3 ms·

I met a dev who worked at Paypal that was pushing to steganographically add the IP address of the request client to the Paypal logo on every page load. The rea

I met a dev who worked at Paypal that was pushing to steganographically add the IP address of the request client to the Paypal logo on every page load. The reasoning being that you could then look at any phishing/scam site that included the logo and find the IP of the perpetrator (presuming a bunch of other things).

btown 8y ago
While this might catch some folks, many phishing/scam sites can route their requests through residential proxy networks. There are plenty of legitimate networks (e.g. ones that use free VPN offerings as a way to route traffic through your IP) with minimal KYC, and even more illegitimate ones based on botnets. This seems like a lot of engineering for a mitigation that’s easily worked around.