On Thu, 09 Jun 2011 18:05:37 +0300, nix@xxxxxxxxxxxxxxxx said: > In most cases, the malicious user is denied access even before a > fraudulent purchase is made! > Since implementation of NiX API with it's current featuers: 0 fraudulent > purchases in last 2-3 weeks period. It definitely does something. OK, I'll bite - how many *lost sales* did you have because NIX false-positived and rejected a non-malicious user before a valid purchase was made? Making something that rejects *every* malicious attack is *easy* - just reject every request. Of course, that's not very practical for production use, so you end up having to trade off false positives and negatives to minimize the total cost...
Attachment:
pgpndZEOct23u.pgp
Description: PGP signature
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/