I am in the process of building a web-based game that requires user authentication. The vast majority of other gaming sites utilize the typical username/password method for authentication of users, however, knowing that gamers are typically lazy folks, I have thought about using a new kind of authentication that would instead profile each users computer using parameters such as local IP address, network hardware address (MAC), installed system font names, OS type and version, among other hardware and software properties in order to attempt to create an adequately unique and difficult to impersonate fingerprint that will be tied via hashes stored in a database to a given user account.
Are there any obvious pitfalls to authenticating users in this manner?
Would this, plus a basic pin number, be enough to protect user accounts from being hijacked by other computer-dextrous users?
This idea originated from this project: https://panopticlick.eff.org/index.php?action=log&js=yes