Is it ok to have facebook and twitter as authentication for an e-commerce site? [closed] - authentication

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.
Closed 10 years ago.
I have been looking around and noticed that ecommerce sites are not using social auth and i am building an ecommerce site and wanted to know the reasons for not using social auth.

It depends, will you be storing credit card details? You might hit some problems with PCI compliance if purchases can be made through social network logins.
If you're just using it as a useful way of signing up, you should be OK.

In a recent survey my employer conducted, we established that in younger (<30 years) users there was a perception that they did not want to link financial data with there social networking data due to, primarily, a lower level of trust in social networking brands, w.r.t visa et. al

I would never trust any site that allows me to login with my Facebook account. Too much risk for getting my user and password sniffed out and abused.

Related

Need some information about security testing [closed]

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.
Closed 9 years ago.
as i am new to security testing i need some information about security testing (especially related to e-commerce)
Here are my questions:
How a security testing is performed?
Is there good any document or websites so that i can get some good information about security testing?
Is there any tool present for security testing
There are various of security tools. If I were you I'd download system called BackTrack - www.backtrack-linux.org which has plenty of them. You can test almost everything, including sociotechnics, security of application, security of server, security of network etc. every kind of "security" has its own tools. There is one good software that tests website against security called SET more on http://www.backtrack-linux.org/backtrack/social-engineering-toolkit-training/
If you want test WEB sites you should check this video http://vimeo.com/21631598
There are plenty of tools to scan websites you will get them when you download the system I've given you link above.
There is one more powerful tool to use -> http://www.metasploit.com/ you can read more about it on this site.
Hope I've helped ;)

What are the p2p technologies out there? [closed]

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.
Closed 10 years ago.
I want to develop a web-based application for my employer. The application will allow users to chat face to face using their webcam. I was really interested in rtmfp until I discovered that it is only good for one or two way conferencing according to http://www.adobe.com/devnet/adobe-media-server/articles/p2p_rtmfp_groups.html which means that only two people will be able to chat with each other just as chatroulette. But I want a multiple way conferencing. Thanks!
You might want to have a look at WebRTC. I haven't tried it, but here's the first multiuser demo that I'm aware of: https://github.com/webRTC/webRTC.io
Some discussion about it (and how I know of the project) can be found in the webrtc-discuss Google Group at https://groups.google.com/d/topic/discuss-webrtc/26UNDNm-q0w/discussion
For more information about WebRTC in general, see also:
http://www.webrtc.org/
http://en.wikipedia.org/wiki/WebRTC
http://www.html5rocks.com/en/tutorials/webrtc/basics/
Good luck with your project!

Monitoring Recurring Payments [closed]

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.
Closed 10 years ago.
Some websites are able to monitor recurring monthly payments and show me when a payment was made or failed and possibly even an id for the payment in their billing system. I'd like to do the same thing. When I searched online though, most of the online payment processing services I find only tell my website if the first payment was made. Google Checkout says if a payment fails, they will send me an email, that's all. I want to automate this process though.
Are there any online payment processing services that offer a way, perhaps through an API, to track from my website the recurring payment information: time of payment, date, status, etc.?
Or perhaps is there another way websites might be monitoring their recurring payments that I'm unaware of? (such as an API with their bank)
I found it. Authorize.net offers a "silent post feature" as well as a "get subscription status":
Getting status on canceled/expired credit cards for recurring billing with authorize.net

Is there a voice authentication library? [closed]

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.
Closed 9 years ago.
Does anyone know if there's a good voice authentication library available? Or do I need to find a good voice recognition library and build from there?
There are several open source packages implementing speaker recognition. For example Mistral
http://mistral.univ-avignon.fr/
There are clones of mistral too
http://code.google.com/p/improved-mistral/
Speech Recognition is usually quite different from voice authentication (often called voice biometrics). Here is a good overview document - http://www.sans.org/reading_room/whitepapers/authentication/exploration-voice-biometrics_1436 says:
There are consultant companies such as J. Markowitz, Consultants who
rank voice vendor software. These reports are often available for
purchase online. One vendor’s implementation may be more suitable than
another depending on the use case. Nuance (www.nuance.com) and Vocent
(www.vocent.com) are two vendors who provide voice authentication
solutions and who came up repeatedly in the research for the “Current
Applications” section of this paper. Nuance has been rated the top
voice authentication technology vendor by Celent Communications.12
Nuance claims a 96% or higher accuracy rate for speech recognition13,
and Nuance’s Verifier product claims a “high” accuracy rate.
That is a good overview, but it is a little out of date. Look around for others such as:
http://www.persay.com/technology-voice-biometrics.asp
http://www.voxeo.com/biometrics/home.jsp
http://www.nuance.com/landing-pages/enterprise/voice-biometrics/default.asp
http://www.angel.com/products/voice-biometrics.php
http://www.voicevault.com/voicevault-enterprise/

TV guide listing API [closed]

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.
Closed 10 years ago.
Does anybody know a provider offering TV listings (through API or download) for all channel and cable providers?
Or is there any independent company collecting/providing such data?
An API/REST/SOAP interface would be great.
The MythTV folks have gathered resources for various countries here. If you're in the US or Canada, they recommend the Schedule Direct service.
These services are generally based on the XMLTV data format/toolset.
Rovi offers both SOAP and REST APIs for TV listings. It supplies listings for all channels of the cable, satellite, and broadcast services in multiple countries. Rovi is the source the cable companies use. See this website.
Schedule Direct doesn't grant commercial licenses. I'm checking out tvrage as mentioned above and Rovi right now.
Edit: If this is a commercial project, I recommend contacting Tribune Media Services (click "License our Content" in the footer at Zap2It.com). That was the solution I chose for my company, simply because they were much more prompt in their response than Rovi. The paid listings are XML files.
If all you need is a non-commercial license, SchedulesDirect works very well. If you have questions about their licensing, they encourage you to ask. We started using their listings and then had to change tack because of licensing issues.
You could contact staff of WebTelevideo at info#webtelevideo.com that has solved your problem. They may provide you an account to their own API.
WebTelevideo API has TV Scheduling for many countries and metadata (actors, directors, plot, trailers, posters etc..)