My next little project
 

Haven for forums with trolls: a Java applet that makes a unique hash based on the user's hardware configuration and sends it to the registration script. Will work in any browser on any computer with the Java plugin.

Partially tested already and only vulnerable to decompiling or completely replacing the applet, but then again nothing you can do there. However the vast majority of trolls won't know how to do either.

Fun? :)

Lol yes but what do you want it for ;)?

- miSt

It would more firmly establish one registration per machine (obviously IP-based an cookie-based methods are unreliable).

That would be cool.

Ahh so you could check for dupe users more easily ;)?

And it would also ensure that a banning feature based on this uniue hash would be possible, and therefore more likely to result in a permanent ban:)

Satan

Well it obviously won't work for existing users, but upon registering it'll store the hash with their account, and when a user tries to register, it'll make sure that hash hasn't been registered.

Some parts of Java kick ass, others suck [random derrogatory term]...

Luckily for me none of my existing users are evil doers;)

Satan

That sounds like a nice feature to have. Will it take long to develop and release the hack?

If we had an option like this, we'd have to think of a way to route existing members through the process, too. But how?

Maybe "invent" a one-time reauthentication requirement.... as part of a security upgrade? Make it like a patch with a pop up they click on next time they visit the site? Or couple the applet with some other (unrelated) hack, that sorta re-registers them.... but seems plausible?

Any ideas on this?

What happens to people with Java disabled?

MRJ (Mac OS Runtime for Java) is buggy :confused: