nullpt.rs
Security and privacy
reverse engineering browser
SHOW HN2025
348points
55comments
#140of 3,837 in 2025
Top 4%of 2025 by points
How HN took it
LovedMost comments that take a side are positive
11 positive, 8 neutral or asking, 1 mixed, 2 critical, out of 22 comments about the project. Thread score +0.37.
Idea: 5 for, 2 againstPrivacy: 1 for, 0 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Interesting, eye-opening project
From 2 comments
This is such an eye opening, and really interesting. It reminded me of projects like XprivacyLua that "expose" the different calls and request from android apps. Great work!
3abiton on HNInteresting tool. Would love to contribute
kundi on HN
Useful for reverse engineering work
From 2 comments
could be very useful for my work, nice to see
coolelectronics on HNMost of my job is reverse engineering a major website builder company's code so we can leverage their undocumented features. It's often a difficult job but your project could…
leptons on HN
Impressive Chromium work
From 2 comments
I am amazed what you've accomplished here: adding your own custom CDP domain. Years ago I gave up on trying to hack Chromium (I wanted to learn how to add back Manifest Version 2…
bobajeff on HNNice work! Check out visible v8: https://github.com/wspr-ncsu/visiblev8 for inspiration on using the V8 debug logs.
sagistrauss on HN
Objections
Use case looks like bot evasion
From 1 comment
Neat investigation but I didn’t totally follow how the project would be useful for reverse engineering, it seems like a project that would mostly be useful for evading bot checks…
paulhodge on HN
Proxy-based hooks can be detected
From 2 comments
You can just use Proxy to get around toString shenanigans and prevent any detection whatsoever.
Matheus28 on HNno you cannot since you can throw an exception and your proxy will be leaked leading to a detection.
kachapopopow on HN
Requests
Open source the project
From 1 comment
Very cool, thanks for sharing. I would love to see this show up as an OSS project. I know a few people who would likely enjoy being able to contribute if that's something you'd…
tylerlh on HN
Breakpoints without anti-debugging loops
From 1 comment
feature request: allow setting breakpoints without having obfuscator debugger statement loops get in the way
horseradish7k on HN
Visibility into iframe and BroadcastChannel communication
From 1 comment
I would love to be able to see IFrame and BroadcastChannel communication
whazor on HN
Waitlist
From 1 comment
It would be dangerous if this tool fell into the wrong hands. Where's the wait list?
juros on HN
Questions
Why a custom browser instead of an extension
From 2 comments
Very interesting, thanks! For the fingerprinting part, can you explain the difference with the JShelter browser extension (https://jshelter.org/)? I checked as you did in your…
tducret on HNOoh nice, I haven’t seen this project! I actually tried attempting this as an extension at first but wasn’t able to override page window functions. I’m curious to know how they…
nullpt_rs on HN
What can you achieve with it
From 1 comment
Sounds interesting, what can you achieve?
codingcodingboy on HN
Alternatives named
JShelter
From 1 comment
Very interesting, thanks! For the fingerprinting part, can you explain the difference with the JShelter browser extension (https://jshelter.org/)? I checked as you did in your…
tducret on HN
VisibleV8
From 1 comment
Nice work! Check out visible v8: https://github.com/wspr-ncsu/visiblev8 for inspiration on using the V8 debug logs.
sagistrauss on HN
XprivacyLua
From 1 comment
This is such an eye opening, and really interesting. It reminded me of projects like XprivacyLua that "expose" the different calls and request from android apps. Great work!
3abiton on HN
mitmproxy
From 1 comment
Ha, I've had the exact same thought before as well, but due to lack of experience and time constraints I ended up using mitmproxy with a small Python script instead. It was slow…
debazel on HN
Proxy-based browser extensions
From 1 comment
Not to comment on the rest of article or the author's goals, but it's absolutely possible to use a content script (dynamically injected into the `main` world, as opposed to the…
tbrockman on HN