7 ms·
Why don't Facebook and other major sites check the user agent and IP address of client as well, instead of just relying on a cookie? That would solve this probl
by ElbertF 16y ago
Why don't Facebook and other major sites check the user agent and IP address of client as well, instead of just relying on a cookie? That would solve this problem in 99% of the cases, right?
- sdurkin 16y agoIf you're on the same wireless network as someone, you have the same external IP address.
- spicyj 16y agoAnd of course, if you can see the traffic, you can spoof the same User-Agent as well.
- ElbertF 16y agoI realize that but at least my neighbors won't be able to hijack my session from home. Logging in over a public network always seems risky.
- chrisbroadfoot 16y agoAre your neighbours on your private network? If not, you don't need to worry about them capturing your network data, because they're not on the same network.
- oops 16y agoPlus, your source IP can change from request to request when your ISP transparently pushes you through one of many proxy servers. AOL does (or did) this, as do some large European ISPs whose names escape me.
- modeless 16y agoYet another reason NAT sucks...