https://www.peakhour.io/Sat, 01 Aug 2026 11:20:00 +1000https://www.peakhour.io/blog/correlate-actors-across-rotating-ips/<p>Residential proxy rotation defeats IP-only counters. The answer is not a new identity claim, but a carefully chosen set of cohort, account, route, and outcome keys.</p>ACSat, 01 Aug 2026 11:20:00 +1000tag:www.peakhour.io,2026-08-01:/blog/correlate-actors-across-rotating-ips/Rate LimitingRate LimitingResidential ProxiesNetwork FingerprintingBot ManagementAPI Securityhttps://www.peakhour.io/blog/residential-proxy-detection-apis-without-javascript/<p>APIs cannot depend on browser JavaScript to expose proxy abuse. They need server-side network, protocol, identity, route, and outcome evidence in the request path.</p>ACSat, 01 Aug 2026 11:10:00 +1000tag:www.peakhour.io,2026-08-01:/blog/residential-proxy-detection-apis-without-javascript/API SecurityAPI SecurityResidential ProxiesNetwork FingerprintingRate LimitingBot Managementhttps://www.peakhour.io/blog/two-lineages-tls-fingerprinting/<p>JA4 did not descend from Cisco Mercury. The two projects come from different strands of TLS fingerprinting research and solve different operational problems.</p>ACSun, 26 Jul 2026 09:00:00 +1000tag:www.peakhour.io,2026-07-26:/blog/two-lineages-tls-fingerprinting/SecurityTLS FingerprintingJA3JA4Cisco MercuryNetwork FingerprintingThreat Detectionhttps://www.peakhour.io/blog/before-ja3-tls-fingerprinting-history/<p>JA3 made TLS fingerprints easy to log and share, but the technical ideas behind it had already been tested in SSL Labs experiments, a p0f patch and FingerprinTLS.</p>ACSun, 19 Jul 2026 09:00:00 +1000tag:www.peakhour.io,2026-07-19:/blog/before-ja3-tls-fingerprinting-history/SecurityTLS FingerprintingJA3FingerprinTLSp0fNetwork FingerprintingSecurity Researchhttps://www.peakhour.io/blog/fingerprint-is-a-cohort-not-a-client/<p>TLS fingerprints group similar protocol implementations. They do not prove which application, device or person made a request.</p>ACMon, 13 Jul 2026 09:28:00 +1000tag:www.peakhour.io,2026-07-13:/blog/fingerprint-is-a-cohort-not-a-client/SecurityTLS FingerprintingJA3JA4Cisco MercuryNetwork FingerprintingBot Managementhttps://www.peakhour.io/blog/from-joy-to-mercury-and-eve/<p>Cisco's open-source collectors, fingerprinting research and Encrypted Visibility Engine form a clear lineage, but they are not interchangeable parts of one public system.</p>ACMon, 13 Jul 2026 09:28:00 +1000tag:www.peakhour.io,2026-07-13:/blog/from-joy-to-mercury-and-eve/SecurityCisco JoyCisco MercuryEncrypted Visibility EngineTLS FingerprintingNetwork FingerprintingEncrypted Traffichttps://www.peakhour.io/blog/open-network-fingerprint-database-schema/<p>A useful open fingerprint database needs provenance, competing labels, raw evidence, format versions and licences—not another unexplained hash list.</p>ACMon, 13 Jul 2026 09:28:00 +1000tag:www.peakhour.io,2026-07-13:/blog/open-network-fingerprint-database-schema/SecurityNetwork FingerprintingTLS FingerprintingJA4Cisco MercurySecurity Researchhttps://www.peakhour.io/blog/public-fingerprint-databases-are-not-ground-truth/<p>We reviewed the main public fingerprint resources. The formats are open, but current application labels and auditable ground truth remain scarce.</p>ACMon, 13 Jul 2026 09:28:00 +1000tag:www.peakhour.io,2026-07-13:/blog/public-fingerprint-databases-are-not-ground-truth/SecurityNetwork FingerprintingTLS FingerprintingJA3JA4Threat Intelligencehttps://www.peakhour.io/blog/tls-fingerprint-canonicalisation-attacker-variation/<p>Sorting makes TLS fingerprints more stable, but it also removes ordering evidence. Here is how to test whether the discarded variation matters.</p>ACMon, 13 Jul 2026 09:28:00 +1000tag:www.peakhour.io,2026-07-13:/blog/tls-fingerprint-canonicalisation-attacker-variation/SecurityTLS FingerprintingJA4Cisco MercuryNetwork FingerprintingSecurity Researchhttps://www.peakhour.io/blog/using-network-fingerprints-in-bot-and-rate-limit-decisions/<p>A practical way to use network fingerprints for bot and rate-limit decisions without mistaking a shared client cohort for identity.</p>ACMon, 13 Jul 2026 09:28:00 +1000tag:www.peakhour.io,2026-07-13:/blog/using-network-fingerprints-in-bot-and-rate-limit-decisions/SecurityNetwork FingerprintingTLS FingerprintingJA4Bot ManagementRate Limitinghttps://www.peakhour.io/blog/one-clienthello-ja3-ja4-mercury-lab/<p>A reproducible lab runs JA3, JA4 and Cisco Mercury against the same TLS ClientHello and compares what each fingerprint preserves.</p>ACSun, 12 Jul 2026 09:00:00 +1000tag:www.peakhour.io,2026-07-12:/blog/one-clienthello-ja3-ja4-mercury-lab/SecurityTLS FingerprintingJA3JA4Cisco MercuryNetwork FingerprintingSecurity Researchhttps://www.peakhour.io/blog/fingerprints-are-evidence-not-identity/<p>Browser and network fingerprints are useful security evidence, but they should not be treated as proof of a person's identity.</p>ACFri, 19 Jun 2026 00:00:00 +1000tag:www.peakhour.io,2026-06-19:/blog/fingerprints-are-evidence-not-identity/API SecurityAPI SecurityFingerprintingBot ManagementAccount ProtectionNetwork FingerprintingBrowser Fingerprinting