We don't have an SSL site and will be unable to get one. How do I work around this? [closed] - facebook

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 10 years ago.
Improve this question
My organization has created a Facebook tab but because our site is not SSL certified the tab only works on some computers. We will not be getting SSL certified any time soon. Is there a way to work around this?

Your question can be paraphrased as 'how can we show HTTPS content to our users without needing to serve HTTPS content' - it's not possible
It shouldn't be difficult to buy a certificate for your domain and install it to the server - costs $15-$100 for the cert depending on where you get it and a few minutes (or hours, i guess) to reconfigure a web server
Obviously if you've a complicated setup with firewalls and strict procedures and processes in the company this will take a lot longer than the few minutes it would take a single developer, but surely in that case not supporting SSL is also seen as a big problem since you'll lose a relatively large percentage of users
(source: It was >10% of users about a year ago - it's higher now.)

Related

Should I publish my Flutter App if Im not 100% sure about its security? [closed]

Closed. This question is opinion-based. It is not currently accepting answers.
Want to improve this question? Update the question so it can be answered with facts and citations by editing this post.
Closed 1 year ago.
Improve this question
I have created a flutter delivery app for (3) months, its now 99% complete. I am planning to make this app available just within my city, However I am worried that someone will take time to extract/decompile and reverse engineer my app to extract the customer info(fullName,Address,tel.no) that I have storing in cloud firestore, So far I have taken all the security measures I can think of:
1.) Using pro-guard and pro-guard rules
2.) Obfuscating Dart code
3.) Firebase Security Rules
However none of this can protect my users data 100% not just like big app companies who manage data on their server side infrastructure which I dont have resources and the know how. What I am really worried about is when they reverse engineer my app they can extract all users I have then I have to face consequence or lawsuit from my users.

Webserver security, make server public [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 10 years ago.
Improve this question
I'm developing on my main computer, which I use for everything. store private images, documents, and stuff.
But I'm going to show off my website for lets say a company.
Is is secure for me to link my ip-adress and make them take a look from there or should I upload it to a webhosting service first?
I don't want them to get access to my files on the computer. I know they can get html, css and javascript files. but is there something else I should worry about?
I'll try to provide you with the most information I can:
I'm behind a router which has port 80 open for the webserver?
Using W7, xampp, and I've F-secure installed.
Also I wonder because I've a stable 100/100 connection and I've no down-time in two years.. so I would like to skit my hosting service and redirect the domains to my computer instead.. is this safe or should I buy a seperate server running Ubuntu?
Sorry if I couldn't find the answers on my own.
well as long as you set up your webserver right you should be fine, but it`s probably for the best to buy a linux vps.
VPS' are cheap and it takes the toll off of your computer, plus you just eliminate any sort of personal information leak from the get-go.
I had good experience with:
http://www.linode.com/
http://www.strato-hosting.co.uk/
http://vpsville.ca/
I had bad experience with:
http://burst.net/
However, burstnet has cheap ips, but their nodes are very unstable.

Buying servers for Push Notifications [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 10 years ago.
Improve this question
Because of the outcome of another question I asked: Push or Local notifications alerting user to change between saved and remote data
I have decided to tackle Push Notifications head on. I don't, however, really know where to begin when buying a server. Once I start following tutorials and the like, I should be good to follow along relatively unchallenged, but I'd hate to buy a server not capable of running background processes, installing SSL certificates, and making outgoing TLS connections on certain ports (Those were the requirements on one tutorial). Could anyone recommend a company that offers servers at relatively cheap prices since I don't want to spend huge amounts on it, and have the correct specifications for push notifications. I live in the UK, but since I'm localising the app a couple of countries, would it be worth having the server in another country?
Anyway, any help would be greatly appreciated.
Regards,
Mike
I would consider using a service like Urban Airship to start. https://go.urbanairship.com/accounts/register/
It'll be free until you are doing more than 1 million pushes a month and will save you the hassle of setting up a server.

Using connect with facebook on a kiosk, will the kiosk IP be banned? [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 10 years ago.
Improve this question
We are going to run an internet game in a conference on kiosks.
We will be getting signups using Facebook connect on the kiosk. We will be logging out connected users after they play the game.
We are wondering if the IP of the kiosk will get a ban - because multiple users will use connect with facebook feature in a short timespan on the same kiosk.
Can anyone verify if this sort of usage has no problems?
Unless you are expecting a huge flood of signups in very small amount of time, you should be fine. Really, its hard for human action to trigger something like this, its almost always by bots that either do a HUGE amount in a short time, or a small amount consistently over the course of a prolonged time.

How does critsend gather "Spam folder statistics with addresses"? [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 11 years ago.
Improve this question
Apologies if this is the wrong site - not really sure which site is best for this, but since it's SMTP-related (or is it?), I figured maybe this site had the best audience.
My company just set all of our live servers to route email through Critsend (at a cost). Apparently we've had some people complain about emails going missing, and this service lets us track it better...
I was pretty shocked, and said "There's nothing they can possibly tell us, that we can't get from the SMTP server logs!". However, I was given a huge list of features they support, including this:
Spam folder statistics with addresses
Apparently, they can tell us how many (and which!) emails went into spam folders.
I've done a little SMTP in my time, and I'm certain there is no way to get this information. So, what are they doing to claim this feature? (Note: Sadly, I don't have any access to actually see one of these reports).