[SelfProtection]

Originally Posted by pseudonym

Not now Phorm have changed it to check referrer - unless someone finds a browser/ add-on flaw that allows them to spoof the browser's referrer - it used to be possible to spoof referrer using Flash, but that was fixed in recent versions.

Having read R.Clayton's analysis, I've an idea or two about other potential issues, but we won't know unless or until Phorm goes live so I'm in no hurry to find out if I'm right. And given all the delays, they've had plently of time to review their code and fix any other oversights.

I'm not in any hurry to find out either, just checking the possible problems & options.