Can be faked. Record people doing it hundreds if not thousands of times and make a statistical model. Google and Facebook of course would love it if your were logged in and could look at the muddy footprints you leave all over the web. Yet another way to punish people for using the wrong browser or not logging in.