Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Info that can be obtained to "finger print" users to keep them unique?

Posted on 2013-06-03
8
189 Views
Last Modified: 2014-05-31
I come to you today with a unqiue issue.

We have a web application that people access, they need to go to our website first to download the application.

We want to do specific promotions however we do not want people abusing it by using the same computer for example to sign up multiple times.

I know that alot of info can only be obtained with active x and java and user prompts.

What data can be obtained with out needing admin local rights to pull user data?

Harddrive serial number?
CPU ID's ?

I know that OS and screen res and such can be had, but this can be changed, looking for things a little more unique to the users system.

Any help is appreciated
0
Comment
Question by:Mathiau
8 Comments
 
LVL 7

Accepted Solution

by:
msifox earned 167 total points
ID: 39216849
You cannot really prevent it reliably.
That said, flash cookies are more difficult to get rid of than http cookies, so that's often used. And/or you could enforce people providing correct email addresses. Some people may have two or three, but most cannot quickly come up with many more, and it's time consuming to generate really lots of them.
Also your application could hide info in registry, %CommonProgramFiles% and other places.
0
 
LVL 2

Author Comment

by:Mathiau
ID: 39216887
Ya, that is what i had assumed, we plan to use both types of cookies where possible, the people who use are app, there are some who will get creative, so i wanted to see how much more info we could get that is basically "open" with out prompting the user to allow something to run.

Once our application is installed we do gather other info to create a uniqueID, but we wanted to see if we could implement a system prior to them even downloading our software to get as many points to create a score / ID for a user and if they pass of fail.
0
 
LVL 53

Assisted Solution

by:COBOLdinosaur
COBOLdinosaur earned 333 total points
ID: 39216953
The flash cookies are actually not difficult to get rid of all it takes is the FF addon BetterPrivacy which has a rating of 5 stars out of 5 and I would not be without it.

In the end you will not prevent abuse, you might reduce it, but that just gives a bigger advantage to the cheaters, and if you are offering real value yu just create a market for those willing to sell or give away easy workarounds.

Cd&
0
Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

 
LVL 2

Author Comment

by:Mathiau
ID: 39231812
So i assume short of cookies there really is nothing else that can be obtained with out user prompts like hardware ID's, mac address or anything?
0
 
LVL 53

Assisted Solution

by:COBOLdinosaur
COBOLdinosaur earned 333 total points
ID: 39231827
In general the mac address can only be obtained in a localized environment like a lan.  Across the internet it is not going to happen.

Cd&
0
 
LVL 2

Author Comment

by:Mathiau
ID: 39231897
I was reading about that, as the mac never goes past the router, learn something new everyday!
0
 
LVL 69

Expert Comment

by:Qlemo
ID: 40103189
I've requested that this question be closed as follows:

Accepted answer: 168 points for msifox's comment #a39216849
Assisted answer: 166 points for COBOLdinosaur's comment #a39231827
Assisted answer: 166 points for COBOLdinosaur's comment #a39216953

for the following reason:

This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

Free Tool: Postgres Monitoring System

A PHP and Perl based system to collect and display usage statistics from PostgreSQL databases.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Or at least that’s the word according to a new blog from Tech Target on AWS’s new Managed Services (MS) offering. According to the blog, AWS is launching their AWS MS program to expedite the adoption of cloud by Fortune 1000 and Global 2000 companie…
Today, the web development industry is booming, and many people consider it to be their vocation. The question you may be asking yourself is – how do I become a web developer?
Viewers will learn how to properly install Eclipse with the necessary JDK, and will take a look at an introductory Java program. Download Eclipse installation zip file: Extract files from zip file: Download and install JDK 8: Open Eclipse and …
This Micro Tutorial will demonstrate how nuggets on the Web are formatted by using Chrome Developer Tools. These tools would not only view the site's CSS but it can also modify it and save the CSS to use on your own site.

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question