How to protect google analytics mobile tracking ID from hacking [closed] - ios

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 6 years ago.
Improve this question
Is there any solution to protect google analytics from receiving fake information from Spammers ? The problem is anybody can send information by knowing tracking id.
I found the following solution, filter domain. But that's for web and how to implement for mobile app ?
https://blog.kissmetrics.com/protect-analytics-from-hacking/
Thanks

Visible Tracking ID
On a website you can right click, Show source but you can't on a mobile application. Therefore your trying ID can't be find from your clients application. Nonetheless, if your code is pushed to a public repository (Github for example) robots may find it.
Random spammers
Even if your trackingID is kept secret you'll have some bot spamming your account randomly (they try every possible tracking ID). Google added a tool to prevent this: go to Admin > View > View settings > turn on Exclude all hits from known bots and spiders. Then Google will automatically filter hits from the known fake domains.
Hostname security hack
Even with Google's automatic filter you may still see some spam. This can be fixed with what they explain in the link you provided.
In your article they create a custom dimension and use it to filter real data from spam data. You can also use this with your mobile application, the thing is, it does not need to be a host name it just need to be a string only known by you, its sort of a new secret added to your tracking ID (which should already be secret).
This works because bots can handle the try of every trackingID but they can't try every custom dimension with every possible value, it's too much work for them.

Related

Why would one use a POST-based search engine on their website? [closed]

Closed. This question is opinion-based. It is not currently accepting answers.
Want to improve this question? Update the question so it can be answered with facts and citations by editing this post.
Closed 6 years ago.
Improve this question
I'm aware of the differences between GET and POST (security and caching, in particular). Additionally, when I search this question using Google, I'm only greeted by results telling me how to hack site search in Google Analytics for POST-based engines. I already know how to do that.
What I'm wondering is why employ a POST-based search engine in the first place? What are the salient advantages? I can't imagine why site search queries would need to be secure. So maybe it has something to do with caching?
Thanks so much in advance to anyone who can shed light on this.
No real "answer" to this one - it's entirely up to the site owners choice and/or the options the software they use on their website.
I would however say that there are very valid reasons for search terms to be secure. If you are searching for personal private medical conditions for example, or perhaps your own sexual preferences that you'd prefer not to be widely known. And then there's search terms used in more restrictive countries than you're obviously used to where having a history of those search terms on your computer could get you in very serious trouble.
Google has long restricted search terms from being passed on to the next website in the referrer field for just the reasons.
Advantages of a GET based search page:
Easy to copy and paste link for someone else.
Adds to your web history.
Allows search engine to be implemented in client side (e.g. like Google Custom Search Engine uses with a JavaScript call to Google's main search engine rather than a complicated server side search engine implementation).
Advantages of POST based search pages are mostly to do with security:
Cannot be accidentally shared by copying and pasting URL.
Does not add search terms to web history
Cannot leak search terms in referrer fields for sites you click on. This takes extra effort to do with a GET request (like Google has done) but is default with POST requests.

basic app.net implementation in ios app [closed]

Closed. This question is not reproducible or was caused by typos. It is not currently accepting answers.
This question was caused by a typo or a problem that can no longer be reproduced. While similar questions may be on-topic here, this one was resolved in a way less likely to help future readers.
Closed 4 years ago.
Improve this question
I've been trying to add basic app.net implementation into my ios app and having loads of trouble for reasons I cannot figure out. All I really want to do is something simple like this:
http://hashpan.com/dev/help/appnet_client_side.htm
I have looked at the documentation and the various objective-c wrappers and really can't figure this out. I find zero sample code out there as well which doesn't help. Specifically I keep getting this when trying to setup an authorization screen:
http://cl.ly/0o032Z1H1E2y
And yes I have paid the dev fee so I have the rights to their api. If anyone would be willing to spend a few minutes to help me that would be much appreciated as I'm not sure where to go for help with this. Thanks,
rc
It looks like you are trying to use one of the web flows.
Since it is an ios app, you will want to use either the password flow or the app.net Passport flow. The latter is probably what you really want to be doing. This allows users to authorize your app from the app.net Passport easily.
Password flow: http://developers.app.net/docs/authentication/flows/password/
app.net Passport auth: https://github.com/appdotnet/ADNLogin-SDK-iOS
Also, since you are on ios, you will be well served using ADNKit by #joeldev: https://github.com/joeldev/ADNKit
If you do indeed want to use the web flow, this error message probably implies that you have not setup the callback URL appropriately in the dev console for that app or that you are not escaping the characters in the callback URL properly inside of the authorization URL.

Switching from blogspot to custom domain [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 9 years ago.
Improve this question
I have a blog on blogspot with url say myblog.blogspot.com. Now its getting around 30,000 page view in a month. I want to change the blog url as myblog.com.
But, I worry that the amount of traffic I have gained till now, will become nil because of new url. Google page rank and alexa rank will go to nil.
So, should I change the domain of my blog or not?
Maybe this Link will help you: How do I use a custom domain
It s a simple forward, so your rankings will not go to nil.
Your original Blogspot address will automatically forward to your new domain. That way, any existing links or bookmarks to your site will still work.
When you migrate from a sub-domain of blogspot to your own domain you must set up proper redirects. The redirects should be the permanent (301) type, not the temporary (302) variety). Permalinks should redirect directly to corresponding permalinks:
http://myblog.blogspot.com/ -> http://myblog.com/
http://myblog.blogspot.com/this-is-a-blog-post -> http://myblog.com/this-is-a-blog-post
You should also make sure you change all your internal links to make sure they don't mention your old sub-domain. If you control any external links, you should change those. You might even consider asking some webmasters to change the external links that point to your blog.
Even if you do the redirects correctly, there is a good chance that you will lose Google traffic for some time. The last time I tried a move from a sub-domain to a full domain (several years ago), I lost about 75% of my Google referrals for about 8 months. After 8 months, Google seemed to trust my new domain again and my traffic came right back.
Google has a change of address tool as part of webmaster tools. It is limited to use on "full-domains" and it won't work in your case because you are starting out on a sub-domain. Google has a help document that goes along with it which you may still find useful.

CrashData Report and feedback user ios App, use a server [closed]

Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 4 years ago.
Improve this question
i want integreate in my iOS app, a CrashData Report that send me the log of the crash automatically, and the feedback form to let the user to contact me for request, issue or suggestion, i have found a lot of service online, but the most are payment service, like:
http://www.crittercism.com/
http://www.bugsense.com/
http://www.hockeyapp.net/
or for feedback:
http://www.uservoice.com/
i have also see that there is a opensource for crashdata:
http://quincykit.net/
so maybe the best solution is create my server to host quinckykit, and receive feedback user direct on the server, so my question is, how implement this, what type of server or webhosting i have take?...and what hosting did you advise me, or some tutorial, i never did it...
You should check Instabug (http://instabug.com) it's very specifically serving feedback reporting with a smooth experience.
It shows a screenshot for the user to draw on other than the text field to enter the feedback in.
It also captures all the device details needed.
You can customize it as you want.
PS. I'm working at Instabug. So let me know if you need any help. It's free btw!
QuincyKit contains all you need to receive crash reports and work with them. The hosted solution HockeyApp uses the same open source SDK and provides much more advanced features. If you are not familiar with server hosting php and MySQL, I would recommend to use a hosted solution instead of the open source server component. Also crash symbolication has to be done on your Mac, which HockeyApp e.g. does all automatically for you.
The QuincyKit GitHub repository contains all information you need.
User Feedback is not part of QuincyKit or HockeyApp. I think Crittercism provides some user feedback features independent from crash reporting. I don't know if UserVoice provides anything you can integrate into your iOS app.

Can I use images from Google results on my website? [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 10 years ago.
Improve this question
I'm planning to create a module for my directory which would fetch images from user's website using Google Image Search via this scenario:
User logs in to his account
Enter his website URL
Application request images from domain cached by google
Application displays N amount of images from website offering to link them to his profile
On confirmation, application will copy images to my server
Am I allowed to do that, and would it breach any copyrights?
UPDATE
I presume that person created account in my business directory is owner of that website (it states in Terms and Conditions) and as an owner he is accessing his website. Application would display thumbnails and fetch original image from his website using links from Google results. Does it make any difference?
Disclaimer: IANAL
As long as you only use thumbnails of maximum 80 to 200 pixels in size, then it is considered fair use. I also advise linking the image the source page and mentioning somewhere that the images may be copyright material.
Make sure to use the API, rather than scraping the results page.
You'll find that the Google images results have this disclaimer attached to them: "This image may be subject to copyright." I'd say you'd be in the wrong.
Similar to Facebook, you can use the images to link to those website. You need to mention that these images may be copyright protected. Google cache's the content. And it's image search says, "Image may be subject to copyright"

Resources