1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Would you use such a service?

Discussion in 'BlackHat Lounge' started by mojdk, Nov 10, 2015.

  1. mojdk

    mojdk Junior Member

    Joined:
    Jan 5, 2014
    Messages:
    154
    Likes Received:
    52
    Hi guys.

    Some of you might remember me from a previous post I made where I asked for any kind of software that could ease up your daily IM work.
    I got some great ideas from that thread, but I think I am moving on with one of my own ideas. So therefor this post, to pitch the idea to you guys, and see if you find it interesting or have any ideas to accompany the idea.

    The overall idea is a service where you can check your affiliate and ad earnings across multiple networks and sites from one place. So your ClickBank, Adsense, CPA earnings etc.. All from one site.
    That way you don't have to login to every single network to check your earnings, plus you'd easier get a total earnings overview from all networks, and you could get a daily earnings report sent directly to your inbox every morning.
    I've got a few more ideas for features for the service, but I think that this is enough for you to get the idea.

    I would really much appreciate any thoughts, comments or ideas for this to be developed further on.

    I look forward to some feedback :cool:
     
  2. twitter.followers

    twitter.followers Jr. VIP Jr. VIP

    Joined:
    Mar 23, 2011
    Messages:
    1,830
    Likes Received:
    2,220
    I would love to but it all depends on how secure the app is? Is it worth sharing the login credentials of all my revenue streams into the app/website to gather all the earnings data together?

    It might work out if you're transparent and have sorted something out about the security and the permissions it would need.
     
    • Thanks Thanks x 1
  3. mojdk

    mojdk Junior Member

    Joined:
    Jan 5, 2014
    Messages:
    154
    Likes Received:
    52
    Thanks for the feedback.
    Security is definitely a factor that comes into play when we are talking potential access to a lot of peoples revenue streams. Most networks offer access to this kind of data over an API which requires specific access rather than the usual username//password, however some still have a rather old-school interface for this stuff. So username//password could probably not be avoided all together.

    Of course everything should be served over https and encryption of stuff should happen on my site when it can.

    But for somethings, it would "boil down" to trust, I suppose..
     
  4. Sherbert Hoover

    Sherbert Hoover Jr. Executive VIP Jr. VIP

    Joined:
    Dec 26, 2010
    Messages:
    1,101
    Likes Received:
    9,212
    Occupation:
    ORM - Content - SEO - PBN
    Location:
    Anywhere but the UK
  5. mojdk

    mojdk Junior Member

    Joined:
    Jan 5, 2014
    Messages:
    154
    Likes Received:
    52
    Yeah, you could say.
    I don't know https://awardwallet.com/ but from looking at their website, there could be some similarities :)
     
  6. mojdk

    mojdk Junior Member

    Joined:
    Jan 5, 2014
    Messages:
    154
    Likes Received:
    52
    I'd really appreciate more feedback on this idea.
    So if you have anything at heart, please do not hesitate to spit it out :)
     
  7. RuthSam

    RuthSam Jr. VIP Jr. VIP Premium Member

    Joined:
    Mar 19, 2010
    Messages:
    3,813
    Likes Received:
    976
    Gender:
    Male
    Home Page:
    Would be a great idea if the security is 110% !
     
  8. Asif WILSON Khan

    Asif WILSON Khan Executive VIP Jr. VIP

    Joined:
    Nov 10, 2012
    Messages:
    12,168
    Likes Received:
    33,749
    Gender:
    Male
    Occupation:
    Fun Lovin' Criminal
    Location:
    London
    Home Page:
    So now somebody would just need to hack one account, to get access to all your data? Cool keep me posted.
     
    • Thanks Thanks x 1
  9. Aatrox

    Aatrox Supreme Member

    Joined:
    Feb 27, 2014
    Messages:
    1,432
    Likes Received:
    1,064
    Agree with this. I don't make money on 20 websites so that I need manually check how much in total I've earned today. I wouldn't use that. Even if I have 20 websites to check, I would be more cool to check it manually.
     
    • Thanks Thanks x 1
  10. Asif WILSON Khan

    Asif WILSON Khan Executive VIP Jr. VIP

    Joined:
    Nov 10, 2012
    Messages:
    12,168
    Likes Received:
    33,749
    Gender:
    Male
    Occupation:
    Fun Lovin' Criminal
    Location:
    London
    Home Page:
    Sorry OP, I was a little blunt with my previous post.
    Yes, it is a nice idea and would make things easier for some people but it is a huge security issue.
    The questions you have to ask yourself is:
    Why would anybody trust your site to access their accounts?
    Why would aff companies allow access to a 3rd party app?
    Why would aff companies allow access to their data?
    Those are the immediate things I thought of but as I just got out of bed, I am sure I could come up with a whole lot more given time.

    The alternative is not to build a website, but a desktop application but again security would have to be top priority.
     
    • Thanks Thanks x 2
  11. mojdk

    mojdk Junior Member

    Joined:
    Jan 5, 2014
    Messages:
    154
    Likes Received:
    52
    Thanks for your feedback. You got some good points.
    A lot of affiliate companies already allow third party access to data as this though various API's. Some require a certain authentication, so that you only can get access to your own data and not other users data.

    The real "issue" is the question "Why would anybody trust your site to access their accounts?"
    And this is really the achilles heel of this idea, because a company such as ClickBank only allow access to their API with your regular username and password.
    And the problem with this, is that I would have to store these credentials un-encrypted in my database, resulting in some potential security issues.

    That being said, products as 1password, also store cleartext passwords, and a lot of people seem to trust them just fine..