v1.19

[un-nf]

404 v1.19 – Website, WREQ, and JS refactor

Alongside the documentation page, 404 also has a new product page, complete with a live fingerprinting demo and blog.

This release reintegrates TLS functionality via wreq. This allows for more broad TLS profile telemetry (i.e. GREASE coverage). This deprecates the original aws-lc-sys/rustls approach. Rustls is still used for TLS termination and clienthello creating, but the logic, encryption, and HTTP connection is managed by WREQ.

WREQ does not have spoofing capabilities, so the library has only been used for TLS negotiation and HTTP connections (in-place of manual connection pooling). These changes were made in the interest of simplicity and security. While the profile logic is not 100% there, Firefox 149 profiles and chrome 146 profiles have shipped and fool many commercial fingerprinting services.

The JS has also been refactored to minimize breakage. Extensive notes coming soon.

---

What's Next

• 404 Desktop App: An easy to use, 2-click setup application.
• eBPF: More TCP/IP-level mutations and platform-specific hooks.
• VM Images: Work will begin on distributing dedicated, lightweight VM images for users who can't run the eBPF module natively.
• Continuous documentation, social outreach, and awareness raising.

License

AGPL-3.0

---

This discussion was created from the release v1.19.