17 ms·
Right - you'd want to use a fingerprinting technique (collecting data) to identify machines for rate limiting (security, read: intrusion detection) purposes. A
by erulabs 9y ago
Right - you'd want to use a fingerprinting technique (collecting data) to identify machines for rate limiting (security, read: intrusion detection) purposes.
Almost every API of any consequence does this, and it was done as a defensive tactic to reduce costs/load/outages caused by spammers, ddos attacks, crawlers, etc etc etc.
Not sure at what point access logs with cookie data in them becomes a "shadow profile"
- closeparen 9y agoThe “shadow profile” scandal has to do with Facebook’s records of your visits to other pages that embed a Like button.
- erulabs 9y agoWell, right, the embed is hosting on facebook servers, and like I said, they collect access logs... So they are necessarily "collecting information on non-users" if they implement any sort of rate limiting based on fingerprinting for non-users... Which is more or less industry standard... Not saying any of this is how things _should be_, it's just a little bizarre to make it seem like some sort of stealthy data harvesting scheme.