>>1) Mac address is very very easy to spoof
2) MAC Addresses are physical hardware addresses, which are not
transmitted with TCP or UDP packets, so the information is lost anyway
(Unless the information is captured elsewhere and encapsulated into the
packet by the application)
> That might be the case, but if an account is already in use, it should
> already be bouncing the login.
>
> If it isn't in use, and the MAC is the same, what's the problem ?
How would that help though? if a MAC address can be spoofed, and a
hacker has managed to obtain your username and password, they've
probably got a whole bunch of other data about your computer too. MAC
addresses were never intended to be used for security (At least not
outside of LANs anyway).

Signature
Ben Cottrell
"Speedy thing goes in, speedy thing comes out"
Colin Wilson - 05 Jun 2008 23:31 GMT
> How would that help though? if a MAC address can be spoofed, and a
> hacker has managed to obtain your username and password, they've
> probably got a whole bunch of other data about your computer too. MAC
> addresses were never intended to be used for security (At least not
> outside of LANs anyway).
Who knows, I just find it a pain in the a.s, when i'm using the same
damn hardware...