[reliabilityguy]

> We use canary values to detect the resellers, and I believe that's the only approach that will actually work at scale.

Can you elaborate how it works? Specific sequence of tokens acts as a canary?

[nikcub]

sign up for the resellers, insert a random id canary into your requests, trace them back on your server to tie it to an account

find fingerprints / signatures of the accounts being used. ban all of them.

eventually build an ml based system that detects these at signup

reinforce with more data. loop forever, etc.