BetBurger | Live and Pre-game surebets
RebelBetting - Turn betting into investing

Mac address detected by iesnare or..

Make bookmakers cash cow machines
Skaggerak
Pro
ProProProPro
Karma: 1
Posts: 552
Joined: Thu May 08, 2014 12:04 am

Re: Mac address detected by iesnare or..

Fri Jun 17, 2016 11:31 am

my_username wrote: what happens if they put this code on the server?
You'll have to forgive my ignorance as I don't know what this means or how they'd be capable of doing it.

I'm confused about another part of your post, you say VMs are not useless but blocking iesnare is useless, unless I'm mistaken here the main way a book could discover you are using a virtual machine to gamble is through iesnare, which in turn is a potential flag. Of course we have no way of knowing for sure what is and what isn't a red flag and using a VM could be something that completely flys over the head of a book as it's not a certainty of anything. I'm just trying to figure out the optimal way to proceed myself, there are many in here with greater expertise than me and I enjoy learning from what you have to say.
my_username
Has experience
Has experienceHas experience
Karma: -1
Posts: 109
Joined: Fri Dec 04, 2015 10:38 am

Re: Mac address detected by iesnare or..

Fri Jun 17, 2016 12:09 pm

iesnare is like a plugin for jquery, it's a JS library and they put it in the html/js code and your browser runs it when you visit the webpage. when the code is run, it sends a request to iesnare's server sending who knows what information. putting it on the server means it will be executed by the server, ie bet365.com or bwin.com's server...  and not sent to your browser at all and you will never know they even use iesnare. sorta like google analytics, you can have adblock block it and you won't show up in the stats, but if they put it on server, there's nothing you can do about it, because the server logs it before sending you the html.

as for vms, they're just like a regular pc, there is no difference to the ouside world. now if you use several IDs on the same comuter, it's the same shit as if you were using VMs, but VM is easier to reformat or change windows version, spoof mac address and what not than your regular pc, unles you half a dozen laptops then it's basically the same except VMs take less space
Last edited by my_username on Fri Jun 17, 2016 12:16 pm, edited 1 time in total.
Skaggerak
Pro
ProProProPro
Karma: 1
Posts: 552
Joined: Thu May 08, 2014 12:04 am

Re: Mac address detected by iesnare or..

Fri Jun 17, 2016 11:17 pm

Thanks, now I understand what you mean by them putting iesnare on the server.

There is a difference between VMs and an ordinary laptop unless I am mistaken, that is that a VM has a unique last three digits that identify it as such compared to another ordinary laptop. Maybe this is irrelevant and as you said changeable. Is there a tutorial available to learn how to change such information? It is the next step for me.
User avatar
Dentz
Gaining experience
Gaining experience
Karma: 12
Posts: 42
Joined: Tue Sep 16, 2014 11:23 am

Re: Mac address detected by iesnare or..

Sat Jun 18, 2016 8:35 am

My little contribution to discussion. Using VM is many times handy as said formatting OS as you need very quickly etc.
As I read from iesnares whitepapers it can read computers hardware like serial numbers from hdd, graphics card, etc.
If you are using VM the hardware is same regardless what OS you are running. Thats why I think separate comps are more safer way to operate. I have been thinking about using little diskless linuxes or linux on a stick method to prevent excess hardware. Downside to this approach is that linux is niche OS and could flag you by the bookie.
Another good way could be to use soft side with low end and cost mobile phones. You can toss that away after you are too much limited with certain account and too many bookies. And there isn't too much information that iesnare can share from a mobile device. I think used phones aren't that highly priced.
Last edited by Dentz on Sat Jun 18, 2016 9:20 am, edited 1 time in total.
Never lose your capital.
my_username
Has experience
Has experienceHas experience
Karma: -1
Posts: 109
Joined: Fri Dec 04, 2015 10:38 am

Re: Mac address detected by iesnare or..

Sat Jun 18, 2016 9:40 am

where did you see it can read hardware ids?

edit: i mean i've read the links and it seems that besides javascript they try to load some flash plugins and activex controller for ie which can provide a bit more info about hw than flash and javascript, but you need to use ie and you need it to allow to run that activex plugin so it's quite a stretch to say they can get hw id which are not available in javascript api for security reasons

so i think it's quite safe to recreate the vm with different settings, windows and change some browser adds ons/plugins and a few fonts in windows is enough to generate a differnt fingerprint

again, the problem is if you log into different account holders from the same machine, just like physical computer but beyond that i think they're safe enough for now
Last edited by my_username on Sat Jun 18, 2016 10:02 am, edited 1 time in total.
User avatar
Dentz
Gaining experience
Gaining experience
Karma: 12
Posts: 42
Joined: Tue Sep 16, 2014 11:23 am

Re: Mac address detected by iesnare or..

Sat Jun 18, 2016 9:57 am

Never lose your capital.
Skaggerak
Pro
ProProProPro
Karma: 1
Posts: 552
Joined: Thu May 08, 2014 12:04 am

Re: Mac address detected by iesnare or..

Sat Jun 18, 2016 11:05 am

Using low end mobile phones doesn't sound very efficient, some of the apps and lack of power in the phones could slow you down immensely. Saying that it beats getting flagged.

Something you added about iesnare did worry me as I was booting a vm earlier. The system has quite a powerful processor but I'm only designating 2gb ram to the vm, so if iesnare could read hardware on the vm it could see a powerful processor with poor ram and a 32 bit os, overall it wouldn't look right. There's so much argument over this cookie nowadays it's hard to know exactly the right way to operate, I really wanted to branch into using vms but it seems like I just might not be ready, the thought of adding more hardware to ensure no mistakes are made is frustrating.
User avatar
Dentz
Gaining experience
Gaining experience
Karma: 12
Posts: 42
Joined: Tue Sep 16, 2014 11:23 am

Re: Mac address detected by iesnare or..

Sat Jun 18, 2016 11:26 am

I posted the links to iesnares patent application with hope that ppl in this forum would read it too. It always helps if many ppl study them and share their toughts about it. Many eyes and minds are more powerful than one. Even if patent application says it can read more information about infected system than normal cookies ever would. We are not sure how much information bookies are gathering and what information is relevant for iesnare to make its unique user id.
Let's assume that you have iesnare on your computer and it has send information to iovations databases and made an id for your computer. What happens when you upgrade your system or sell some parts at fleamarket etc. and start with fresh system. Now you have partly fresh system, with some old and new hardware serials, what is reaction of iovations database systems with this kind of mixed information against their previous data about you and your system. Do they flag you or regard you as a new user? If they regard you as a new user then we can always cycle eth-cards, hdd:s, etc.
Sadly I think we'll never know exact truth about how things are handled. I think it's best to assume the worst cases.
Thats why I tought about old or minimal systems over vm:s.
Never lose your capital.
my_username
Has experience
Has experienceHas experience
Karma: -1
Posts: 109
Joined: Fri Dec 04, 2015 10:38 am

Re: Mac address detected by iesnare or..

Sat Jun 18, 2016 12:57 pm

i booted a kali linux vm and sniffed the traffic while visited a certain bookie which uses iesnare and it does indeed send some packets to their servers and i didn't even log in.

unfortunately analyzing packets is a bit above my pay grade. i'm gonna continue diggjng but we could use an expert and analyze this properly.
joskin
Gaining experience
Gaining experience
Karma: 3
Posts: 22
Joined: Sun May 08, 2016 8:39 pm

Re: Mac address detected by iesnare or..

Sun Jun 19, 2016 11:04 pm

Privacy Badger shows which sites are using which trackers, including iesnare, and blocks the scripts. Betfair is using iesnare, lots of bookies don't use it.
Last edited by joskin on Sun Jun 19, 2016 11:07 pm, edited 1 time in total.
freaked
Has experience
Has experienceHas experience
Karma: 4
Posts: 192
Joined: Thu Apr 07, 2016 10:17 am

Re: Mac address detected by iesnare or..

Wed Jun 22, 2016 1:19 pm

I just noticed betvictor use tealium iq, a "customer data platform".
Is this dangerous to our privacy also?

Return to “Arbing, matched betting and trading talk”