testme4ever2

ok, i understand your points. Thanks for the feedback.

what would be a reasonable rate to pay then?

Thanks.

i guess no brazilians here? :(

not sure if it helps, but have you try lawdingo?

Thanks for your input. I see the viral point if there is an auto wall post, but if user has to approve wall post, unless there is an incentive (like in game app when user tweet or FB post, they would get golds or coins for the game), I do not see why users would post in their wall unless they are truly a fan to the app/site/marketplace.

I am asking this question as I am trying to decide if I should implement FB connect to the marketplace startup that I am working on. If I do it, it would be for

sign up / registration

login

wall post when user post a listing

wall post when user buy a listing

the only thing that I find it a value is the wall post, but then if user does not authorize it, then it's useless nonetheless (unless I give incentive to post).

But wouldn't the same user a fool as well using FB connect as a login to all the forums and marketplaces? If one manage to crack his FB account, then go to the apps list, and sure the hacker has access to all of the forums, marketplaces, and other sites that uses FB Connect.

On the other hand, if you use one email and same password across all sites (but different email password), even if the hacker hacks the email, the hacker does not have the access to forums, marketplaces, etc. The hacker would have to hack each individual sites.

I see. Yes, that's what I thought as well, privacy issue.

But from the visitors point of view, if they use one email for all their forums/site/etc, wouldn't it be the same thing? If I am a user who value my privacy, I would not want to sign in via FB, instead I would use one email and one password for all. Easy to remember as well.

That's why I do not see why FB Connect is an important feature.

Thank you for your response. So how should I protect the passwords? I assume you mean the users password?

Why source code is not the value? If they could hack it, then they can just deploy the same code in a matter of weeks?

oh, any suggestion on how to implement the admin backend access? Currently my admin access is just a subdomain, which I think is not secure access (although it requires admin credentials to access it).

Thank you.

check this thread

https://news.ycombinator.com/item?id=6594204