Website that allows user subdomains - what subdomains should I block people from using? [closed] - subdomain

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.
Closed 11 years ago.
My website is going to allow users to choose their own subdomain. I've got quite a list going but want to see if there are any others out there that you think would be worth it...
Thanks in advance!
$banned_subdomains = array(
'cname',
'www',
'test',
'js',
'css',
'cache',
'static',
'img',
'images',
'mail',
'ftp',
'cpanel',
'whm',
'webmail',
'webdisk',
'ns',
'ns1',
'ns2',
'ns3',
'ns4',
'ns5',
'register',
'pop',
'pop3',
'beta',
'stage',
'dev',
'http',
'https',
'abuse',
'admin',
'donate',
'store',
'payment',
'smtp'
);

I have a list going, too. Thinking about throwing it up on github.
Here it is so far, including what the OP and other comment have mentioned.
about
abuse
acme
ad
admanager
admin
ads
adsense
adult
adwords
affiliate
affiliatepage
affiliates
afp
analytics
android
answer
answers
ap
api
apis
app
appengine
appnews
apps
asdf
bank
base
beginners
beta
binaries
binary
blackberry
blog
blogs
blogsearch
book
books
buy
buzz
cache
calendar
cart
catalog
catalogs
chart
charts
chat
checkout
client
clients
clients1
cnarne
code
community
confirm
confirmation
contact-us
contacts
contactus
content
core
corp
countries
country
cpanel
css
dashboard
data
desktop
dev
developer
developers
dir
directory
dl
docs
documents
donate
download
downloads
e
earth
email
enable
encrypted
engine
error
errorlog
errors
features
feed
feedburner
feedproxy
feeds
file
files
finance
folder
folders
forum
forums
friend
friends
ftp
fuck
fun
fusion
gadget
gears
geographic
gettingstarted
gmail
go
goto
gov
graph
graphs
group
groups
help
home
html
htrnl
http
https
image
images
img
investor
investors
invoice
invoices
ios
ipad
iphone
irnages
irng
items
js
lab
labs
legal
list
lists
local
locale
location
log
logs
m
mail
manage
manager
map
maps
media
message
messages
misc
mms
mobile
model
models
money
movie
movies
my
net
network
networks
new
news
ns
ns1
ns2
ns3
ns4
ns5
org
other
p0rn
pack
page
pages
partner
partnerpage
partners
payment
people
person
places
podcasts
pop
pop3
popular
porn
pr0n
pricing
print
private
prod
production
profile
profiles
promo
promotions
proxies
proxy
public
purchase
queries
radio
random
reader
redirect
register
registration
release
reports
research
resolve
resolver
rnail
rnicrosoft
rss
sale
sandbox
scholar
search
seminars
server
servers
service
services
shop
shopping
shortcut
shortcuts
signin
signup
sitemap
sitenews
sites
sketchup
sky
slash
slashinvoice
slut
sms
smtp
soap
software
sorry
spreadsheet
spreadsheets
srntp
ssl
stage
staging
static
statistics
stats
store
suggest
suggestqueries
support
survey
surveys
surveytool
sync
sysadmins
talk
talkgadget
test
testing
text
tool
toolbar
toolbars
tools
trac
translate
translation
translator
trends
txt
ul
upload
uploads
validation
validations
video
video-stats
videos
voice
w
wave
webdisk
webmail
webmaster
webrnail
whm
whois
wifi
wiki
ww
www
wwww
xhtml
xhtrnl
xml
xxx

Consider:
f--k, s--t,
xxx, adult, pr0n,
rss, soap, xml, html, xhtml,
bank, org, gov, microsoft,
cnarne, rnail, irng, irnages, srntp, webrnail, htrnl, xhtrnl, rnicrosoft

Related

How to select a Medical Research use case

On the page https://developers.google.com/fit/policy?hl=en#appropriate_access_to_and_use_of_google_fit_apis it says the following:
Do not use Google Fit APIs for applications, services, or features designed to collect or combine user data for human subjects research, medical research, or any other similar research overseen by an Institutional Research Board or Ethics Commission unless you receive prior written approval to such use from Google. Select a "Medical Research" use case during the scope access request process and you will receive additional information on how to proceed.
I'd like to use the Google Fit API for a medical research purpose, but I cannot find where I'd select the "Medical Research" use case. Can anyone show me where I can find this?
I'd be using the Google Fit API to start tracking steps on the user's Android device and read these steps.
Scope = Purpose of your medical research and used API scopes
I think it is rather misleading, in fact when Google documentation talks about medical research scope, they do not mean it at the API level.
What they mean is that you have to state in your app registration application that you would be using your app for a "medical research purpose", along with the fit API scopes that you would be using for your medical research.
You can read the following link that describes the authorization process intended by Google, but I will will detail below how to proceed:
Enable Fitness API and create credentials
After enabling Fitness API in your Google API Console for your project (create a new one if you haven't already) then you have to apply for verification and submit the relevant supporting information for why your app needs "Medical Research" scope (basically documents related to the purpose of your medical research, which University or Lab you are working for etc). This choice happens right after adding credentials to your project when you have to set up OAuth consent screen:
Filling the app registration form
Filling accurately will speed up the verification process
On the first tab, you will likely have to provide a very solid application privacy policy link (stating which data you access and for which purpose):
Select your API scopes
Then you will have to add the scopes (scopes as API) that you would need for the purpose of your medical research:
The one you will need to read the steps is:
scopes your app needs to request.
https://www.googleapis.com/auth/fitness.location.read | Read location data from the Google Fit platform. | Restricted
Enter your Medical Research "Scope"
Finally, and this is where you provide all information related to your medical research, in the optional info - meaning optional for most users, but not so optional for medical research - already briefly stated in your privacy policy link: Its purpose, how it is financed, by which entity, what data your will be using etc. Be as clear as possible as it will speed up the review process.
Provide links about your university or company website, research papers that you have already published, or by yours peers related to the scope of your medical research:

How to automate publicly publishing Facebook Messenger bots without app review?

We're completely noob in this automated bot publishing space, so please bear with us :)
We have observed that to make a Messenger chat bot publicly available, we need to get it manually reviewed and only then it's available to the world.
However, chatbot builders like chat fuel & motion.ai do AUTOMATICALLY publish the bots without any manual review process.
A brief guidance so that we understand how these provider are providing automated bot publish will be much appreciated.
Are there any APIs which does automatic bot publishing?
How is the App review process automated?
OR, is the app review process completely omitted?
You don't review the chatbot manually from Facebook.
However, You must need to submit the Facebook app for manual review which serves the webhook to your chatbot (all chatbot associated with that app, to be precise).
As you mentioned chatbot builders like chat fuel & motion.ai do
AUTOMATICALLY publish the bots without any manual review process.
They allow chatbot publishing using platform which in backend uses the FB graph API's to link the chatbot to there app, the app which they have already reviewed from FB. In layman term, single FB app serves to multiple chatbots.
Are there any APIs which does automatic bot publishing?
Yes, FB graph API is the answer for it. Search for Webhook API.
How is the App review process automated?
No, App review process is handled by FB team itself.
OR, is the app review process completely omitted?
No, You can't omit the app review process.
So technically speaking, there is no way around to avoid the app manual review process. This is the one-time process. Once your app gets reviewed, you can allow any chatbot to publish in association with your reviewed app.

How to integrate Spotify to commercial project? Android and iOS users

At the beginning, I want to apologize for non-developer question. I wasn't able ask this on Meta, because Meta requires 5 reputation just to be able ask any questions.
Question: We want to integrate Spotify for commercial project for Android and iOS users to make them able use music through Spotify.
So where we can get Spotify's approval? How we can sign a contract to start cooperation?
We asked this on Facebook in Spotify official page, they sent us here to ask these.
On the Spotify's website, no email to contact for.
With respect,
Rus
Operation department
Arielle from Spotify here.
If you create a application in the Dashboard on Spotify for Developers (https://beta.developer.spotify.com/dashboard/), you will be prompted to go through a commercial request form, which will ask you for more information about your app. The appropriate teams can then follow up about your request.

How can act-on create a subdomain on our website

At my company, they have a Wordpress site. Disclaimer: I'm a new hire here.
They also use a third party service/website called "act-on". Within act-on, we can manage our campaigns, generate webforms that submit data back to act-on and generate anchor tags that link to resources that act-on hosts.
I want to be clear, we upload documents to act-on. Then, act-on gives us links that we can place on our website to these documents. When a user clicks the link on our website, they are taken to a subdomain of our website that they did not create, to view the resource.
When I talk about "act-on", I'm referring to this service:
https://www.act-on.com/
Example:
We live at websitename.com.
The anchor tag that act-on creates, links to solutions.websitename.com/acton/resourcename
We didn't create a page or subdomain "solutions.websitename.com" and don't have any pages that reflect that.
I need to know how this works because their google analytics doesn't seem to track page visits to this subdomain.
How has act-on created some subdomain on our website? I don't understand that process. How can act-on link to files that they host, but the url be a subdomain of our website.
Thanks,
It is very similar to another company called reachlocal. They basically proxy all your web content, and in a lot of cases they even put up proxy phone numbers and record the calls audibly and transcript them. All this in addition to marketing campaigns such as analytics, PPC and alike.
A business essentially gives them this right when signing up and are told about it upfront.
It is all for the sake of keeping record in order on file of everything taking place, with web presence and "presented in a friendly interface and graphs. Which also allows employees to listen to recorded calls to "see how the employee does"
More than likely from my experience is they were given the keys for all web presence, including web, analytics, social sites and so on by the owner or project manager.
Unfortunately, by proxying all the websites they in turn get a lot of Google ranking, but it can be a valuable service for some.
Bottom Line: Someone at your job, signed up, gave them the go ahead to perform tasks such as proxy domain names and are in fact paying them.

Publish an app on Google Play Store on behalf of another company

How can I (as a vendor contracted to develop an app for an enterprise) publish an app to the Google Play Store on behalf of an enterprise?
They don't have a Google Play account set up but want the app to appear under their brand in the Google Play Store.
What's the correct technical (and legal) process I should follow to set up their account and give my own company access to publish on their behalf?
The bare minimum requirement that I am aware of is that your company should get a written consent from your client, authorizing your company to use their company's name, logo, brand, etc for the expressed purpose of being displayed in Google Play.
My company had done something similar, we publish branded apps for clients, though our company's name is used as the vendor name. One of those apps got removed because some zealous legal guy in one of our client companies found the app and, unaware of the cooperation between the companies, filed a complaint to Google. The app was reinstated without much fuzz after getting that guy to send another email to Google requesting the app to be reinstated, so it looks like Google doesn't have anything against this (assuming your client doesn't reside in a sanctioned country).
You can give them advance notice by providing legal documents via this link
https://support.google.com/googleplay/android-developer/answer/6320428
From the page itself...
The Google Play App Review team accepts advance notice about your
upcoming app or store listing publishing event.
We only accept advance notice in the following scenario(s):
You have written documentation proving that you have permission to use
a 3rd party's intellectual property in your app or store listing (e.g.
Brand names and logos, graphic assets, audio, etc.). You have gambling
or casino-style elements in your game, and need to provide your Korean
Game Rating and Administrative Committee (GRAC) rating certificate to
Google so your game can be distributed in Korea.
Lesson learn by one suspended app. Hope this will help others. If your app suspended for such reason you can also contact them via link in the suspension email.