Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

detecting users with hola extension

I want to know if users are using hola better internet to browse my site. Hola! is an extension that uses a peer to peer network so users can appear to be browsing from different countries. I am worried however that some bots are using this plugin as a proxy. From what I read it does not send the X-FORWARDED-FOR header, and does not seem to announce itself on the navigator.plugins - verified with panopticlick. This seems like a huge security issue, as this plugin has 42 million users..

I see people using it to see netflix from other countries, I guess they would love to stop it too.

How do I detect users who are using this plugin?

--EDIT--

Also, see this - luminati.io - what seems to be the worlds largest botnet for hire... i cant see how they wont piss off google like this. But this does look like a great security risk to any site on the web.

like image 811
WeaselFox Avatar asked Mar 23 '15 10:03

WeaselFox


People also ask

How many devices on Hola VPN?

Can I use my account on multiple devices? Hola Premium subscription can be used up to 10 devices. Make sure to purchase your subscription here.

What is Hola browser?

Hola is a freemium web and mobile application which provides a form of VPN service to its users through a peer-to-peer network. It also uses peer-to-peer caching.

How much free time do you get with Hola?

In addition to Hola VPN Premium, there is Hola VPN Basic and Hola VPN Ultra. The Basic version is the free one, which only lets you use it for 30 minutes every hour and only allows 1 simultaneous device connection.


2 Answers

Looking at the source code of the plugin there is this:

function hola_ext_present(){
    // Only <html> is present at document_start time, use it as a
    // storage to communicate presence of extension to web page.
    document.documentElement.setAttribute('hola_ext_present', 'true');
}

so basically something like:

document.documentElement.getAttribute('hola_ext_present');

will tell you if it is present or not.

like image 67
peterpeterson Avatar answered Sep 27 '22 19:09

peterpeterson


I know this should be done on server side, but what I can think for now is doing it on the client side since hola when successfully loaded it creates an attribute on html tag named hola_ext_inject.

So using jquery :

$(function() {
  var hola_inject = $('html').attr('hola_ext_inject');
  if (typeof hola_inject !== typeof undefined && hola_inject !== false) {
    console.log('plugin exist');
  }
});
like image 40
Robin Carlo Catacutan Avatar answered Sep 27 '22 20:09

Robin Carlo Catacutan