The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
32 views

How could a comments plugin be securely loaded from domains people are already logged into?

The fundamental idea is to load a blog comments plugin (like Disqus) from a domain someone is already logged into to save users time and increase engagement. I like the facebook comments plugin ...
2
votes
1answer
108 views

Facebook iOS SDK Authentication

The Facebook iOS SDK only needs your bundle & app IDs of your iOS app to match those of your Facebook app. If I find out an app's app ID, can't I just create another iOS app with that app's ...
0
votes
0answers
16 views

Software Backdoors [duplicate]

Are you fearful that 3rd party softwares could potentially add backdoor security breaches to your system? If so, how do you address this issue if the source code is not open source?
3
votes
3answers
156 views

Should I install an SSL certificate for a website that uses a third party payment gateway?

I understand what an SSL certificate does but I need help evaluating if I need one for my client's website. His website sells holiday packages online but does so without asking for any credit card ...
0
votes
3answers
77 views

Can I trust profile data a 3rd party auth provider send to me?

This question may be related to this one, but I think we need to be sure. My website implement login via OpenID (or Google, or Facebook, etc.). On my website, authorization is based on user email ...
1
vote
1answer
137 views

Security implications of hosting third-party Javascript [duplicate]

A client of ours wants us to host a blob of Javascript for their custom-branded version of our website. It is hosted on a subdomain of our site (customer.example.com), but uses the same cookie domain ...