News for hackers. Stuff that matters.

A comment on Block YouTube Ads on AppleTV by Decrypting and Stripping Ads from Profobuf. Parent comment

Re:Block YouTube Ads on AppleTV by Decrypting and Stripping ... by rollcat on Sunday August 27, 2023 @09:34AM (#37282567)
> We consider an HTTPS connection to be intercepted when there is a mismatch between the expected client request signature corresponding to the browser identified by the User Agent, and the actual client request fingerprint of the request.

Sounds like something that would be "trivial" to defeat, by means of "emulating" other TLS implementations more closely?

[ Parent | on HN ]
Re:Block YouTube Ads on AppleTV by Decrypting and Stripping ... by homarp on Sunday August 27, 2023 @09:55AM (#37282758)
which is what https://github.com/lwthiker/curl-impersonate does: it's a special build of curl that can impersonate Chrome & Firefox
[ Parent | on HN ]
Re:Block YouTube Ads on AppleTV by Decrypting and Stripping ... by nwellinghoff on Sunday August 27, 2023 @12:38PM (#37284284)
Can this be used as a proxy to your real browser? Can you paint the whole picture/setup for a noob?
[ Parent | on HN ]
Re:Block YouTube Ads on AppleTV by Decrypting and Stripping ... by cbsmith on Sunday August 27, 2023 @01:54PM (#37285051)
Presumably so. You'd just need to compile the curl-impersonate for the appropriate browser you want to impersonate, and then link it in to a proxy that used libcurl for its https traffic.
[ Parent | on HN ]