Bypassing Device Identification

Device Identification is considered by many to be a viable solution to phishing and other client-side attacks due to the fact that even when a phishing attack is successful, the attacker has no way of enrolling his/her device with the website. Notwithstanding, this paper discusses three different, yet very simple attack vectors that can be used to completely overpower device identification.

Download paper [1]