[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

How to tell if your charting/testing software has your security interest in mind.



PureBytes Links

Trading Reference Links

It has been mentioned that there is the impression that if your run Black Ice
or something like that, your PC and its contents are secure.

Not true.

I'll give an example of how a secure RT internet charting/simulation looks
like.

Lets say you get RT data from Quote.com. 
You use one of the utilities that extract data from the quote.com data
application
qfeed, into ASCII files.
These ASCII files are then read by say Robert Miner's charting application.
And lets
make believe Miner software also does historical simulation.
First, you use a proper firewall software, not Black Ice, that allows you
to permission
which applications can make a call out to the net.
You permit ONLY the qfeed application to talk TO the quote.com server. (and
nowhere else)
You DO NOT permit the Miner's software charting/simulation to send ANY data
out to the
net. Hence, no trojan code, if any, in the Miner's application could ever
send out your
proprietary indicators or systems.

A developer doing something like this has your best interest in mind.

If the software application, God forbid, resides in a web browser, or the
charting/simulation
itself makes the call to the data server over the internet, you CANNOT
firewall it like in the above
example. A SANDBOX would not work. It must have access to the indicators
and systems
directory right?

And for upgrades, it should also be via downloading a execute or zip file
and then you apply
the upgrade, allowing you to virus scan the files and by means of a connect
to the internet 
scheme.

You should be skeptical of the intentions of any developer that does not
follow the secure design 
example. Because, for all practical purposes, it is as if you have Back
Orifice on your computer.

The secure design schematics have been known for a while. Software which
uses the INSECURE 
designs are the equivalent of the Y2K bug for security.

Bear this in mind your considering your next RT charting and simulation
software purchase.





"Trust Allah - and tie up your camel".