Chrome's hidden X-Browser-Validation header reverse engineered

Comments (3)

cebert · 1d ago

I have to imagine Google added these headers to make it easier for them to identify agentic requests vs human requests. What angers me is that this is yet another signal that can be used to uniquely fingerprint users.

dsekz · 1d ago

Dug into chrome.dll and figured out how the x-browser-validation header is generated. Full write up and PoC code here: https://github.com/dsekz/chrome-x-browser-validation-header

Why do you think Chrome bothers with this extra headers. Anti-spoofing, bot detection, integrity or something else?

twapi · 1d ago

Seems like they are using these headers only for google.com requests.

Ask HN: To what extend have you stopped or limited your use of AI?

Ask HN: How did Soham Parekh get so many jobs?

Tell HN: uBlock Origin on Chrome is finally gone

Ask HN: What do you do with your list of articles links?

Should LLMs ask "Is this real or fiction?" before replying to suicidal thoughts?

Co-founder exiting after pivot – what's a fair exit package?

Tell HN: I Lost Joy of Programming

Ask HN: How to Create Data Flow Diagrams?

Ask HN: Good non tech companies to work at

Ask HN: What techniques do you use to remember complex concepts and theories?

Helpful function to find memory leaks in JavaScript

The computational cost of corporate rebranding

Ask HN: Bug Bounty Dilemma – Take the $$ and Sign an NDA or Go Public?

Fuel switches cut off before Air India crash that killed 260

Ask HN: People who work different timezones than your company. How sched?

Ask HN: How can I invest in Solar Power?

Ask HN: Worth leaving position over push to adopt vibe coding?

I built a AI transcription app because my girlfriend needed one for uni

Ask HN: Does your on-call rotation suck? Can I join it?

Google fails to dismiss wiretapping claims on SJ, settles with app users

Ask HN: What's the verdict on GPT wrapper companies these days?

Ask HN: Any resources for finding non-smart appliances?

Ask HN: Advice for Starting a Hacker Space?

Ask HN: What are some cool or underrated tech companies based in Australia?

Ask HN: New RevOps guy wants to switch us from M365 to GSuite+Slack

Ask HN: What's Your Experience with Vibe Coding?

What's your experience using Lynx (mobile framework)?

Ask HN: What inspires you to persevere through adversity?

Chrome's hidden X-Browser-Validation header reverse engineered

Comments (3)