[LRUG] Device fingerprinting

[Josh McMillan]

Hi Rob,

It may not be exactly what you're looking for, but have you looked at something along the lines of Evercookie (http://www.samy.pl/evercookie/)?

Josh

Sent from my iPhone

> On 13 Nov 2013, at 09:19, Rob Anderson <rob.anderson at paymentcardsolutions.co.uk> wrote:
> 
> Hello LRUG
> 
> We are looking into the possibility of implementing some kind of device fingerprinting so that we can reliably identify unique users of our site.
> 
> I am aware that this is a controversial practice and can be abused for all kinds of nasty ad-tracking stuff, but in our case this is purely an anti-fraud measure.  In other words, if we see lots of customers transacting from the same device in a short space of time, we are probably looking at ID theft, and can act / ban accordingly.  We're not trying to do anything bad.
> 
> The EFF has a remarkably effective solution (https://panopticlick.eff.org/) but it is (ironically) closed source, I guess because of ethical concerns.
> 
> There are also various commercial offerings which are eye-wateringly expensive, at least the ones we've spoken to.
> 
> Does anyone have any advice?
> 
> Rob
> _______________________________________________
> Chat mailing list
> Chat at lists.lrug.org
> http://lists.lrug.org/listinfo.cgi/chat-lrug.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.lrug.org/pipermail/chat-lrug.org/attachments/20131113/5956ae07/attachment-0003.html>