Re: [WEB SECURITY] MachineID fingerprinting

[robert@xxxxxxxxxxxxx]

> All the other solutions I've seen here involve installing something on
> the client's machine.

I've seen some that do not require installing anything however I can't go to much into details :) 
I'm not looking at how to do it, I'm looking at the most popular implementations, data gathered, and
most importantly the end result and accuracy. 

Points to consider (hoping to hear more specific examples)

- Intranet ips change
- Patch levels change: OS, browser plug-in's (flash/adobe), browsers, etc...
- Hardware changes: disk drive upgrade, new network card, additional drive addition
- Multi users sharing a machine (different os account names)
- Being able to support a reasonable change threshold. If more than X% change then reregistration may be required. 

Regards,
- Robert 


----------------------------------------------------------------------------
Join us on IRC: irc.freenode.net #webappsec

Have a question? Search The Web Security Mailing List Archives: 
http://www.webappsec.org/lists/websecurity/

Subscribe via RSS: 
http://www.webappsec.org/rss/websecurity.rss [RSS Feed]