If You Sell Online, Protect Your Virtual Goods Properly

Back in 2007 I discovered by accident that virtual goods sold on the large digital marketplace Clickbank were not protected properly from unauthorized access (see Clickbank we have a problem). Five years later, I’m going to find out if Clickbank has resolved the issues, and if other marketplaces or products are also improperly protected from third party access.

Before I start, I’d like to point out that downloading those products without having purchased them first is not legal. My main motivation for writing the article is to raise awareness for the issue.

If you look at the Clickbank order process, you will notice that payments are handled by Clickbank, but that the products are provided by the merchants on their sites. The big issue here is that customers do not need accounts to buy the products, and that this means that vendors cannot protect their download pages by locking out everyone who has not an account.

Two core issues come together here:

The product download page is not protected, for instance by making it only accessible to registered users.Search engines may index those links so that they become available publicly on the Internet.

The process itself has not changed in the past five years. Clickbank suggests however that merchants run scripts on their Thank you Page that checks the validity of the page visitor. The company has started to pass along values, the cbreceipt value for instance, the proof of purchase value or the item number to the thank you page. Vendors can use scripting languages like PHP or Perl to verify the visitor before the download page is displayed.

Clickbank furthermore suggests to add a meta tag to the Thank You Page that protects it from getting indexed by search engine robots. (see Protecting Your Products)

The big issue here is that these are recommendations, and that many Clickbank vendors are not making use of them.

If you search for “CLKBANK Download instructions” or CLKBANK “save as” for instance, you will come up with dozens, if not hundreds of product Thank you pages. The verification script could protect the download pages, but most sites during tests did not have that implemented. If a Thank You Page is indexed, it is an indicator that the vendor has not implemented the meta tag, and it is therefor very likely that the verification script has not been implemented as well.

You will find some broken links there. Vendors often change their Thank You Page url when they notice that it has been leaked on the Internet.

Is Clickbank the only digital marketplace that is favoring ease of access over product security? No it is not. Warrior Special Offers, or WSO, is another merchant where this is happening. These products concentrate on the Internet Marketing niche. When you search for wso thank you you will again find dozens of results that point directly to product download pages.

Those two are not the only marketplaces where virtual goods are sold.

Solution

If you, as a vendor, are limited by the marketplace protection-wise, you might want to think about switching the marketplace. It is not always a feasible thing to do, especially if the marketplace you are using is the only big player in your niche. Clickbank vendors should implement the protection suggested by the marketplace to protect their goods from being indexed by search engines and downloaded by people who have not purchased them.

Similar options may or may not be available on other marketplaces.

Enjoyed the article?: Then sign-up for our free newsletter or RSS feed to kick off your day with the latest technology news and tips, or share the article with your friends and contacts on Facebook or Twitter. Clickbank we have a problem
How To Properly Protect Your Facebook Account, Login
How To Properly Protect Your Google Account, Login
Should You Get A Virtual Credit Card For Online Purchases?
Properly Reset Firefox Download Actions About the Author:Martin Brinkmann is a journalist from Germany who founded Ghacks Technology News Back in 2005. He is passionate about all things tech and knows the Internet and computers like the back of his hand. You can follow Martin on Facebook or Twitter.Author: Martin Brinkmann, Sunday March 4, 2012 -
Tags:clickbank

You are here: Home » The Web » If You Sell Online, Protect Your Virtual Goods Properly

Click on the following link(s) to read more about The Web

View the original article here

Protect Files From Unauthorized Access With Encoding Decoding

Full disc encryption or encrypted container files are useful to prevent unauthorized access to a larger number of files. This may feel like overkill though if you only want to make sure that a single file is protected from access. That’s where a program like Encoding Decoding comes into play. The program, available as a portable version and setup, can be used to encrypt and decrypt individual files in record time.

All that needs to be done is to drag and drop a file into the application window to encrypt or decrypt files. A password prompt is displayed if you drag and drop an unencrypted file into the program interface. This password along with an internal algorithm is used to encrypt the file, so that only users with the password can decrypt it to access its contents. Encoding Decoding displays the password strength of the selected password directly in the program interface which can act as a guideline for users who want to make sure they select a secure password.

Please note that the original file will remain on the system. If you do not want that, you need to delete it manually as there is no option to delete the original file automatically after a successful encryption. Check out securely delete files if you want to delete the file so that it cannot be recovered anymore.

The decryption works in exactly the same way. Drag and drop an encrypted file into the program interface and enter the correct password to decrypt the file. The file is then saved to the same directory the encrypted file is stored in.

Users who do not want to drag and drop files into the interface can alternatively click in the program window to open the file browser. The program supports three different encoding algorithms which are unfortunately not explained in the program window, help file or the developer page.

Windows users interested in the program can download it from the developer website. It is compatible with all recent 32-bit and 64-bit editions of the operating system.

Enjoyed the article?: Then sign-up for our free newsletter or RSS feed to kick off your day with the latest technology news and tips, or share the article with your friends and contacts on Facebook or Twitter. Password Protect Files
SecretSync, Security Layer To Protect Sensitive Files On Dropbox
Protect your data from physical access
Password protect files and folders in Linux
Protect Files in Windows by locking them About the Author:Martin Brinkmann is a journalist from Germany who founded Ghacks Technology News Back in 2005. He is passionate about all things tech and knows the Internet and computers like the back of his hand. You can follow Martin on Facebook or Twitter.Author: Martin Brinkmann, Monday January 30, 2012 -
Tags:file encryption, windows software

You are here: Home » Software » Protect Files From Unauthorized Access With Encoding Decoding

View the original article here