Recent content by patl

As a "small fish", why do you want to use FIX instead of the IB (or MBTrading) API?

The token has an internal clock. Every 30 seconds (or 1 minute or whatever), the code shown on the LCD is updated using a cryptographic hash of the internal clock and a "secret" known only to the device and the server. Thus the code changes dramatically and unpredictably every 30 seconds...

Anybody who talks about the benefits of a security mechanism without discussing the costs is an idiot. Ever heard the phrase "single point of failure"? I have multiple computers and multiple Internet connections. No single failure could keep me out of my account... Until now. Starting...

Yes. Logging actual keystrokes is only one form of attack. Another form, at least as common, is to monitor the contents of all HTTP/HTTPS POST requests. See for instance http://www.symantec.com/security_response/writeup.jsp?docid=2006-080315-1729-99&tabid=2. This is sufficient to capture most...

The short answer is "no". A sniffer program can monitor everything you type at your keyboard as well as everything your machine sends to the server, including whatever is being derived from your fingerprint. The only defense against this is a "challenge/response" system. This is where the...

As far as I can tell, RASH is just one of the protocols that Nasdaq participants (brokers, market makers, etc.) can use to manage orders. It's like a proprietary version of FIX. http://www.nasdaqtrader.com/trader/tradingservices/productservices/productdescriptions/rash.stm Full spec of the...

Oh yeah, somebody opened a second account a year ago just to hold it until now to make you look stupid. Are you really that dense and paranoid? I already answered your question implicitly. Here it is explicitly: NO. Holy cow there are some real morons on the Internet. I cannot believe...

Look again. Right next to my username, it says "Registered April 2006". That's right, I have been lurking for a year before I finally read something stupid enough that I just had to reply. Congratulations! - Pat

GTS is the only person on this thread with any idea what he is talking about. The only non-sensible thing he has done is bothering to argue with jimrockford at all. ("Never try to teach a pig to sing. It wastes your time and annoys the pig.") Yes, layers of security are good. Duh. That...