Indicator: Mask your order number for the screenshot | Forex Factory

Options

Permalinks
Print Thread

Similar Threads

Whole Number - Half Number Indicator 1 reply

Searching for an indicator from the screenshot, MT4 0 replies

Indicator alert with screenshot 1 reply

Your nicest platform screenshot 0 replies

Screenshot with MT 4 replies

Attachments: Indicator: Mask your order number for the screenshot
Exit Attachments

Indicator: Mask your order number for the screenshot

  • #1
  • First Post: Edited May 19, 2012 10:18am May 17, 2012 8:47am | Edited May 19, 2012 10:18am
Hello,

Many of you are posting screenshots directly from MT4 terminal and there are visible some order numbers. Believe it or not, this can be big some security vulnerability.

http://www.maquett.com/notify/indica...factory/01.png


EDIT: There is much more elegant solution to hide order# than this indicator:
Quoting seekers
Un-check Tools->Options->Charts->Show trade levels. That is all

For historical reason below is the description of this indicator, maybe it will be useful to someone:

http://www.maquett.com/notify/indica...factory/03.gif

You are able to change:
- the color of the box (myColor)
- the width of the box (xBlock)
- the height of the box (yBlock)

For the next version I'll try to hide only the order numbers, not the whole left part of the terminal.

With this indicator you cannot hide who your broker is. You should use your "usual" way to do this.
Attached File(s)
File Type: mq4 Mask-orders-on-chart-v1.mq4   1 KB | 602 downloads
  • #2
  • Edited 9:18pm May 17, 2012 3:52pm | Edited 9:18pm
Quoting deian
Hello,

Many of you are posting screenshots directly from MT4 terminal and there are visible some order numbers. Believe it or not, this can be a big security vulnerability.
.

I have been puzzling about this one for a while and rather than spending more time, I thought I would ask. The word that strikes me the most is BIG. Seems to me something BIG would be well known and taken care of.

How can somebody knowing the trade identifier harm me? They don't know my broker (unlike others like OANDA which splash their names on the screen), they don't know my account and they don't know my name. Besides most charts show trades that aren't open anymore. How could a historical trade be of interest to a hacker?

Edit: I thought of another point - how would anyone know whether the screen shot was from demo or real money account?
  • #3
  • May 18, 2012 1:27am May 18, 2012 1:27am
I'll give you a very simple example.

I'm following EurAnalysis thread. For at least 10-15 people there I know where are located physically, who is their broker, are they trading demo or real (and on what accounts and swaps), the approximate lots that hey are trading and a lot of personal information - what food/drink they like, do they have girlfriend/wife, do they trade from home, what system they follow, what books they read, what websites etc. etc.

When you communicate with people for relatively long time it's completely normal to share personal information and you shouldn't be afraid of that.

But based on my experience I suspect that I can guess the passwords for at least 1-2 guys. Just with simple guessing. You can imagine what can do some skilled guy with appropriate software and hardware.

This is the fundamental reason. These numbers are one more piece of your personal information.

The technical reason is that there are people who can close your order simply by knowing it's number and your broker.
  • #4
  • Edited 3:21am May 18, 2012 3:05am | Edited 3:21am
Quoting deian
But based on my experience I suspect that I can guess the passwords for at least 1-2 guys. Just with simple guessing.
If I know your MT4 account# and password, I'd be able to log in to your account, and operate on your trades, in every way that you do.

Take your second screenshot, for example. If I log into your account, your box will not appear on my chart. And in any case, I can see that you've entered a sell trade at ~1.2687, so if I wanted to ascertain the order#, I could simply press Ctrl-T to load the terminal, and find a sell order at that price. Then I could close it, and any other orders you might have open, too. And I could entertain myself further by opening some big orders on your behalf, in the opposite direction. Then I could press Ctrl-O and go to the Server tab, and change the password on your account, locking you out of it.

Hiding the order# doesn't really achieve much. Account# and password are the key to opening the door.
  • #5
  • May 18, 2012 4:13am May 18, 2012 4:13am
I'm not MT4 server specialist, but I assume that the system works like this on a global level:

1. You (your MT4 terminal) authorize yourself in front of the server with user/pass
2. You (your MT4 terminal) tell the server to close order #123456

From my point of view there is a mechanism to overpass point 1, at least for some servers/brokers that are not well secured.

After that if you know the order# you can do what you want with it.

OK, I'll change the word "big" vulnerability to "some" vulnerability. But from my point of view there are many many technologies/hardware/knowledge designed to overpass the authorization of all sorts of servers/systems and I don't see why MT4 server can be an exception.
  • #6
  • May 19, 2012 9:08am May 19, 2012 9:08am
deian

I posts a lot of screen shots as it is easier to explain things. but before I post I remove all personal information that includes information on my demo account as I may or may not have a real account with the same borker. I have never given any trade set ups or possitions I may have played nor do I give my current location, on line you never know who is reading.

Now based on your second screen shot, I can see your brokers name, now if that a real or demo I dont know but your makeing a deal about ticket numbers but releasing other information at the same time.

Your listing your real name I believe in your code as well as other information there too. One can find a lot about you just from your name.

If your trying to hide personal information your got a lot more to do.

Keit








Quoting deian
I'm not MT4 server specialist, but I assume that the system works like this on a global level:

1. You (your MT4 terminal) authorize yourself in front of the server with user/pass
2. You (your MT4 terminal) tell the server to close order #123456

From my point of view there is a mechanism to overpass point 1, at least for some servers/brokers that are not well secured.

After that if you know the order# you can do what you want with it.

OK, I'll change the word "big" vulnerability to "some" vulnerability. But from my point of view there...
Trader Keit ... Methods Of A Dirt Road Mad Man....
  • #7
  • May 19, 2012 9:19am May 19, 2012 9:19am
Keit,

You are completely right.

You have to find other way to hide who is your broker. But at least hiding of order numbers will be (half) automatic.
  • #8
  • May 19, 2012 10:07am May 19, 2012 10:07am
Un-check Tools->Options->Charts->Show trade levels. That is all
As of pictures File->Save as picture and neither broker nor account number will be visible
  • #9
  • May 19, 2012 10:12am May 19, 2012 10:12am
Quoting seekers
Un-check Tools->Options->Charts->Show trade levels. That is all
As of pictures File->Save as picture and neither broker nor account number will be visible
LOL, you are completely right
  • #10
  • Last Post: May 30, 2013 2:34pm May 30, 2013 2:34pm
hi
i do the opposite
i want everyone to know my real or demo account number, the trade number.... My screen
my name
my underware size even


if the broker could not secure his clients, then ........

Attached Image (click to enlarge)
Click to Enlarge Name: Screenshot1.png Size: 217 KB
GUYS BE AWARE FROM HUNTING YOUR STOP LOSSES BY YOUR BROKER & BY "GHOSTS"
0 traders viewing now