Comment by reliabilityguy
1 day ago
> We use canary values to detect the resellers, and I believe that's the only approach that will actually work at scale.
Can you elaborate how it works? Specific sequence of tokens acts as a canary?
1 day ago
> We use canary values to detect the resellers, and I believe that's the only approach that will actually work at scale.
Can you elaborate how it works? Specific sequence of tokens acts as a canary?
sign up for the resellers, insert a random id canary into your requests, trace them back on your server to tie it to an account
find fingerprints / signatures of the accounts being used. ban all of them.
eventually build an ml based system that detects these at signup
reinforce with more data. loop forever, etc.