We’re comfortable to announce the discharge of Jigsaw daytradr 5004. The software program will be downloaded right here. Now we have fixes (in launch notes) and likewise – that is the primary time we have launched security-specific modifications. Word – for those who see any errors loading the members pages – clear your browser cache, it’s going to be due to extra safety features on our servers.
We turned conscious in January {that a} group of hackers had been particularly concentrating on buying and selling platforms and that we had been on the listing. Not solely was the platform focused however our servers too. Fortuitously, the servers weren’t breached – however the hackers did have restricted success with the platform after which introduced they had been “going after Jigsaw’s servers” – however how?
We talk with the servers through safe HTTP – the identical protocol utilized by your browser when you go surfing to a safe web site and one thing I might presumed protected. That was till a buddy got here round and confirmed me how, by putting in a pretend certificates (in 5 minutes), it was attainable to view the site visitors between any safe web site (or daytradr) and the servers. Somebody would nonetheless want entry to your PC to try this – however that may be completed by sending you a hyperlink on an e-mail that you just click on with out pondering. It may also be completed with any file attachment you open, particularly spreadsheets. If that occurs, then HTTPs does not seem to guard you.
Anyway – the upshot is there was a gap that wanted plugging. We had been lucky that we had somebody who spoke Chinese language and who noticed this in China and that they introduced their plans to assault our servers, so we might work to guard them. Since January, now we have been engaged on this, our take was “We should not do one other launch with out addressing this”. We have elevated piracy safety, added a number of layers of encryption on high of HTTPs, and put up firewalls on the servers to stop breaches.
Word that once you do use the platform, you will have to re-enter your password – it’s because we determined to make use of a special encryption strategy to passwords saved in XML information, simply in case the encryption keys have been uncovered.
Word additionally, that older variations will nonetheless work after these modifications, however in some unspecified time in the future sooner or later, they are going to be retired – one thing we’ll do by switching off the previous strategy to connecting to our servers.
We even have bug fixes – which shall be within the launch notes, the beta for V5 shall be accomplished on third April.
Commerce Copier
Word that now we have already commenced the design and coding for five.0.0.6 – which features a commerce copier. In that, a ‘guardian’ order will be capable of have ‘little one orders’ on different accounts. We want suggestions on this function. There may be an RFI thread right here – in case you are desirous about commerce copier performance, please go and go away your feedback.