RE: [PHP] php behind firewall

2006-08-05 Thread tedd
At 3:37 PM -0500 8/4/06, Richard Lynch wrote: > http://www.caida.org/publications/papers/2005/fingerprinting/ Just to be pedantic... It's using the clock skew of the user's computer, and I don't think that has anything to do with PC-NIC-CABLE-FIREWALL combination communication. Rather, it is

RE: [PHP] php behind firewall

2006-08-04 Thread Richard Lynch
On Fri, August 4, 2006 1:08 pm, Jim Moseby wrote: >> >> Jim Moseby wrote: >> > >> > I recently read an article about IP fingerprinting. The >> concept is that >> > every PC-NIC-CABLE-FIREWALL combination has subtle, but measurable >> > differences in the way they communicate. It was very >> in-de

Re: [PHP] php behind firewall

2006-08-04 Thread Richard Lynch
On Fri, August 4, 2006 10:25 am, Andrew Senyshyn wrote: > I need to get local user IP, but server with apache and php is in > another subnetwork. > So from server environment I can get only router's IP. > The only solution that I see - is getting with some magic algorithm > local IP from brouser an

RE: [PHP] php behind firewall

2006-08-04 Thread Jim Moseby
> > Jim Moseby wrote: > > > > Found it: > > > > http://www.caida.org/publications/papers/2005/fingerprinting/ > > Thanks! Interesting stuff... > > Regards, > Austin. No problem. My recollection of the technique was a bit off, but the concept was still there. ;-) JM -- PHP General Mail

Re: [PHP] php behind firewall

2006-08-04 Thread Austin Denyer
Jim Moseby wrote: > > Found it: > > http://www.caida.org/publications/papers/2005/fingerprinting/ Thanks! Interesting stuff... Regards, Austin. signature.asc Description: OpenPGP digital signature

Re: [PHP] php behind firewall

2006-08-04 Thread Jochem Maas
Austin Denyer wrote: > Jochem Maas wrote: >> John Nichel wrote: >>> Well, if you would stop using the Vic20, and upgrade! >> how dare you call my altair a vic20. new-fangled rubbish. ;-) >> you want real authentication? get some carrier pidgeons like us real >> programmers. > > So, how many differ

Re: [PHP] php behind firewall

2006-08-04 Thread Adam Zey
tedd wrote: At 1:26 PM -0400 8/4/06, John Nichel wrote: tedd wrote: At 12:55 PM -0400 8/4/06, John Nichel wrote: Wait, are you telling me that I can't auth my customers based on IP alone? Great, now how do I let them view their sensitive data? ;) Okay, how do you? Retina scan, and DNA sa

Re: [PHP] php behind firewall

2006-08-04 Thread Austin Denyer
Jochem Maas wrote: > John Nichel wrote: >> >>Well, if you would stop using the Vic20, and upgrade! > > how dare you call my altair a vic20. new-fangled rubbish. ;-) > you want real authentication? get some carrier pidgeons like us real > programmers. So, how many different tunes did you get your

Re: [PHP] php behind firewall

2006-08-04 Thread Jochem Maas
John Nichel wrote: > Jochem Maas wrote: >> Jim Moseby wrote: Jim Moseby wrote: > I recently read an article about IP fingerprinting. The concept is that > every PC-NIC-CABLE-FIREWALL combination has subtle, but measurable > differences in the way they communicate. It was ve

Re: [PHP] php behind firewall

2006-08-04 Thread John Nichel
Jochem Maas wrote: Jim Moseby wrote: Jim Moseby wrote: I recently read an article about IP fingerprinting. The concept is that every PC-NIC-CABLE-FIREWALL combination has subtle, but measurable differences in the way they communicate. It was very in-depth, but it worked amazingly well.

Re: [PHP] php behind firewall

2006-08-04 Thread Jochem Maas
Jim Moseby wrote: >> Jim Moseby wrote: >>> I recently read an article about IP fingerprinting. The >> concept is that >>> every PC-NIC-CABLE-FIREWALL combination has subtle, but measurable >>> differences in the way they communicate. It was very >> in-depth, but it >>> worked amazingly well. I

RE: [PHP] php behind firewall

2006-08-04 Thread Jim Moseby
> > Jim Moseby wrote: > > > > I recently read an article about IP fingerprinting. The > concept is that > > every PC-NIC-CABLE-FIREWALL combination has subtle, but measurable > > differences in the way they communicate. It was very > in-depth, but it > > worked amazingly well. If I can find

Re: [PHP] php behind firewall

2006-08-04 Thread Austin Denyer
Jim Moseby wrote: > > I recently read an article about IP fingerprinting. The concept is that > every PC-NIC-CABLE-FIREWALL combination has subtle, but measurable > differences in the way they communicate. It was very in-depth, but it > worked amazingly well. If I can find the article, I'll pos

RE: [PHP] php behind firewall

2006-08-04 Thread Jim Moseby
> > Thanks. > > Not that I have done this on the net, but has anyone thought about > using a fuzzy logic approach to the problem? While it wouldn't be a > perfect solution, you could set a threshold you're comfortable with. > > Also while your DNA comment was meant to be humorous, it's not a b

Re: [PHP] php behind firewall

2006-08-04 Thread tedd
At 1:26 PM -0400 8/4/06, John Nichel wrote: tedd wrote: At 12:55 PM -0400 8/4/06, John Nichel wrote: Wait, are you telling me that I can't auth my customers based on IP alone? Great, now how do I let them view their sensitive data? ;) Okay, how do you? Retina scan, and DNA sample. Seriou

Re: [PHP] php behind firewall

2006-08-04 Thread John Nichel
Jochem Maas wrote: Andrew Senyshyn wrote: Hi all, I need to get local user IP, but server with apache and php is in another subnetwork. So from server environment I can get only router's IP. The only solution that I see - is getting with some magic algorithm local IP from brouser and sending it

Re: [PHP] php behind firewall

2006-08-04 Thread John Nichel
tedd wrote: At 12:55 PM -0400 8/4/06, John Nichel wrote: Wait, are you telling me that I can't auth my customers based on IP alone? Great, now how do I let them view their sensitive data? ;) Okay, how do you? Retina scan, and DNA sample. Seriously though, not by IP in any way, shape or f

Re: [PHP] php behind firewall

2006-08-04 Thread tedd
At 12:55 PM -0400 8/4/06, John Nichel wrote: Wait, are you telling me that I can't auth my customers based on IP alone? Great, now how do I let them view their sensitive data? ;) Okay, how do you? tedd -- --- http://sperling.com http://ancientstones.com http://earthstones.com -- PHP G

Re: [PHP] php behind firewall

2006-08-04 Thread Jochem Maas
Andrew Senyshyn wrote: > Hi all, > > I need to get local user IP, but server with apache and php is in > another subnetwork. > So from server environment I can get only router's IP. > The only solution that I see - is getting with some magic algorithm > local IP from brouser and sending it to serv

[PHP] php behind firewall

2006-08-04 Thread Andrew Senyshyn
Hi all, I need to get local user IP, but server with apache and php is in another subnetwork. So from server environment I can get only router's IP. The only solution that I see - is getting with some magic algorithm local IP from brouser and sending it to server. My application is for intrane