All I'm seeing is very sophisticated anti-botting code (the irony is not lost on me). There's nothing particularly novel here with respect to fingerprinting, as far as I can tell. And even so, you already (should) implicitly understand that any AI application frontend is going to fingerprint the shit out of you because habit data is 24k gold in the late-stage capitalism endgame we're all living in.
this post was submitted on 29 Mar 2026
60 points (94.1% liked)
Technology
83185 readers
3400 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
It's awesome that people are reverse-engineering this garbage but honestly who the fuck is using these evil companies software expecting it to not be evil.
Use an open-weights model in open-source software if you have to, fuck these idiots.
Every ChatGPT message triggers a Cloudflare Turnstile program that runs silently in your browser. I decrypted 377 of these programs from network traffic and found something that goes beyond standard browser fingerprinting.
The program checks 55 properties spanning three layers: your browser (GPU, screen, fonts), the Cloudflare network (your city, your IP, your region from edge headers), and the ChatGPT React application itself (__reactRouterContext, loaderData, clientBootstrap). Turnstile doesn't just verify that you're running a real browser. It verifies that you're running a real browser that has fully booted a specific React application.
A bot that spoofs browser fingerprints but doesn't render the actual ChatGPT SPA will fail.
Raise your hand if you use this POS.
Seriously, ChatGPT is such garbage.