NexusFi: Find Your Edge


Home Menu

 





How safe are downloads and add ons?


Discussion in Traders Hideout

Updated
      Top Posters
    1. looks_one Quick Summary with 1 posts (0 thanks)
    2. looks_two MiniP with 1 posts (3 thanks)
    3. looks_3 DavidHP with 1 posts (5 thanks)
    4. looks_4 xplorer with 1 posts (6 thanks)
      Best Posters
    1. looks_one xplorer with 6 thanks per post
    2. looks_two DavidHP with 5 thanks per post
    3. looks_3 MiniP with 3 thanks per post
    4. looks_4 ralett with 2 thanks per post
    1. trending_up 1,300 views
    2. thumb_up 16 thanks given
    3. group 2 followers
    1. forum 4 posts
    2. attach_file 0 attachments




 
Search this Thread
  #1 (permalink)
 ralett 
Thousand Oaks, Calfornia
 
Experience: Intermediate
Platform: NinjaTrader 8
Broker: Ninja with Rithmic
Trading: CL NQ RTY
Posts: 31 since Mar 2018
Thanks Given: 14
Thanks Received: 46

Not sure where to post this but I have a general question about downloading scripts, add ons etc.

I have been using NT8 for a few months now and I love the fact that there are so many 3rd party scripts, indicators, add ons etc available to enhance the platform. That said, I worry a bit about security. I'm curious about people's thoughts on how you protect yourself from the potential of downloading malicious code.

I realize there is a "self policing" aspect to a forum like NexusFi but there are also many sites that offer "free" Ninja downloads.

Has anyone ever downloaded an indicator or add-on and had it grab your login/password info or automatically execute trades without your knowledge, or worse yet, drain your brokerage account?

Maybe I am being paranoid or just ignorant, but there is money involved here and where money flows, greed follows.

Are there tools or techniques one can use to ensure you are only downloading "clean and well behaved" code?

Thanks in advance!


Started this thread Reply With Quote
Thanked by:

Can you help answer these questions
from other members on NexusFi?
Prop Firm Tracked Payouts Hit $115M in Q1 but Growth Fla …
Funded Trading Evaluation Firms
Tradeify 3.0 Overhauls Futures Prop Firm Model -- One-Ti …
Funded Trading Evaluation Firms
More Than Capable: Hegseths War Warning Validates $114M …
Prediction Markets & Event Contracts
Beijing Summit Closes: Xi Pledges Hormuz Help -- $1.14B …
Prediction Markets & Event Contracts
The Great Rotation -- Small Caps Crushing Tech as Sectio …
Traders Hideout
 
Best Threads (Most Thanked)
in the last 7 days on NexusFi
Sober Journey With S&P
21 thanks
2026 Jlab journal
10 thanks
Algo automated / semi-automated trading anyone?
6 thanks
Lady Vols Primer: Trading Volatility Journal
6 thanks
Trying to learn Volume and price action correlation
5 thanks
  #3 (permalink)
 
MiniP's Avatar
 MiniP 
USA,USA
Market Wizard
 
Experience: Intermediate
Platform: NinjaTrader
Broker: NinjaTrader Brokerage
Trading: ES,
Posts: 1,157 since May 2017
Thanks Given: 1,109
Thanks Received: 2,945



ralett View Post
Not sure where to post this but I have a general question about downloading scripts, add ons etc.

I have been using NT8 for a few months now and I love the fact that there are so many 3rd party scripts, indicators, add ons etc available to enhance the platform. That said, I worry a bit about security. I'm curious about people's thoughts on how you protect yourself from the potential of downloading malicious code.

I realize there is a "self policing" aspect to a forum like NexusFi but there are also many sites that offer "free" Ninja downloads.

Has anyone ever downloaded an indicator or add-on and had it grab your login/password info or automatically execute trades without your knowledge, or worse yet, drain your brokerage account?

Maybe I am being paranoid or just ignorant, but there is money involved here and where money flows, greed follows.

Are there tools or techniques one can use to ensure you are only downloading "clean and well behaved" code?

Thanks in advance!

never had any issues with the indicators on here but I always scan downloads, Im sure whatever virus software you have on your computer you can do that to.

-P


"Truth is not what you want it to be; it is what it is, and you must bend to its power or live a lie"-Miyamoto Musashi
Visit my NexusFi Trade Journal Reply With Quote
Thanked by:
  #4 (permalink)
 
xplorer's Avatar
 xplorer 
London UK
Site Moderator
 
Experience: Beginner
Platform: CQG
Broker: S5
Trading: Futures
Posts: 6,233 since Sep 2015
Thanks Given: 15,885
Thanks Received: 16,118


ralett View Post
Not sure where to post this but I have a general question about downloading scripts, add ons etc.

I have been using NT8 for a few months now and I love the fact that there are so many 3rd party scripts, indicators, add ons etc available to enhance the platform. That said, I worry a bit about security. I'm curious about people's thoughts on how you protect yourself from the potential of downloading malicious code.

I realize there is a "self policing" aspect to a forum like NexusFi but there are also many sites that offer "free" Ninja downloads.

Has anyone ever downloaded an indicator or add-on and had it grab your login/password info or automatically execute trades without your knowledge, or worse yet, drain your brokerage account?

Maybe I am being paranoid or just ignorant, but there is money involved here and where money flows, greed follows.

Are there tools or techniques one can use to ensure you are only downloading "clean and well behaved" code?

Thanks in advance!

That is the reason why 'obfuscated code' (e.g. code hidden in .DLL) is not permitted on NexusFi. The code for any indicator here is open for all to see.


Reply With Quote
  #5 (permalink)
 
DavidHP's Avatar
 DavidHP 
Isla Mujeres, MX
Legendary Market Wizard
 
Experience: Advanced
Platform: NinjaTrader
Broker: Ninjatrader / Optimus Futures / AmpFutures
Trading: NQ / ES / 6E / 6B / CL
Frequency: Every few days
Duration: Minutes
Posts: 1,801 since Aug 2009
Thanks Given: 11,742
Thanks Received: 3,018

As with most things, the user needs to be cautious.
Don't download things from questionable sources.
As was said above, be very cautious of an indicator that is not fully visible (no DLL's)
If a script has a DLL it is because something is 'hiding'.

Yes I know it is usually to 'PROTECT' the code from being pirated.
But if the source is not FULLY trusted, you don't know if it has been 'tampered' or 'hacked'.

The easiest thing to do is not use obfuscated coded indicators but if you MUST make sure it is from a trusted source.

If you don't know how to examine indicators or have a question about an indicator being malicious, you can ask on this forum and post the indicator.
Someone will check it out for you if you ask nicely.


Rejoice in the Thunderstorms of Life . . .
Knowing it's not about Clouds or Wind. . .
But Learning to Dance in the Rain ! ! !
Follow me on X Reply With Quote




Last Updated on August 14, 2019


© 2026 NexusFi®, s.a., All Rights Reserved.
Av Ricardo J. Alfaro, Century Tower, Panama City, Panama, Ph: +507 833-9432 (Panama and Intl), +1 888-312-3001 (USA and Canada)
All information is for educational use only and is not investment advice. There is a substantial risk of loss in trading commodity futures, stocks, options and foreign exchange products. Past performance is not indicative of future results.
About Us - Contact Us - Site Rules, Acceptable Use, and Terms and Conditions - Downloads - Top
no new posts