you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 7 months ago

The identifying site doesn't need to record IP or other identifying information. It just needs to answer "yes" or "no" when queried about the current user. It could use a similar handoff mechanism to oauth.

The cost of a hack turns into getting a list of people in the region, rather than people who use a given service. Arguably, that's less problematic.

  • source
  • parent