[LRUG] Device fingerprinting

Rob Anderson rob.anderson at paymentcardsolutions.co.uk
Wed Nov 13 02:13:19 PST 2013


Wow - evercookie is scarily good.  Looks like only Safari can defeat it.

Thanks for the link


On Wed, Nov 13, 2013 at 9:47 AM, Josh McMillan <josh at joshmcmillan.co.uk>wrote:

> Hi Rob,
> It may not be exactly what you're looking for, but have you looked at
> something along the lines of Evercookie (http://www.samy.pl/evercookie/)?
> Josh
> Sent from my iPhone
> On 13 Nov 2013, at 09:19, Rob Anderson <
> rob.anderson at paymentcardsolutions.co.uk> wrote:
> Hello LRUG
> We are looking into the possibility of implementing some kind of device
> fingerprinting so that we can reliably identify unique users of our site.
> I am aware that this is a controversial practice and can be abused for all
> kinds of nasty ad-tracking stuff, but in our case this is purely an
> anti-fraud measure.  In other words, if we see lots of customers
> transacting from the same device in a short space of time, we are probably
> looking at ID theft, and can act / ban accordingly.  We're not trying to do
> anything bad.
> The EFF has a remarkably effective solution (https://panopticlick.eff.org/)
> but it is (ironically) closed source, I guess because of ethical concerns.
> There are also various commercial offerings which are eye-wateringly
> expensive, at least the ones we've spoken to.
> Does anyone have any advice?
> Rob
> _______________________________________________
> Chat mailing list
> Chat at lists.lrug.org
> http://lists.lrug.org/listinfo.cgi/chat-lrug.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.lrug.org/pipermail/chat-lrug.org/attachments/20131113/5386aced/attachment-0003.html>

More information about the Chat mailing list