4 ms·
What about pairing the auth token with a browser fingerprint? [1] It would make it harder to troll an open network for random victims, and wouldn't annoy the u
by qeorge 16y ago
What about pairing the auth token with a browser fingerprint? [1]
It would make it harder to troll an open network for random victims, and wouldn't annoy the user.
[1] Perhaps a hash based on something like this https://panopticlick.eff.org/ https://panopticlick.eff.org/
- bl4k 16y agoyep then you extend it to something as simple as having a second ID in localStorage or a flash cookie then the next version of this plugin just spoofs all of those parameters as well the only solution[1] is SSL and client certificates [1] in the case of being on the same network