News for hackers. Stuff that matters.
Re:Why not to whitelist operating system user agents by jakub_g on Monday November 15, 2021 @07:01AM (#29226391)
For anyone who works at the company who does that: why you do it?

Is it to reduce amount of testing, and only have a few "blessed" browsers with guaranteed happy experience? Any other reasons?

Re:Why not to whitelist operating system user agents by tootie on Monday November 15, 2021 @08:56AM (#29227391)
I mean there's an excellent and obvious answer and that's cost benefit when it comes to QA. Anything transactional, banks in particular, want to be 100% sure that end user experiences are doing exactly what they're expected to at all times. No one is being served incorrect information or is improperly served terms or disclaimers that they can use a leverage in a lawsuit. The tech teams likely have an explicit support matrix of browsers to test against and anything not on the list is considered untested and unreliable. They can't legally indemnify themselves against defects.
Re:Why not to whitelist operating system user agents by jakub_g on Monday November 15, 2021 @11:44AM (#29229379)
Interesting point on lawsuits! I never thought this way (maybe because lawsuits sounds like a very American thing, and I'm in EU)
Re:Why not to whitelist operating system user agents by op00to on Monday November 15, 2021 @07:09AM (#29226445)
It’s not so much for happy experiences, as it is to place bounds on what the development team is asked to do.
Re:Why not to whitelist operating system user agents by graindcafe on Monday November 15, 2021 @07:34AM (#29226600)
They may have spotted a bot using this UA and deduces it's a pattern