This is generally known as "device fingerprinting"
Is this definitely how it's achieved though?
I would presume a highly-skilled fraudster could just spin up a new VM, for instance, and evade detection that way.
Do we know if "regular" cookies alone are good enough for 90% of the lazy fraudsters?
Regarding using "device fingerprinting," can I collect some opinions from HN?
Specifically, if every user record created stores a fingerprint alongside it (which is only used to find account registrations from the same device) is that just as offensive as using fingerprinting to track anonymous sessions?
Is this definitely how it's achieved though?
I would presume a highly-skilled fraudster could just spin up a new VM, for instance, and evade detection that way.
Do we know if "regular" cookies alone are good enough for 90% of the lazy fraudsters?
Regarding using "device fingerprinting," can I collect some opinions from HN?
Specifically, if every user record created stores a fingerprint alongside it (which is only used to find account registrations from the same device) is that just as offensive as using fingerprinting to track anonymous sessions?