Gregory Maxwell wrote:
When a user edits, we request a cookie "usertoken" or whatever. If they do not have one, we generate a long random number and give them one. Every edit made by that browser (no matter which user is logged in) the cookie is returned. We add an extra column to recent changes to store this value. A new version of sockcheck is produced that finds users who share revisions with the same token, much like we can do with IPs already. Viola, cookie based sockcheck. Thoughts?
Can a cookie carry between different IPs for the same browser? i.e., user hangs up and dials again for a different IP?
- d.
On 11/18/05, David Gerard dgerard@gmail.com wrote:
When a user edits, we request a cookie "usertoken" or whatever. If they do not have one, we generate a long random number and give them one. Every edit made by that browser (no matter which user is logged in) the cookie is returned. We add an extra column to recent changes to store this value. A new version of sockcheck is produced that finds users who share revisions with the same token, much like we can do with IPs already. Viola, cookie based sockcheck. Thoughts?
Can a cookie carry between different IPs for the same browser? i.e., user hangs up and dials again for a different IP?
Yes, thats what makes it useful beyond just an IP based checkuser.
David Gerard wrote:
Can a cookie carry between different IPs for the same browser? i.e., user hangs up and dials again for a different IP?
Yes, but it's also trivially easy to remove or just reject. It's only an effective measure against the painfully naive. (Of which there are many, alas. ;)
-- brion vibber (brion @ pobox.com)
Brion Vibber (brion@pobox.com) [051119 06:20]:
David Gerard wrote:
Can a cookie carry between different IPs for the same browser? i.e., user hangs up and dials again for a different IP?
Yes, but it's also trivially easy to remove or just reject. It's only an effective measure against the painfully naive. (Of which there are many, alas. ;)
Actually, from vandal/troll-chasing on en:, I strongly suspect there are enough as a proportion that this simple measure would help greatly.
- d.
wikitech-l@lists.wikimedia.org