3 ms·
That's "application specific" not machine specific. I'm not sure, other than IP address, how they could tell machines apart.
by hackerboos 14y ago
That's "application specific" not machine specific. I'm not sure, other than IP address, how they could tell machines apart.
- samwillis 14y agoCould they create a fingerprint of the application logging in using the request headers and user agent and watch for a grater than n% change in that fingerprint? Obviously a hacker could just copy the applications headers...
- inopinatus 14y agoI don't need them to be machine specific. What I expected was that a password issued (and immediately used) for e.g. authenticating to Gmail's IMAP service is then disqualified authorisation for any other Google service.