News for hackers. Stuff that matters.
Re:Show HN: IPDetective – An API for IP bot detection by michaelmior on Tuesday September 13, 2022 @06:59PM (#32831227)
> I was thinking about adding a user-agent validation as well which could add another layer.

Presumably this service exists because bots try to avoid detection. I don't think UA validation would really help much and there are plenty of libraries already that do this.

Re:Show HN: IPDetective – An API for IP bot detection by itake on Tuesday September 13, 2022 @07:20PM (#32831383)
I didn't have issues per se with bots, but people trying to hide their location (think Nigerian user using a US-based VPN).

My trick was to get the device's timezone (which you don't need privacy permissions for on web or mobile). If it didn't match up with the ip address's country (or was in a banned country), then the account was banned.

Re:Show HN: IPDetective – An API for IP bot detection by AndrewCopeland on Tuesday September 13, 2022 @10:05PM (#32832463)
That is a real good idea, I really like it.
Re:Show HN: IPDetective – An API for IP bot detection by StayTrue on Wednesday September 14, 2022 @02:22AM (#32833879)
Browser anti-fingerprinting tools may alter the timezone. Mine does.
Re:Show HN: IPDetective – An API for IP bot detection by itake on Wednesday September 14, 2022 @03:45PM (#32842360)
My use-case is a mobile app. If you use those tools, you can't expect your web experience to be 'normal' :-/