security - See if user is accessing two systems from same computer? -
so have 2 systems. 1 control completely, , other less so, still can put code here or there, javascript/html however. on different domains. 1 flag of potential malicious activity when single machine accessing both systems, i.e. same computer. there reliable way (ignoring people trying circumvent it) can tell if single machine accessed both systems.
what tried was, when person viewed critical page on domain.com, used domain2.com's api see ip address last used there , compared them. however, because of nat, many flags since 2 computers on same network have same exposed ip.
i investigated cookies, because of browser security doesn't seem viable option.
is there reliable method detect this?
make site set cookie on load, , make site b send request url on site sets different cookie.
if, in either request, user has other cookie, something.
Comments
Post a Comment