[djrogers]

> I generally agree with you but wanted to point out that: > same credit card + same hardware = same developer is fine as a pseudo-identifier for fraud detection...but I don't think is actually an identifier. It's kind of like someone knowing my social security number and birthday but not actually being me.

No, actually it's not. Someone knowing your SSN is completely different form someone having possession of your hardware. Even if the story were different and the CC# had been stolen, iOS hardware identifiers are cryptographically validated on development devices. You can't just go around 'stealing' device IDs without having possession of said devices - ergo it's about as solid an identifier as one can get.