|
 |
asp_web_howto thread: Reading User RegEdit File
Message #1 by "Donald J Roberts Jr" <Skipmeok@a...> on Wed, 17 Apr 2002 16:02:56
|
|
I am trying to find information about reading a clients RegEdit file. I
know the dangers of this, and it probably can't be done. Some programmers
ruin it for the rest of us. Anyway, I am trying to get information from
the file to keep track of users. My company offers special deals for new
customers. So, when a user logs in, we create a cookie on their computer,
but these can be erased. We have a database, but they can still change
user names, email addresses, whatever. I think that from the RegEdit file
I can make a user unique, I just need to know if I can, then, what can I
read from the client machine?
Any help would be great.
Thanks in advance,
Don Roberts
Don_Roberts@S...
Message #2 by Oleg Kapeljushnik <c-oleg.kapeljushnik@w...> on Wed, 17 Apr 2002 11:19:09 -0400
|
|
I wouldn't count on Registry if you want to make sure that this user is
unique.
User can reinstall windows or go to some class room that have doesn't
computers and
open new account you would never know that its the same user.
I suggest to think of some other ways. Like phone number confirmation
or credit card verification , SSN etc'
Besides to get clients registry is not so easy because of security
restriction.
Oleg.
-----Original Message-----
From: Donald J Roberts Jr [mailto:Skipmeok@a...]
Sent: April 17, 2002 12:03 PM
To: ASP Web HowTo
Subject: [asp_web_howto] Reading User RegEdit File
I am trying to find information about reading a clients RegEdit file. I
know the dangers of this, and it probably can't be done. Some programmers
ruin it for the rest of us. Anyway, I am trying to get information from
the file to keep track of users. My company offers special deals for new
customers. So, when a user logs in, we create a cookie on their computer,
but these can be erased. We have a database, but they can still change
user names, email addresses, whatever. I think that from the RegEdit file
I can make a user unique, I just need to know if I can, then, what can I
read from the client machine?
Any help would be great.
Thanks in advance,
Don Roberts
Don_Roberts@S...
---
Improve your web design skills with these new books from Glasshaus.
Usable Web Menus
http://www.amazon.com/exec/obidos/ASIN/1904151027/ref=nosim/theprogramme
r-20
Constructing Accessible Web Sites
http://www.amazon.com/exec/obidos/ASIN/1904151000/ref=nosim/theprogramme
r-20
Practical JavaScript for the Usable Web
http://www.amazon.com/exec/obidos/ASIN/1904151051/ref=nosim/theprogramme
r-20
Message #3 by "Donald J Roberts Jr" <Skipmeok@a...> on Wed, 17 Apr 2002 18:01:33
|
|
> I wouldn't count on Registry if you want to make sure that this user is
unique.
User can reinstall windows or go to some class room that have doesn't
computers and
open new account you would never know that its the same user.
I suggest to think of some other ways. Like phone number confirmation
or credit card verification , SSN etc'
Besides to get clients registry is not so easy because of security
restriction.
Oleg.
-----Original Message-----
From: Donald J Roberts Jr [mailto:Skipmeok@a...]
Sent: April 17, 2002 12:03 PM
To: ASP Web HowTo
Subject: [asp_web_howto] Reading User RegEdit File
I am trying to find information about reading a clients RegEdit file. I
know the dangers of this, and it probably can't be done. Some programmers
ruin it for the rest of us. Anyway, I am trying to get information from
the file to keep track of users. My company offers special deals for new
customers. So, when a user logs in, we create a cookie on their computer,
but these can be erased. We have a database, but they can still change
user names, email addresses, whatever. I think that from the RegEdit file
I can make a user unique, I just need to know if I can, then, what can I
read from the client machine?
Any help would be great.
Thanks in advance,
Don Roberts
Don_Roberts@S...
---
Improve your web design skills with these new books from Glasshaus.
Usable Web Menus
http://www.amazon.com/exec/obidos/ASIN/1904151027/ref=nosim/theprogramme
r-20
Constructing Accessible Web Sites
http://www.amazon.com/exec/obidos/ASIN/1904151000/ref=nosim/theprogramme
r-20
Practical JavaScript for the Usable Web
http://www.amazon.com/exec/obidos/ASIN/1904151051/ref=nosim/theprogramme
r-20
Are you really suggesting that the average user will reinstall their OS
just to get by a verifacation page! Then the users you deal with are MUCH
more educated than what I am used to.
Anyway, again, credit card numbers are nice, but most people have more
than one, phone numbers are then same. I have cell phones, work phones,
home phone, etc.... SS #'s are nice, but what do I do, open the DB at the
US Treasury to check that that person is giving his/her SS #? No, I need
something that will beat the user. Finding some information on his/her
system is where I think I'll find the best info. I was going to use the
Windows Media Player ID, a Super Cookie, but not everyone is using IE 6.0,
which in case you didn't know, exposes WMP to the server and allows one to
read the classid and use this information later. A patch has been sent
out, but it did exsist. Anyway, I still need to find a way to keep 'an
eye' on my users.....any suggestions please.
Don Roberts
Message #4 by Oleg Kapeljushnik <c-oleg.kapeljushnik@w...> on Wed, 17 Apr 2002 13:51:38 -0400
|
|
Well I think its all depend on how much you need to protect it from being
used twice
or more.
If you absolutely must to that you shouldn't rely on computer and make check
again the computer.
You should use something else. About SSN, you don't have to get access to US
Treasury DB
but you could enter and keep this SSN in your DB to make sure that this SSN
wasn't used.
Besides you could use combination of 2 different authentication like credit
cards do for example.
You can ask for SSN and ZIP code.
Cause if something that you offer for example is very expensive and I can
get it for free
I would reinstall my computer or lets say regular user can just go to his
neighbor
or library or some other office where the have plenty of computers.
Just a thought.
Oleg.
-----Original Message-----
From: Donald J Roberts Jr [mailto:Skipmeok@a...]
Sent: April 17, 2002 2:02 PM
To: ASP Web HowTo
Subject: [asp_web_howto] RE: Reading User RegEdit File
> I wouldn't count on Registry if you want to make sure that this user is
unique.
User can reinstall windows or go to some class room that have doesn't
computers and
open new account you would never know that its the same user.
I suggest to think of some other ways. Like phone number confirmation
or credit card verification , SSN etc'
Besides to get clients registry is not so easy because of security
restriction.
Oleg.
-----Original Message-----
From: Donald J Roberts Jr [mailto:Skipmeok@a...]
Sent: April 17, 2002 12:03 PM
To: ASP Web HowTo
Subject: [asp_web_howto] Reading User RegEdit File
I am trying to find information about reading a clients RegEdit file. I
know the dangers of this, and it probably can't be done. Some programmers
ruin it for the rest of us. Anyway, I am trying to get information from
the file to keep track of users. My company offers special deals for new
customers. So, when a user logs in, we create a cookie on their computer,
but these can be erased. We have a database, but they can still change
user names, email addresses, whatever. I think that from the RegEdit file
I can make a user unique, I just need to know if I can, then, what can I
read from the client machine?
Any help would be great.
Thanks in advance,
Don Roberts
Don_Roberts@S...
---
Improve your web design skills with these new books from Glasshaus.
Usable Web Menus
http://www.amazon.com/exec/obidos/ASIN/1904151027/ref=nosim/theprogramme
r-20
Constructing Accessible Web Sites
http://www.amazon.com/exec/obidos/ASIN/1904151000/ref=nosim/theprogramme
r-20
Practical JavaScript for the Usable Web
http://www.amazon.com/exec/obidos/ASIN/1904151051/ref=nosim/theprogramme
r-20
Are you really suggesting that the average user will reinstall their OS
just to get by a verifacation page! Then the users you deal with are MUCH
more educated than what I am used to.
Anyway, again, credit card numbers are nice, but most people have more
than one, phone numbers are then same. I have cell phones, work phones,
home phone, etc.... SS #'s are nice, but what do I do, open the DB at the
US Treasury to check that that person is giving his/her SS #? No, I need
something that will beat the user. Finding some information on his/her
system is where I think I'll find the best info. I was going to use the
Windows Media Player ID, a Super Cookie, but not everyone is using IE 6.0,
which in case you didn't know, exposes WMP to the server and allows one to
read the classid and use this information later. A patch has been sent
out, but it did exsist. Anyway, I still need to find a way to keep 'an
eye' on my users.....any suggestions please.
Don Roberts
---
Improve your web design skills with these new books from Glasshaus.
Usable Web Menus
http://www.amazon.com/exec/obidos/ASIN/1904151027/ref=nosim/theprogramme
r-20
Constructing Accessible Web Sites
http://www.amazon.com/exec/obidos/ASIN/1904151000/ref=nosim/theprogramme
r-20
Practical JavaScript for the Usable Web
http://www.amazon.com/exec/obidos/ASIN/1904151051/ref=nosim/theprogramme
r-20
|
|
|
View Cart
