识别匿名用户 [英] Identifying anonymous users

问题描述

如果我做了一个民意调查在我的网站，我不想要求登记投票，但我只是想每次访问一个，我怎么可能这样做？

If I had a poll on my site, and I didn't want to require a registration to vote, but I only wanted each visit one, how might I do this?

假设访问者来自IP 123.34.243.57访问该网站，并投票。这就可以安全地从不允许任何人123.34.243。*的投票？这是一个很好的策略？

Let's say a visitor from IP 123.34.243.57 visits the site and votes. Would it then be safe to disallow anyone from 123.34.243.* from voting? Is this a good strategy?

什么是另外一个？

推荐答案

这是与Internet上的所有网站投票的根本挑战，你只是打破了问题的表面。

This is a fundamental challenge with all voting sites on the Internet, and you're just breaking the surface of the problem.

你措辞的方式，你只希望让每经过一个[投票]表示要允许他们每次打开浏览器，进入到现场的时间投票一次。我不认为这真的是你所追求的。

The way you've phrased it, you "only want to allow each visit one [vote]" indicates that you want to allow them to vote once each time they open their browser and go to the site. I don't think this is really what you seek.

我怀疑你想要什么是某一个人的人的可以只投过一次（每调查，也许）。

I suspect what you want is that a given individual Person can vote only once ever (per survey, maybe).

问题是，一旦你正确陷害的问题，这个问题变得更加清晰。你不是试图找出一个互联网节点（IP地址），访问（会话cookie），浏览器实例（持久性cookie）或计算机（也难辨认）。

The problem is, once you've framed the question properly, the problem becomes much more clear. You're not trying to identify an Internet node (IP address), visit (session cookie), browser instance (persistent cookie), or computer (difficult also to identify).

您可以使用的技术与饼干，和他们适当的典型用户。颠覆这种技术是一样简单
- 清除Cookie在浏览器中，
- 在浏览器中如果不允许饼干，
- 打开另一个浏览器，
- 步行到另一台计算机，
- 使用anonimizer，
- ...无尽的其他方式

You can use techniques with Cookies, and they were suitably for a typical user. Subverting this technique is as easy as - Clearing your cookies in the browser, - Disallowing cookies in the browser, - Opening another browser, - Walking to another computer, - Using an anonimizer, - ... endless other ways.

您可以通过e-mail地址做验证，但你表示你不想做登记，所以我不相信，要么你解决问题。

You can do validation by e-mail address, but you indicated you don't want to do registration, so I don't believe that solves you problem either.

如果你真的需要确定一个唯一的用户的投票系统，你需要有一定的权力是谁愿意担保任何特定用户的身份，或者只允许从一个值得信赖的平台访问的软件。

If you really need to identify a unique user for a voting system, you'll need to have some authority who's willing to vouch for the identity of any given user, or only allow the software to be accessed from a trusted platform.

第一种技术需要注册（并且通常是一个昂贵和费时的在该登记），即验证实际的法律名称和个人位置。然后，使用公共密钥基础设施（又名数字证书），您可以识别的基础上，他提供的凭据的个体的人。

The first technique requires registration (and often a costly and time-consuming registration at that), that verifies the actual legal name and location of the individual. Then, using Public Key Infrastructure (aka Digital Certificates), you can identify an individual person based on the credentials he supplies.

第二个技巧，需要一个值得信赖的平台，依托遵循一定的pre-确定行为的硬件。你可以，例如，创建一个投票网站，通过Xbox 360或iPhone的作品。你会创建一个安装在这些设备中的一个应用程序。基于该平台是受保护的方式，你可以使用的唯一性特征，如在Xbox 360或iPhone上的硬件地址或电话号码的硬件地址或Live ID的，让一般保证用户是同一个谁曾访问过。因为你可以控制应用程序和用户专门针对没有，由于可信平台的性质，你必须合理保证大多数用户将无法颠覆的应用程序的意图。

The second technique, requiring a trusted platform, relies on the hardware following certain pre-determined behavior. You could, for example, create a voting site that works through the XBox 360 or iPhone. You would create an app that is installed to one of those devices. Based on the way the platform is protected, you could use uniqueness characteristics, such as the hardware address or Live ID on the XBox 360 or the hardware address or telephone number on the iPhone, to get general assurance that the user is the same one who has visited before. Because you have control over the application and the user specifically does not, due to the nature of the trusted platform, you have reasonable assurance that most users will not be able to subvert the intent of the application.

我怀疑这是说你可以做到这一点的长篇大论方式，但它是解决绝非易事问题。

I suspect this is a long-winded way of saying you can do it, but it's a far from easy problem to solve.

考虑政治选举和多少资源和能源的进入使这些公正的和匿名的，仍然是一个非常具有挑战性的问题。

Consider political elections and how much resources and energy goes into making those fair and anonymous, and still it's a very challenging problem.

这篇关于识别匿名用户的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！