IB Suggestions & Improvements

Not sure if this has been requested yet......

A longer password for login.

An eight character maximum can be fairly easily hacked, how about 15-20+ character maximum.

Thanks,though, for enabling us to use special characters for the password creation.

Yes, yes...there's the secure ID, but who's to stop someone from logging into TWS and taking the otherside of a gravy trade.
 
Options combo orders wants:

- a template for Iron Condor.

- whenever I put together an options combo, TWS pops up a window explaining what it means to buy/sell the combo. This is great. I would also like this window to pop up every time a combo order is transmitted.

- a way to edit combo orders (add/remove legs, change strikes, etc.)

- last, but not least. The ability to trade combos in IRA's At the very least IB should permit trading combos comprised of cash-settled, European-style options.
 
IBj,

Thanks so much for you interaction with this thread. To me, it means that IB is serious about customer service, which is very important to me, a new client.

Humbly,
Stec
 
Quote from nassau:

can some one at IB please tell me why we have no bid/ask on any options..has been like this for over 5mins..

w
More...

Call me ignorant, but posting this problem in a 3rd-party internet message board won't help you. Report it to IB with a web ticket or support chat.
 
Quote from Stecchino:

Call me ignorant, but posting this problem in a 3rd-party internet message board won't help you. Report it to IB with a web ticket or support chat.
More...

I posted the post as is seems sometimes you get a faster response on ET. I was also on hold at the time and was looking to find out if others were having similiar problems as myself.
I was not sure if it was associated to the slow execution that has been occuring as some ET traders have posted.

thus my reason for 3rd party posting.
but thanks for the information instruction.

w
 
Quote from MR.NBBO:
An eight character maximum can be fairly easily hacked, how about 15-20+ character maximum.

Can you help me understand how?

With about 100 possible characters, an 8 char password is 1x10^16 combinations. Assuming a brute-force attack gets there an average of half-way through the total, and 1 second per try/fail (it's actually a bit worse than that with TWS, much higher with AMS), I get about 0.6x10^11 days to crack. This assumes that there is no lockout mechanism after a certain number of unsuccessful attempts (is there, IB?). If you could throw a million zombie machines at it, that's still 0.6x10^5 days.
 
Quote from nassau:
I posted the post as is seems sometimes you get a faster response on ET.

This particular thread, though, is supposed to be for suggestions. If it degenerates into an operational issue forum, it might not get the attention it's been getting from management.
 
Quote from alanm:

Quote from MR.NBBO:
An eight character maximum can be fairly easily hacked, how about 15-20+ character maximum.

Can you help me understand how?

With about 100 possible characters, an 8 char password is 1x10^16 combinations. Assuming a brute-force attack gets there an average of half-way through the total, and 1 second per try/fail (it's actually a bit worse than that with TWS, much higher with AMS), I get about 0.5x10^11 days to crack. This assumes that there is no lockout mechanism after a certain number of unsuccessful attempts (is there, IB?).
More...

A PC (or string of networked in-line computers), can attempt millions of brute force tries per second.

IF you use all possible characters types allowed, an 8 character password shouldn't get broken. This does take some work, actually, creating a good password with only 8 maximum characters. Most people aren't nearly safe enough with 8.

It completely depends on how you use the characters allowed.

Using only lower case, alphanumeric, you can crack 8 characters in several seconds on a good machine.

Upper and lower case, alphanumeric, 8 character password (52 possible characters in it ea.), it can take a few days to a few weeks.

Upper and lower case, alphanumeric, AND FULL ASCII character set used in creating a 8 character password (94 possible characters in ea. place), it can take many millenia to crack.

I've seen no lockout on TWS for failed attempts.

I'd venture that 80%+ of standard 8 character passwords take only seconds, to several days to crack. Everything is exponential, whether it is the processing power of the computer(s) or the length of the password, or the number of different types of characters used in password creation.

Here's a quick google of a really old article about cracking on on old 400+mhz machine (But there is good general advice to be found here as well for the average joe, about passwords).

http://geodsoft.com/howto/password/cracking_passwords.htm
 
You must log in or register to reply here.
Back
Top