Fake Gruss Software???

[stateless]

I was reading a blog I frequent today and came across this post in the comments section (https://www.blogger.com/comment.g?blogI ... 3660161909):

"Thought I'd let your traders have the link to gruss's beta version of Betaq trader Graeme.

Usual stuff, only play with low staes til youre happy with the software as it's only a test version at the moment

https://www.gruss1-software.co.uk/Betda ... t/main.swf"

Now I could be totally wrong here, but as the URL is slightly different could this not be an attempt to steal betfair password and username info? If it is legit I apologise, but it seems odd to me that it would be posted as a blog response rather than an official release. That combined with the URL sets off alarm bells.

[stateless]

http://webwhois.nic.uk/cgi-bin/whois.cg ... ware.co.uk

registered just 13 days ago too.

[stateless]

Also, this goes without saying of course, but please do not enter your details into the program, as if it is designed to steal info, its obviously not a wise move.

[laffo16]

thanks for postin, admin??

[GaryRussell]

It's totally legit. We registered the domain recently. The program runs in flash player inside the web browser. To be able to contact Betdaq's server we had to get Betdaq to put a file on their server which would permission the program to contact their server. Because their server is secure the program also needs to be hosted on a secure domain. gruss-software.co.uk is not a secure domain and is hosted by fasthosts.co.uk who only offer shared secure domains which is not sufficient. So gruss1-software.co.uk is our dedicated server on which I installed an SSL certificate.

It is not there to steal your passwords. If we wanted to steal your passwords this could also be done by any of our programs that you have to install. All communication is between flash player and https://api.betdaq.com, it does not go through our server, it is just used to host the flash file. We will at a later date need to control subscriptions so there will be some communication with our server to control this, but it will be no different to what happens with Betting Assistant.

[Ian]

Can this be used now ? I'm having probelms signing onto Betdaq using Firefox on the normal site.

[GaryRussell]

Yes, but it's not officially released and may contain bugs. Also the flash player does not run that great in Firefox and causes performance problems so I recommend using Internet Explorer.

[laffo16]

may i ask, why u chose to make it in flash over your standard programming language? the thought occurs to me that you would may have more flexibility & power at your disposal with your standard language?

[GaryRussell]

I wanted to make the Betdaq version multi platform and web based which is why I decided against just converting the existing application. I did not do this at the expense of performance, Flex applications run just as quick as .Net applications if programmed efficiently. I will disagree with anyone who says Flex applications are not as quick as .Net

[GaryRussell]

Also, should I need to produce a desktop program it can easily be converted to an Adobe AIR application.

[stateless]

It's totally legit. We registered the domain recently. The program runs in flash player inside the web browser. To be able to contact Betdaq's server we had to get Betdaq to put a file on their server which would permission the program to contact their server. Because their server is secure the program also needs to be hosted on a secure domain. gruss-software.co.uk is not a secure domain and is hosted by fasthosts.co.uk who only offer shared secure domains which is not sufficient. So gruss1-software.co.uk is our dedicated server on which I installed an SSL certificate.

It is not there to steal your passwords. If we wanted to steal your passwords this could also be done by any of our programs that you have to install. All communication is between flash player and https://api.betdaq.com, it does not go through our server, it is just used to host the flash file. We will at a later date need to control subscriptions so there will be some communication with our server to control this, but it will be no different to what happens with Betting Assistant.

Thanks so much for the update Gary. Note that I wasn't accusing you of trying to steal passwords, I was instead stating a concern that someone was trying to impersonate your site (by registering a similiar domain) as a way of trying to steal information. Of course now that you have cleared this up, it's very much a no event, or actually a positive event since many of us are rather irritated by the new betfair charges .

[laffo16]

well you certainly know your stuff gary the only thing i can grumble at i suppose is the excel & com support, but heck its early days yet aint it.

[laffo16]

ow yeh, and you are gonna need some badboy protection on that server ^^

[GaryRussell]

well you certainly know your stuff gary the only thing i can grumble at i suppose is the excel & com support, but heck its early days yet aint it.

We plan on doing something separate for Excel, it will probably be a .Net dll that can be used like the COM interface and and include some kind of framework to cater for the casual user who doesn't want to use VBA.

[Roger]

Gary, all these big words like Net, DLL, and COM are worrying me. I had a large BA application using VBA in the pipeline, and VBA is one big word enough for me, I have to struggle to get THAT working as it is. So please reassure me that a Betdaq version of the BA interface won't take much conversion of any BF version software I write.