HTTPS , Linux/Wine
-
Considering the value I place in my projects in fxDreema, I would have liked if fxdreema.com used Hypertext Transfer Protocol Secure (HTTPS) to better secure communication between my computer and your server. I think this is a fair request considering your servers are guarding my ideas and valued/important property.
And considering the desktop version needs internet loggin. I think HTTPS is a must for such a website.
I would like to ask if your desktop version can be used in Linux with WINE ? Or if you could make a Linux desktop version ?
You currently have only Windows desktop version. -
To be honest, I really don't understand what is the idea behind HTTPS. I tried to get it once, but my conclusion is that this is a way for someone to earn easy money
If someone can explain to me (like I'm 5 years old) exactly why this is good... maybe I can understand it. But if the only reason is that because some people are saying that this is very very important, then I will not agree. For example, many people say that antivirus software is a must, but I don't use antivirus software and I don't have viruses.fxDreema is to be used because of MetaTrader 4 and MetaTrader 5. I think they does not have Linux versions. I dont know if fxDreema can work with Wine. Maybe, why not, but I didn't tested that.
The local version sends only username and password to the server, then the server returns the profile information. No data about the projects is transferred, so the only things that you can be scared for are: username, password, email address.
I also have a plan to make the local version totally disconnected from internet, I think I can make that some day. Well, maybe I should leave the new-version-check
-
Without HTTPS anyone listening/capturing internet traffic data from fxdreema's server or listening at/outside the users home network will know the users password, username and what they do at your website. They can just log in with the users username and password and copy all the users EA's, just by listening / capturing internet traffic data from your servers/users network/iP address.
And they can do this to any user logging in to fxdreema.HTTPS encrypts all data between the user and the server. So no one can just intercept the internet data and get the users username and password and all that users EA's.
It is now without reason gmail, twitter, facebook, youtube, online banks... and anyone protecting private/sensitive information use HTTPS.
Would you like someone getting hold of your username / password for these sites and stealing your data and using your account maybe ?
That is what HTTPS is for protecting. And to be honest, you are holding valuable, private and sensitive data by users that you have an obligation to guard and protect. Because as of now, they are really sitting ducks and not protected at all from hijacking and theft, at all !I am using Metatrader 5 on linux (did not test MT4, but Wine website says works fine) without a single error/problem.
I just thought it would not take you much to see if desktop version works on wine or maybe make a Linux version also if not (or even Mac for those that use it). Not everyone use Windows, consider them too if it is not too much/difficult. This is not only a Windows world you knowPS: Great program and amazing support
-
I'm using 3rd party software to build the .exe file, otherwise I am totally unable to program the whole stuff in C++. I can read in their forums that programs generated with this software can work with emulators in Linux.
The last time I tried to install Linux+Wine I was absolutely disappointed from Linux. After that experience I don't want to touch Linux anymore. Well, I have Ubuntu Live DVD just in case I have to delete something bad from Windows, but the fact is that Linux is not from my world. I hope that now, 4-5 years after that, Wine is better than before.
There is a very good reson why some websites are using HTTPS. The reason is that they can say "Look at us, we are great!". While most of the websites does not have money to pay such a thing, it is very visible when some of them shows "https" instead of "http". This probably makes people to think "Wow! This website must be exceptional!".
I don't live in USA and I am not security-obsessed. Personally I don't care if the site is https or http. I prefer http because there are no messages like "We have small s and you must worship us". But if someone can stole my data, this will be experience for me and at the end I will understand something new. I really prefer someone to stole my money instead of being paranoiac.
And after all, I think that if you must be scared from someone, this should be your broker. Your broker is the one that is really holding your money. Also, are you sure that your EAs are sitting there untouched while using MetaTrader? Most of the .mq4 (,mq5) files are kilobytes and in theory it is sooooo easy to transfer this information through internet.
The picture of someone sitting near your house with a small laptop in the dark, trying to get your fxDreema password from the air just to see your projects does not sound so much realistic to me. At least not compared to the possible secret ability of MetaTrader to stole EAs by itselfBy the way, I always wondered that - what happens if someone really stole another person's EAs? How can this hurt?
-
Could I make a wee suggestion regarding Linux and Wine? I too run MT (MT4) on Linux, and apart from the speed slider in the tester being difficult to use, all seems 100%. With regards to fxDreema, I suggest installing Oracle VM Virtual box and running a virtual Windows session. I'm using XP SP3 because its easy and very cheap!
-
I'd like to update this. The MT4 tester has a problem on Linux/Wine. See here: http://appdb.winehq.org/objectManager.php?sClass=version&iId=2893&iTestingId=47131 and here: http://www.forexfactory.com/showthread.php?t=252050. Use the Virtual machine you installed in Oracle VM Virtual Box for back testing!
-
Just as a thought for a work-around for back testing in MT4 on Linux/Wine, how about using the "Time filter" block to specify the start and end point for when your EA will be active. I haven't really tested this, but presume you'd need to use "local time" and not "server time" and "Start time mode = Component format" in the block.
However, if your data is large, it could take time for the tester to reach your start date. This is true for data from Alpari, for example, which starts with daily data from 1971, and took several hours to reach my 2000 start date.
Lastly, remember to OFF tick the "Use date" and "Visual mode" boxes in the MT4 back tester.
Hope I've got this all correct!
-
For anyone reading this (!) I'm now going to recommend that you don't optimise or back test in Linux/Wine. You can use a virtual machine in Linux to do these tasks, but it must be a Windows one. My tests have shown inconsistent results using Linux/Wine, but not using Windows virtual machines.
I believe there are plenty of people using Linux/Wine to trade using MT4, but don't back test or optimise outside of Windows.
Sorry!
-
Here is a link I was just reading that sums up my thoughts about http VS. https.
The first two sections - https://www.techsupportalert.com/improv ... curity.htmI use Tor and VPN to get around http, but none of these are a replacement or as secure as https, as they both have current and possible security holes and can not replace https. Http sends all information in plain text.
If someone stole my EA or yours, it would be like stealing my property / asset, not ok with me.
You can make your choice if this is ok or not, but you should not and can not make the choice on my behalf or others. If it is within your powers, you should not play with users security. You have responsibility for users security and their EA from start to finish on your site, you are informed now.Do you mind telling me how Brokers / Metatatrader can steal EA's ? It is a quite important thing I know little about yet ?
On something unrelated, I recommend Forex Rebates I just came across.
I have not tried yet, only considering and reading about these so far (nothing to do with them and not promoting them. Read reviews before selecting any/if any of them). But looks like a good idea.http://www.cashbackforex.com
http://www.forexrebatecentral.com
http://www.globegain.com
http://www.fxrebategurus.com
http://www.highrebateclub.com
http://www.kickbackfx.com
http://www.rebatearmy.com
http://www.piprebate.com
http://www.cashonforex.com -
I actually bought sertificate, but I can't make it work. I just don't understand this, I tried one day but after that I quit trying
I also wonder if this can slow down the connection speed. At the moment I'm trying many different approaches only to speed up everything, and the last thing I want to add is something that will slow it down 
-
Interesting, I'm hearing "forex rebates" term for the first time. I hope that this is not the next illusive scam scheme
-
I'd like to update my previous entries.
Previously I'd been working with MT4 only. Now I have trialled MT5 in Linux, using the Wine emulator, and found it to work perfectly for testing purposes. I have not traded with MT5 in Linux, but have read somewhere that trading may not be wholly advised due to some latency issue. I'd therefore recommend the use of Oracle VM Virtual Box running Windows for trading purposes if your overall platform is Linux.
The MT5 tester works fast in Linux / Wine.
-
Someone using other platforms, not MetaTrader? For example cTrader?
