You don't need AI. A simple fuzzy string match and some basic rules around it (ie, allow 25% fault across all tests, so your useragent can change 20% and the ot

You don't need AI. A simple fuzzy string match and some basic rules around it (ie, allow 25% fault across all tests, so your useragent can change 20% and the other strings can change 5% without you needing to reauth). The simplest defense is to never log the user out and only ask passwords for special things (like Github's Superuser Mode)