test content
What is the Arc Client?
Install Arc

Instead of cookies for verification, why not machine's MAC address?

At least once a month, I do a "cleaning" of my machines (well, not the PS4). This includes scrubbing cookies.

The Arc site uses cookies for verification - and cookies can be copied and duped just as well as any other software. Instead of making users have to wait for a security code / acknowledgement to sign in - why not have the devs put in a one-line query on the machine/physical level instead of a cookie, then use an if/then verification? If it's not an authorized machine, then you require the email hassle.

An average programmer would know how to do that - and, I'm guessing that yours are above average. Right?

*Some folks even use more than one browser on their machine(s) - if they do a clean-up regularly, they have to go through the same nonsense each time, unless they disable the "Arc Defender". I didn't *want* to disable it, but I get tired of waiting some 10 to 15 minutes after the first time I request a new PIN.

Answers

  • edited October 2016
    This content has been removed.
  • boatswasboatswas Member Posts: 21 Arc User
    While MAC addresses can be spoofed, endlessly requiring verifications (especially when the automatic emails aren't sent within half an hour) can cause many users to disable Arc's "security defender", thus rendering it equally moot.

    Not a good reason. Why not give users the choice?
  • This content has been removed.
  • This content has been removed.
Sign In or Register to comment.