[LRUG] Device fingerprinting
rob.anderson at paymentcardsolutions.co.uk
Wed Nov 13 02:13:19 PST 2013
Wow - evercookie is scarily good. Looks like only Safari can defeat it.
Thanks for the link
On Wed, Nov 13, 2013 at 9:47 AM, Josh McMillan <josh at joshmcmillan.co.uk>wrote:
> Hi Rob,
> It may not be exactly what you're looking for, but have you looked at
> something along the lines of Evercookie (http://www.samy.pl/evercookie/)?
> Sent from my iPhone
> On 13 Nov 2013, at 09:19, Rob Anderson <
> rob.anderson at paymentcardsolutions.co.uk> wrote:
> Hello LRUG
> We are looking into the possibility of implementing some kind of device
> fingerprinting so that we can reliably identify unique users of our site.
> I am aware that this is a controversial practice and can be abused for all
> kinds of nasty ad-tracking stuff, but in our case this is purely an
> anti-fraud measure. In other words, if we see lots of customers
> transacting from the same device in a short space of time, we are probably
> looking at ID theft, and can act / ban accordingly. We're not trying to do
> anything bad.
> The EFF has a remarkably effective solution (https://panopticlick.eff.org/)
> but it is (ironically) closed source, I guess because of ethical concerns.
> There are also various commercial offerings which are eye-wateringly
> expensive, at least the ones we've spoken to.
> Does anyone have any advice?
> Chat mailing list
> Chat at lists.lrug.org
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Chat