Database download contains invalid entries

[firthmj]

I downloaded the full JA4+ database from https://ja4db.com/api/download/ yesterday, and there were 54 records in what was given that had invalid ja4_fingerprint fields. The (pretty printed version of) the invalid records is attached.

It looks (from the ja4_fingerprint_string field) that these records actually have the (b) section of the fingerprint empty, and it seems the download script is returning garbage (presumably an uninitialised buffer) for the (b) section in this case.

Depending on what is actually going wrong, this may be a security risk for your website, as well as a problem for users.

ja4+_db_corrupted.json

[john-althouse]

The old ja4db will be replaced by a new ja4db that is enriched with billions of observations over many different network types, complete with all the data that you would be looking for to correlate ja4+ to application/library/activity. That will be ready in a few months. Until then, it is best to take the existing ja4db with a grain of salt and know that it will be taken down soon for the replacement.