NexusFi: Find Your Edge


Home Menu

 





How safe are downloads and add ons?


Discussion in Traders Hideout

Updated
      Top Posters
    1. looks_one DavidHP with 1 posts (5 thanks)
    2. looks_two xplorer with 1 posts (6 thanks)
    3. looks_3 ralett with 1 posts (2 thanks)
    4. looks_4 Quick Summary with 1 posts (0 thanks)
      Best Posters
    1. looks_one xplorer with 6 thanks per post
    2. looks_two DavidHP with 5 thanks per post
    3. looks_3 MiniP with 3 thanks per post
    4. looks_4 ralett with 2 thanks per post
    1. trending_up 736 views
    2. thumb_up 16 thanks given
    3. group 2 followers
    1. forum 4 posts
    2. attach_file 0 attachments




 
Search this Thread

How safe are downloads and add ons?

  #1 (permalink)
 ralett 
Thousand Oaks, Calfornia
 
Experience: Intermediate
Platform: NinjaTrader 8
Broker: Ninja with Rithmic
Trading: CL NQ RTY
Posts: 31 since Mar 2018
Thanks Given: 14
Thanks Received: 46

Not sure where to post this but I have a general question about downloading scripts, add ons etc.

I have been using NT8 for a few months now and I love the fact that there are so many 3rd party scripts, indicators, add ons etc available to enhance the platform. That said, I worry a bit about security. I'm curious about people's thoughts on how you protect yourself from the potential of downloading malicious code.

I realize there is a "self policing" aspect to a forum like futures.io but there are also many sites that offer "free" Ninja downloads.

Has anyone ever downloaded an indicator or add-on and had it grab your login/password info or automatically execute trades without your knowledge, or worse yet, drain your brokerage account?

Maybe I am being paranoid or just ignorant, but there is money involved here and where money flows, greed follows.

Are there tools or techniques one can use to ensure you are only downloading "clean and well behaved" code?

Thanks in advance!

Started this thread Reply With Quote
Thanked by:

Can you help answer these questions
from other members on NexusFi?
Exit Strategy
NinjaTrader
NexusFi Journal Challenge - April 2024
Feedback and Announcements
Futures True Range Report
The Elite Circle
Online prop firm The Funded Trader (TFT) going under?
Traders Hideout
NT7 Indicator Script Troubleshooting - Camarilla Pivots
NinjaTrader
 
  #3 (permalink)
 
MiniP's Avatar
 MiniP 
USA,USA
Market Wizard
 
Experience: Intermediate
Platform: NinjaTrader
Broker: NinjaTrader Brokerage
Trading: ES,
Posts: 1,157 since May 2017
Thanks Given: 1,109
Thanks Received: 2,943



ralett View Post
Not sure where to post this but I have a general question about downloading scripts, add ons etc.

I have been using NT8 for a few months now and I love the fact that there are so many 3rd party scripts, indicators, add ons etc available to enhance the platform. That said, I worry a bit about security. I'm curious about people's thoughts on how you protect yourself from the potential of downloading malicious code.

I realize there is a "self policing" aspect to a forum like futures.io but there are also many sites that offer "free" Ninja downloads.

Has anyone ever downloaded an indicator or add-on and had it grab your login/password info or automatically execute trades without your knowledge, or worse yet, drain your brokerage account?

Maybe I am being paranoid or just ignorant, but there is money involved here and where money flows, greed follows.

Are there tools or techniques one can use to ensure you are only downloading "clean and well behaved" code?

Thanks in advance!

never had any issues with the indicators on here but I always scan downloads, Im sure whatever virus software you have on your computer you can do that to.

-P

"Truth is not what you want it to be; it is what it is, and you must bend to its power or live a lie"-Miyamoto Musashi
Visit my NexusFi Trade Journal Reply With Quote
Thanked by:
  #4 (permalink)
 
xplorer's Avatar
 xplorer 
London UK
Site Moderator
 
Experience: Beginner
Platform: CQG
Broker: S5
Trading: Futures
Posts: 5,945 since Sep 2015
Thanks Given: 15,447
Thanks Received: 15,292


ralett View Post
Not sure where to post this but I have a general question about downloading scripts, add ons etc.

I have been using NT8 for a few months now and I love the fact that there are so many 3rd party scripts, indicators, add ons etc available to enhance the platform. That said, I worry a bit about security. I'm curious about people's thoughts on how you protect yourself from the potential of downloading malicious code.

I realize there is a "self policing" aspect to a forum like futures.io but there are also many sites that offer "free" Ninja downloads.

Has anyone ever downloaded an indicator or add-on and had it grab your login/password info or automatically execute trades without your knowledge, or worse yet, drain your brokerage account?

Maybe I am being paranoid or just ignorant, but there is money involved here and where money flows, greed follows.

Are there tools or techniques one can use to ensure you are only downloading "clean and well behaved" code?

Thanks in advance!

That is the reason why 'obfuscated code' (e.g. code hidden in .DLL) is not permitted on FIO. The code for any indicator here is open for all to see.

Reply With Quote
  #5 (permalink)
 
DavidHP's Avatar
 DavidHP 
Isla Mujeres, MX
Legendary Market Wizard
 
Experience: Advanced
Platform: NinjaTrader
Broker: Ninjatrader / Optimus Futures / AmpFutures
Trading: ES / 6E / 6B / CL
Frequency: Every few days
Duration: Minutes
Posts: 1,609 since Aug 2009
Thanks Given: 11,328
Thanks Received: 2,743

As with most things, the user needs to be cautious.
Don't download things from questionable sources.
As was said above, be very cautious of an indicator that is not fully visible (no DLL's)
If a script has a DLL it is because something is 'hiding'.

Yes I know it is usually to 'PROTECT' the code from being pirated.
But if the source is not FULLY trusted, you don't know if it has been 'tampered' or 'hacked'.

The easiest thing to do is not use obfuscated coded indicators but if you MUST make sure it is from a trusted source.

If you don't know how to examine indicators or have a question about an indicator being malicious, you can ask on this forum and post the indicator.
Someone will check it out for you if you ask nicely.

Rejoice in the Thunderstorms of Life . . .
Knowing it's not about Clouds or Wind. . .
But Learning to Dance in the Rain ! ! !
Follow me on Twitter Reply With Quote




Last Updated on August 14, 2019


© 2024 NexusFi™, s.a., All Rights Reserved.
Av Ricardo J. Alfaro, Century Tower, Panama City, Panama, Ph: +507 833-9432 (Panama and Intl), +1 888-312-3001 (USA and Canada)
All information is for educational use only and is not investment advice. There is a substantial risk of loss in trading commodity futures, stocks, options and foreign exchange products. Past performance is not indicative of future results.
About Us - Contact Us - Site Rules, Acceptable Use, and Terms and Conditions - Privacy Policy - Downloads - Top
no new posts