[LRUG] Device fingerprinting

[Rob Anderson]

Josh

Wow - evercookie is scarily good.  Looks like only Safari can defeat it.

Thanks for the link

Rob


On Wed, Nov 13, 2013 at 9:47 AM, Josh McMillan <josh at joshmcmillan.co.uk>wrote:

> Hi Rob,
>
> It may not be exactly what you're looking for, but have you looked at
> something along the lines of Evercookie (http://www.samy.pl/evercookie/)?
>
> Josh
>
> Sent from my iPhone
>
> On 13 Nov 2013, at 09:19, Rob Anderson <
> rob.anderson at paymentcardsolutions.co.uk> wrote:
>
> Hello LRUG
>
> We are looking into the possibility of implementing some kind of device
> fingerprinting so that we can reliably identify unique users of our site.
>
> I am aware that this is a controversial practice and can be abused for all
> kinds of nasty ad-tracking stuff, but in our case this is purely an
> anti-fraud measure.  In other words, if we see lots of customers
> transacting from the same device in a short space of time, we are probably
> looking at ID theft, and can act / ban accordingly.  We're not trying to do
> anything bad.
>
> The EFF has a remarkably effective solution (https://panopticlick.eff.org/)
> but it is (ironically) closed source, I guess because of ethical concerns.
>
> There are also various commercial offerings which are eye-wateringly
> expensive, at least the ones we've spoken to.
>
> Does anyone have any advice?
>
> Rob
>
> _______________________________________________
> Chat mailing list
> Chat at lists.lrug.org
> http://lists.lrug.org/listinfo.cgi/chat-lrug.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.lrug.org/pipermail/chat-lrug.org/attachments/20131113/5386aced/attachment-0003.html>