is 100% correct, I've experienced the exact same thing. For a while I thought it was blocking me due to uBlock or something, took me a while to figure out it was just the user agent.
Re:Why not to whitelist operating system user agents by kafkaIncarnate on Monday November 15, 2021 @02:35AM (#29224801)
I can confirm this is 100% false. Been using Linux to login to Chase for years, never had any problems (other than weird ad-blocker issues which are cross-platform). Just tested again just to confirm that I can log in just fine.

No User-Agent switcher required.

Re:Why not to whitelist operating system user agents by alias_neo on Monday November 15, 2021 @04:25AM (#29225433)
Small nit-pick, but OP isn't running Linux, they're running FreeBSD.

They too mention Linux so it's possible they aren't aware of the difference.

It's possible "Linux" is allowed, but not *nix/Unix?

Re:Why not to whitelist operating system user agents by swills on Monday November 15, 2021 @09:36AM (#29227868)
Quite likely.
Re:Why not to whitelist operating system user agents by malfist on Monday November 15, 2021 @09:36AM (#29227870)
Take a look at their evidence that chase "openly admits to hating linux and freebsd". It's a reddit post with 3 votes about a CS response saying not supporting linux doesn't constitute an ADA violation.

Everything in this article and it's supporting evidence is a stretch and should be evaluated very carefully.

Re:Why not to whitelist operating system user agents by hericium on Monday November 15, 2021 @04:44AM (#29225560)
May be OS with small userbase and less popular browser combo.
Re:Why not to whitelist operating system user agents by swills on Monday November 15, 2021 @09:36AM (#29227865)
I have seen the same thing, the article is correct.
Re:Why not to whitelist operating system user agents by evanfarrar on Monday November 15, 2021 @03:06AM (#29224950)
I’ve certainly been blocked by chase on linux with firefox, but I was only using their auto loans at the time. It was super annoying, because I first tried to get a payoff quote on the iOS app, then the mobile website, then on a linux laptop, before resigning and using my work Macbook. Perhaps other lines of business support linux better?
Re:Why not to whitelist operating system user agents by jo-m on Monday November 15, 2021 @04:02PM (#29232710)
I have been using chase.com on Ubuntu 18.04 and 20.04 with Firefox for years without any issues.