Stripe records user movements on its customers' websites

Re:Stripe records user movements on its customers' websites by onion2k on Wednesday April 22, 2020 @02:14AM (#22942777)

Mouse movements may not be PII if you don't link it to a session ID, but then it would be useless in fraud detection because you don't know whose transaction you should be blocking or allowing since it's no longer traceable to a person.

Surely the point of mouse movement detection for anti-fraud is more "did the mouse move in an exact straight line to the exact center of an element and therefore isn't a human" or "the last 3 orders on this site used exactly the same pattern of mouse movements therefore is a recording" rather than some sort of "gait detection" to tell who someone is.

[ Parent | on HN ]

Re:Stripe records user movements on its customers' websites by lucb1e on Wednesday April 22, 2020 @01:47PM (#22948214)

The purpose of processing the individual mouse positions over time may be exactly that, but I'm not sure that the intent matters. For example, a website asking for my social security number for the sole purpose of verifying whether it matches the checksum (Dutch SSNs contain a checksum) would still be processing my SSN, no? I'd be interested if I'm wrong, though.

[ Parent | on HN ]