Show HN: Fingerprinting browser-impersonating bots w/o JavaScript (open spec)

2•rozetyp•1h ago

I've published an open specification for a detection method I'm calling RQ4 (Request Context Fingerprinting). It analyzes whether HTTP request headers are logically consistent with real browser behavior - not just what headers are present, but whether they make sense together given the request context.

Comments

jjgreen•31m ago

This looks interesting, it's a pity that the example site, https://rq4.dev/, "No JavaScript fingerprinting needed", fails without JavaScript (yes I get it, JS not needed but can be implemented in JS, but still, incongruous).

rozetyp•23m ago

Good catch - fixed. The page now renders the RQ4 fingerprint server-side on the initial GET request. No JavaScript needed to see your result

Playing in the Mac App Sandbox

Why the US Navy Won't Blast the Iranians and 'Open' Strait of Hormuz

Semlib: Semantic Data Processing

I built an O(1) physics engine to stop LLM hallucinations in construction

"An Endless Stream of AI Slop"

Cursor rules that prevent AI from hallucinating bad Next.js code

Positron Flux: from DORA dashboards to explaining what changed

Engineering Blog Posts from Top Tech Companies

Prompt intensity threshold effect on AI-generated invention quality (preprint)

Causality optional? Testing the "indefinite causal order" superposition

The Horrors That Could Lie Ahead If Vaccines Vanish

Does RAG Help AI Coding Tools?

What Happened to Procomm Plus

HN: AI-native investing app that builds and adapts thematic portfolios to you

The Racket Programming Language

Golang Constmap by Daniel Lemire

What are the best resources to learn about Harness Engineering?

After 16 years and $8B, the military's new GPS software still doesn't work

Claude Code's source code has been leaked via a map file in their NPM registry

LibreTranslate: Free and Open Source Machine Translation API

David Foster Wallace and the problem of loneliness [video]

£5M Funding for supply chain security innovation in UK

Tell HN: DeepL Moving Data to AWS

The First Bullshit

Monitor Claude Code Usage with Grafana

Databricks Compromised by TeamPCP

Show HN: Stochos – Keyboard driven mouse control

Fast and Gorgeous Erosion Filter

Tell HN: If your agent can create a PR, it can merge it too

The Reed and Pickup – The early internet was a feeling