The new headless Chrome browser fingerprint is way more realistic than the first/old version of headless Chrome. Depending on the sophistication of your detection engine, it’s going to make it easier for bot developers to bypass detection, particularly detection based on browser fingerprinting signals.
As written in Chromium’s code, "The new headless mode // is Chrome browser running without any visible UI". Thus, a lot of subtle differences that used to exist between the old headless Chrome and a genuine headful Chrome don’t exist anymore.
Attackers will need to apply more JavaScript patches to override or forge certain attributes in the fingerprint, making it harder to detect non-human behavior. The absence of certain values makes the fingerprint less readable, and contextual information is critical in bot detection.
Share with your friends and followers
Start blogging about your favorite technologies, reach more readers and earn rewards!
Join other developers and claim your FAUN account now!
Only registered users can post comments. Please, login or signup.