4 ms·

You usually login in the West Coast, then, all of a sudden, you started login in the East Coast -- hey, GOOGLE, FACEBOOK, isn't that ODD????????????????? I can

You usually login in the West Coast, then, all of a sudden, you started login in the East Coast -- hey, GOOGLE, FACEBOOK, isn't that ODD????????????????? I can't believe they act as they don't know what's going on and have no means to deter this. They SHOULD BE LIABLE!

jimktrains2 5y ago
No, that isn't really odd. People travel. Should my account be locked everytime I visit family? I permanently lost access to may aim account a while back because I tried to connect while traveling out of country.
- raister 5y ago
  The key point here is that it's impossible to travel long distances in a short amount of time... Of course people travel. What's not normal is to log in in Miami and in the next minute log in Seattle....
  - saddlerustle 5y ago
    VPNs are pretty mainstream these days. If you talk to anyone working on anti-abuse you'd find the answer to most "Why don't you just.." ideas is because it'd impact many orders of magnitude more legitimate users than victims.
  - PeterisP 5y ago
    I turn on my company VPN and the next minute my network connections come from their HQ halfway across the world.
  - danaris 5y ago
    If I leave my desktop logged into my account in LA—or it even has some form of autologin enabled and it reboots and auto-logs-in—but I log in from my phone in DC three seconds later, that doesn't mean I traveled from LA to DC in three seconds.
  - lowercased 5y ago
    well... it might be normal, if you're on VPN and traveling and what not. The key, imo, is 'normal'. A new account has no activity, but an account that has, say, 3 years of only ever logging in from IPs located in, say, Detroit area suddenly has logins from Europe and attempts to change email/pass/etc while activity is still coming from Detroit - that's an anomaly. But until there's historical data to compare against, you can't really know. And... unless you've got a lot of computing power to check for that all the time (or outsource that sort of stuff), you probably can't detect that.
xfer 5y ago
Not sure about facebook, but google used to(no longer use them) warn me about location change(SMS and e-mail to secondary account).
tgsovlerkhgsel 5y ago
I usually log in from one city in Germany, now I suddenly log in first from another city in Germany. It's the same user agent, but an empty cookie jar. Should the login be denied? Now I log in from a city in the Netherlands, 20 minutes later. From a phone, again, empty cookie jar. Even with a helicopter there's no way to make it there that fast. Should the login be denied? (The answer is "no, because I've traveled to another city to visit a conference, and the conference network was routed in a weird way and the GeoIP data for their exit IP was incorrect".) People jump locations all the time, for reasons like remote desktop sessions, mobile roaming, personal and company VPNs, etc. Locking out a real user has a significant cost.

jimktrains2 5y ago

No, that isn't really odd. People travel. Should my account be locked everytime I visit family? I permanently lost access to may aim account a while back because I tried to connect while traveling out of country.

raister 5y ago
The key point here is that it's impossible to travel long distances in a short amount of time... Of course people travel. What's not normal is to log in in Miami and in the next minute log in Seattle....
- saddlerustle 5y ago
  VPNs are pretty mainstream these days. If you talk to anyone working on anti-abuse you'd find the answer to most "Why don't you just.." ideas is because it'd impact many orders of magnitude more legitimate users than victims.
- PeterisP 5y ago
  I turn on my company VPN and the next minute my network connections come from their HQ halfway across the world.
- danaris 5y ago
  If I leave my desktop logged into my account in LA—or it even has some form of autologin enabled and it reboots and auto-logs-in—but I log in from my phone in DC three seconds later, that doesn't mean I traveled from LA to DC in three seconds.
- lowercased 5y ago
  well... it might be normal, if you're on VPN and traveling and what not. The key, imo, is 'normal'. A new account has no activity, but an account that has, say, 3 years of only ever logging in from IPs located in, say, Detroit area suddenly has logins from Europe and attempts to change email/pass/etc while activity is still coming from Detroit - that's an anomaly. But until there's historical data to compare against, you can't really know. And... unless you've got a lot of computing power to check for that all the time (or outsource that sort of stuff), you probably can't detect that.

xfer 5y ago

Not sure about facebook, but google used to(no longer use them) warn me about location change(SMS and e-mail to secondary account).

tgsovlerkhgsel 5y ago

I usually log in from one city in Germany, now I suddenly log in first from another city in Germany. It's the same user agent, but an empty cookie jar. Should the login be denied? Now I log in from a city in the Netherlands, 20 minutes later. From a phone, again, empty cookie jar. Even with a helicopter there's no way to make it there that fast. Should the login be denied? (The answer is "no, because I've traveled to another city to visit a conference, and the conference network was routed in a weird way and the GeoIP data for their exit IP was incorrect".) People jump locations all the time, for reasons like remote desktop sessions, mobile roaming, personal and company VPNs, etc. Locking out a real user has a significant cost.