Shutterstock Photographer Forum :: View topic - Submit Site Security and Third Party Software

imagist · Site Admin Joined: 21 Mar 2006 Posts: 246

To All Submitters:

A number of software companies are collecting Submit site usernames/passwords from our submitters. These companies then use the info to access our Submit site and collect stats or upload content on behalf of that submitter. For a variety of reasons, and even if the submitter has given permission, we cannot permit this kind of uncontrolled Submit site access. These bots slow down our Submit site for everyone, and pose serious security risks to you since your payment details are available to them once they login to the Submit site on your behalf.

To prevent this, we are installing the http://recaptcha.net/ captcha system on the Submit site login page. You can read about it here:

http://en.wikipedia.org/wiki/ReCAPTCHA

Submitters will have to enter the captcha along with their username and password for Submit site access. We trust you will agree that this small additional required step is worthwhile if it will ensure the performance of the Submit site and, most importantly, in order to keep your private payment details secure. We may take other steps in the future as necessary to prevent this type of third party access.

We are happy to evaluate the requests for access to our data by third parties on a case by case basis. That way, if approved, we can provide separate access to only the relevant data, while keeping the rest secure and private. Any third party who wants access is welcome to submit an application to us at bizdev@shutterstock.com.

Please keep in mind that providing your username and password to a 3rd party content distribution tool or statistical service should be avoided. If you have done this already, we encourage you to change your password immediately and keep it private. Shutterstock can not control the security of your information if you provide it to another company or individual.

If you are concerned about a particular Third Party application, please notify us at submit@shutterstock.com.

If you are having technical difficulties entering the code please let us know below. This captcha is being added with performance, security, and privacy as our goals.

As always, we thank you for allowing us to represent your content.

Best Regards,

Shutterstock

bobbigmac · Joined: 15 May 2008 Posts: 129 Location: picNiche.com

Thanks for the info.

I've sent a request via the email specified.

Bob

mantonino · Joined: 27 Oct 2004 Posts: 1090 Location: Syracuse, NY

Please get our Lookstat access back asap. Thanks.

M

photohome · Joined: 08 Jun 2006 Posts: 4 Location: QLD, Australia

a rather odd move when a lot of websites in general are opening up access to their data to allow others to do all sorts of interesting things with it - like generate more sales directly from 3rd party sites.

I hope this is just a temporary login nuisance? is someone is working on an API to allow more controlled access to various levels of shutterstock data?

blackx · Joined: 12 Dec 2008 Posts: 4

This is a pitiful move, the only reason could be that bots are slowing down the site - I cannot accept the security reasons. If users are concerned about security, then they simply don't give their username/password to anyone else. But I want LookStat to have my password so it (and I) can track my data.

What will be next? Disabling PayPal because it's a third-party service?

nerus · Posted: Thu May 07, 2009 2:48 am

Thanks for this Information.

aletermi · Joined: 23 Oct 2008 Posts: 1

You should provide API for third party applications, as others microstock sites already do.

antonprado · Joined: 30 Apr 2008 Posts: 1

mantonino · Joined: 27 Oct 2004 Posts: 1090 Location: Syracuse, NY

ASAP like "ok, Lookstat is approved, let's get them back in" asap like now would be nice. :) Not ASAP like "we're bringing in someone to monitor the forums and your ideas will be used in the future" asap.

Give me a brek · Posted: Thu May 07, 2009 3:42 pm

How about not timing out the cookie as fast and letting it last 3 to 5 days. Then if we go om every 3rd day we won't need to log back in.

mantonino · Joined: 27 Oct 2004 Posts: 1090 Location: Syracuse, NY

Please?

krystof · Posted: Sat May 09, 2009 11:00 pm

Yeah getting Lookstat back on should be a priority....

yojik · Joined: 07 Mar 2006 Posts: 32 Location: Finland

Any news on this matter? I would like to see Lookstat working with Shutterstock ASAP or Shutterstock to provide some meaningful statistics themselves.

logoboom · Posted: Tue May 12, 2009 5:25 am

One more vote for working with lookstat.

lukaszfus · Joined: 14 May 2007 Posts: 6 Location: Poland

Yes, very odd.... looks like serious API problem over here. Ideal situation would be another limited acces login for a custom software.