Silk Road forums
Discussion => Security => Topic started by: Throwitup on December 07, 2011, 02:16 am
-
So, i made an account here on the forums .. then i forgot my password .. not the first time, i rarely post here and consider forum identities as being disposable ..
Anyways.. to the point ...
I made two forum accounts today, and the second time (a few hours after the first one) i got a message saying something to the tune of "Sorry you can only make one account from a computer at a time"
So, i brainstormed and remembered my previous username/password ...
but my question now is : HOW DOES IT KNOW ?!??! i thought this was anonymous.
I even tried the "use a new identity" in vidalia .. still same thing :(
and that brings me to another question that i have been pondering ...
when browsing the SR marketplace (logged in of course), and then you click "use a new identity" (some people have said this is a "tip" to try if TOR is being particularly slow)
... how come you don't have to log in again ? how does it know it is still the same user ?
is there some kind of "signature" for your browser, and/or each login peroid ?
hoping someone can clear this up.
-
Cf. Cookies.
-
The Dr is of course, correct.
When you 'change identities' in Tor, it doesn't clear your cookies, and that check is built into the forum software. If you either manually cleared your cookies, or shut down and restarted you browser during which torbutton clears any tor based cookies, it wouldn't have had a clue.
-
thanks Doc,
& to VJ as well.
i feel better now.
that is more or less what i thought at first, but after a second thought ... i figured it couldn't hurt to ask.
in retrospect, i think it was the wording that threw me off. it didn't sound very anonymous...i wasn't expecting that.
(maybe the powers that be would see fit to change it to something like "You already have an account. If you don't like it, clear yo' cookies/restart your browser and try again, foo !")