News for hackers. Stuff that matters.

A comment on Implementing fast TCP fingerprinting with eBPF. Parent comment

Re:Implementing fast TCP fingerprinting with eBPF by arewethereyeta on Sunday June 29, 2025 @08:13PM (#44417852)
There are MANY cases for such an implementation. My service [1] implements such a thing, eBPF too, and my users do it for many valid reasons such as:

- shopping cart fraud - geo-restricted content (think distributing laws) - preventing abuse (think ticket scalpers) - preventing cheating and multi-accounting (think gaming) - preventing account takeovers (think 2FA trigger if fingerprint suddenly changed)

There is much more but yeah, this tech has its place. We cannot just assume everyone has a static website with a free for all content.

[1] https://visitorquery.com/

[ Parent | on HN ]
Re:Implementing fast TCP fingerprinting with eBPF by OutOfHere on Monday June 30, 2025 @11:37AM (#44424602)
Why do you need eBPF for it? Why is IP filtering and header/cookie analysis not enough? What is shopping cart fraud? What is your false positive and false negative rate?
[ Parent | on HN ]