However, Mr Kamkar found a way to booby-trap a webpage via a browser so the request for the ID information looks like it is coming from the PC on which that page is being viewed.
We sometimes use this analogy of a kid's game called 'boobytrap' where you have a bunch of little blocks and there's a spring piston and it pushes on them.