Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.php > #10768

Re: Browser fingerprinting?

Show all headers | View raw

On 09/15/2013 04:27 PM, Twayne wrote:
> On 2013-09-14 6:11 PM, Gilles wrote:
>> On Fri, 13 Sep 2013 19:30:18 -0400, Twayne <nobody@spamcop.net> wrote:
>>> If it were easy to do, it'd also be widely publicized and available.
>>
>> Thanks for the feedback.
>>
>
> Welcome.
> I'm empathetic because I'm working along the same research lines as you
> are. The only thing I'm sure of is, it has to be done server-side;
> anything client-side can weed out some of it and save a tiny bit of
> server traffic, but from the client side it's too easy. Those guys won't
> be allowing js on their machines so js isn't going to be much good.
>     Right now all I can see doing is sanitizing and especially
> validation of ALL inputted data. There are ways to catch enough of them
> that at least it becomes too much effort for the bad guys to bother
> with. And  never forget htmlentities and htmlspecialcharacters; along
> with the right sanitizing, they can at least render anything that comes
> through useless.
>     The biggest problem IMHO is to make a textarea safe. HTML 5 now
> includes the max length attribute but a miscreant isn't going to be
> using anything 5 compliant if he's got more than one brain cell.
> Personally I've managed so far to avoid javascript and instead look at
> things like ctype, str-replace for validation uses, and whatever filters
> will work. Counting page views help, in addition to keeping a list of
> miscreant IPs and their proxy information when you can get it, but the
> smart ones are still going to be by it.
>     All you can do is your  best :)
>
> Twayne`
>

   Why is a textarea any different than any other form control?

-- 
Norman
Registered Linux user #461062
-Have you been to www.php.net yet?-

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Browser fingerprinting? Gilles <nospam@nospam.com> - 2013-09-12 23:56 +0200
  Re: Browser fingerprinting? Denis McMahon <denismfmcmahon@gmail.com> - 2013-09-12 22:26 +0000
    Re: Browser fingerprinting? Gilles <nospam@nospam.com> - 2013-09-13 00:38 +0200
      Re: Browser fingerprinting? Gilles <nospam@nospam.com> - 2013-09-13 00:43 +0200
        Re: Browser fingerprinting? Denis McMahon <denismfmcmahon@gmail.com> - 2013-09-12 23:29 +0000
          Re: Browser fingerprinting? Gilles <nospam@nospam.com> - 2013-09-13 09:23 +0200
            Re: Browser fingerprinting? Jerry Stuckle <jstucklex@attglobal.net> - 2013-09-13 09:32 -0400
    Re: Browser fingerprinting? Twayne <nobody@spamcop.net> - 2013-09-13 19:13 -0400
      Re: Browser fingerprinting? Christoph Michael Becker <cmbecker69@arcor.de> - 2013-09-14 01:30 +0200
  Re: Browser fingerprinting? jimp@specsol.spam.sux.com - 2013-09-12 22:19 +0000
  Re: Browser fingerprinting? Jerry Stuckle <jstucklex@attglobal.net> - 2013-09-12 20:31 -0400
    Re: Browser fingerprinting? "J.O. Aho" <user@example.net> - 2013-09-13 06:59 +0200
  Re: Browser fingerprinting? Fiver <numeralfive@gmail.com> - 2013-09-13 05:04 +0200
    Re: Browser fingerprinting? Michael Vilain <vilain@NOspamcop.net> - 2013-09-12 22:49 -0700
      Re: Browser fingerprinting? Jerry Stuckle <jstucklex@attglobal.net> - 2013-09-13 09:35 -0400
      Re: Browser fingerprinting? Martin Leese <please@see.Web.for.e-mail.INVALID> - 2013-09-13 08:42 -0600
      Re: Browser fingerprinting? Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2013-09-15 20:57 +0200
    Re: Browser fingerprinting? Gilles <nospam@nospam.com> - 2013-09-13 09:22 +0200
      Re: Browser fingerprinting? Twayne <nobody@spamcop.net> - 2013-09-13 19:30 -0400
        Re: Browser fingerprinting? Gilles <nospam@nospam.com> - 2013-09-15 00:11 +0200
          Re: Browser fingerprinting? Twayne <nobody@spamcop.net> - 2013-09-15 16:27 -0400
            Re: Browser fingerprinting? "Peter H. Coffin" <hellsop@ninehells.com> - 2013-09-15 21:07 -0500
            Re: Browser fingerprinting? Gregor Kofler <usenet@gregorkofler.com> - 2013-09-16 11:36 +0200
              Re: Browser fingerprinting? Twayne <nobody@spamcop.net> - 2013-09-17 20:02 -0400
                Re: Browser fingerprinting? "Peter H. Coffin" <hellsop@ninehells.com> - 2013-09-17 22:47 -0500
            Re: Browser fingerprinting? Norman Peelman <npeelman@cfl.rr.com> - 2013-09-16 06:13 -0400
              Re: Browser fingerprinting? Denis McMahon <denismfmcmahon@gmail.com> - 2013-09-16 11:03 +0000
                Re: Browser fingerprinting? Twayne <nobody@spamcop.net> - 2013-09-17 20:11 -0400
              Re: Browser fingerprinting? Twayne <nobody@spamcop.net> - 2013-09-17 20:06 -0400
                Re: Browser fingerprinting? The Natural Philosopher <tnp@invalid.invalid> - 2013-09-18 01:33 +0100
          Re: Browser fingerprinting? Marc van Lieshout <invalid@example.com> - 2013-09-17 22:53 +0200
            Re: Browser fingerprinting? Twayne <nobody@spamcop.net> - 2013-09-17 20:20 -0400
            Re: Browser fingerprinting? Denis McMahon <denismfmcmahon@gmail.com> - 2013-09-18 05:06 +0000
              Re: Browser fingerprinting? Scott Johnson <noonehome@chalupasworld.com> - 2013-09-18 06:09 -0700
                Re: Browser fingerprinting? "J.O. Aho" <user@example.net> - 2013-09-18 18:24 +0200

csiph-web