Pages:
Author

Topic: BitFloor.com Rocks! - page 5. (Read 17612 times)

hero member
Activity: 560
Merit: 500
I am the one who knocks
June 24, 2012, 11:30:32 AM
I wonder if I can make a simple bot which holds USD on one exchange e.g. MtGox and holds BTC on BitFloor, then continually updates BitFloor asks to be MtGox + MtGox Fee + .05. Would that result in any trades, or are the markets generally too close together?

take a look at bitcoin-analytics.com/#arbitrage

you should wait until data is fully loaded and arbitrage table is displayed
then it is possibile to analyze arbitrage apportunities depending on BTC volume you consider to trade
What is the MtGox fee per trade?

I would read this before you go all gungho https://bitcointalksearch.org/topic/bot-74291
hero member
Activity: 784
Merit: 1000
0xFB0D8D1534241423
June 24, 2012, 11:26:17 AM
I wonder if I can make a simple bot which holds USD on one exchange e.g. MtGox and holds BTC on BitFloor, then continually updates BitFloor asks to be MtGox + MtGox Fee + .05. Would that result in any trades, or are the markets generally too close together?

take a look at bitcoin-analytics.com/#arbitrage

you should wait until data is fully loaded and arbitrage table is displayed
then it is possibile to analyze arbitrage apportunities depending on BTC volume you consider to trade
What is the MtGox fee per trade?

not sure, but as far as I can remember it varies between 0.6 - 0.5 - ... % depending on your trading activity
for sure you should consult on mtgox website
In that case it could be occasionally profitable to arb MtGox and bitfloor.
Off to the IDE!
sr. member
Activity: 379
Merit: 250
June 24, 2012, 11:23:51 AM
I wonder if I can make a simple bot which holds USD on one exchange e.g. MtGox and holds BTC on BitFloor, then continually updates BitFloor asks to be MtGox + MtGox Fee + .05. Would that result in any trades, or are the markets generally too close together?

take a look at bitcoin-analytics.com/#arbitrage

you should wait until data is fully loaded and arbitrage table is displayed
then it is possibile to analyze arbitrage apportunities depending on BTC volume you consider to trade
What is the MtGox fee per trade?

not sure, but as far as I can remember it varies between 0.6 - 0.5 - ... % depending on your trading activity
for sure you should consult on mtgox website
hero member
Activity: 784
Merit: 1000
0xFB0D8D1534241423
June 24, 2012, 11:20:57 AM
I wonder if I can make a simple bot which holds USD on one exchange e.g. MtGox and holds BTC on BitFloor, then continually updates BitFloor asks to be MtGox + MtGox Fee + .05. Would that result in any trades, or are the markets generally too close together?

take a look at bitcoin-analytics.com/#arbitrage

you should wait until data is fully loaded and arbitrage table is displayed
then it is possibile to analyze arbitrage apportunities depending on BTC volume you consider to trade
What is the MtGox fee per trade?
sr. member
Activity: 379
Merit: 250
June 24, 2012, 11:16:36 AM
I wonder if I can make a simple bot which holds USD on one exchange e.g. MtGox and holds BTC on BitFloor, then continually updates BitFloor asks to be MtGox + MtGox Fee + .05. Would that result in any trades, or are the markets generally too close together?

take a look at bitcoin-analytics.com/#arbitrage

you should wait until data is fully loaded and arbitrage table is displayed
then it is possibile to analyze arbitrage apportunities depending on BTC volume you consider to trade
hero member
Activity: 784
Merit: 1000
0xFB0D8D1534241423
June 24, 2012, 11:10:11 AM
I wonder if I can make a simple bot which holds USD on one exchange e.g. MtGox and holds BTC on BitFloor, then continually updates BitFloor asks to be MtGox + MtGox Fee + .05. Would that result in any trades, or are the markets generally too close together?
sr. member
Activity: 490
Merit: 251
June 24, 2012, 12:05:56 AM
BitFloor just passed Intersango to move from #8 to #7 on the 30-day BTC/USD volume list at bitcoincharts.com. Congratulations BitFloor. Keep on Rockin'!
hero member
Activity: 728
Merit: 500
June 23, 2012, 05:07:06 PM
Perhaps there is a market for dedicated portable devices that generate OTPs for a person's various accounts. You would have two of them. One as backup kept in a safe place, one to keep with you as you travel.
rjk
sr. member
Activity: 448
Merit: 250
1ngldh
June 23, 2012, 05:01:13 PM
After thinking about this a bit more. The most convenient thing is to just create shortcuts to files containing the secret string on the computer you use to trade. The most secure thing would be to put JAuth and the secret keys on a boot cd/drive and only run it on a computer/device that never connects to the internet. Is this correct?

edit: I guess you would need to manually set the clock.
Sure that would work too.
hero member
Activity: 728
Merit: 500
June 23, 2012, 04:56:41 PM
After thinking about this a bit more. The most convenient thing is to just create shortcuts to files containing the secret string on the computer you use to trade. The most secure thing would be to put JAuth and the secret keys on a boot cd/drive and only run it on a computer/device that never connects to the internet. Is this correct?

edit: I guess you would need to manually set the clock.
hero member
Activity: 728
Merit: 500
June 23, 2012, 04:29:07 PM
Sounds good. So to bitfloor: What is the protocol for when I lose my phone and no longer trust my secret key? I like the yubikey because it can simply remain in a safe place.

I'm assuming you would just log in and disable 2FA, then re-enable it to generate a new OTP.

From Bitfloor site:
Quote
You can setup two factor authentication for your account through Google Authenticator (free Android and iOS app). This provides a higher level of security for your account.

Note: Once two factor authentication has been activated, it will be required to access your account at all times.
Right, but if you have backed up the compromised secret, you could use it one last time to log in and disable 2FA. This assumes that disabling it is an option, of course.

Not sure.
rjk
sr. member
Activity: 448
Merit: 250
1ngldh
June 23, 2012, 04:28:15 PM
Sounds good. So to bitfloor: What is the protocol for when I lose my phone and no longer trust my secret key? I like the yubikey because it can simply remain in a safe place.

I'm assuming you would just log in and disable 2FA, then re-enable it to generate a new OTP.

From Bitfloor site:
Quote
You can setup two factor authentication for your account through Google Authenticator (free Android and iOS app). This provides a higher level of security for your account.

Note: Once two factor authentication has been activated, it will be required to access your account at all times.
Right, but if you have backed up the compromised secret, you could use it one last time to log in and disable 2FA. This assumes that disabling it is an option, of course.
hero member
Activity: 728
Merit: 500
June 23, 2012, 04:26:21 PM
Thanks for your help. One last thing I want to verify though:

Quote
Also, if I write down the secret provided by google authenticator I can simply input that into JAuth if I lose my phone, which will then generate the 6 digit pin that allows me to log in.

Is the above true?
Yes. The secret is the key to it, and it theoretically should work across several devices and always generate a working OTP. Your clock must be correct since it is a time-based system.

Sounds good. So to bitfloor: What is the protocol for when I lose my phone and no longer trust my secret key? I like the yubikey because it can simply remain in a safe place.

Right because something that size can never got lost so that isn't a problem with the yubikey  Roll Eyes

I don't travel with it... I have lost/destroyed a good number of phones in my time.


Sounds good. So to bitfloor: What is the protocol for when I lose my phone and no longer trust my secret key? I like the yubikey because it can simply remain in a safe place.

I'm assuming you would just log in and disable 2FA, then re-enable it to generate a new OTP.

From Bitfloor site:
Quote
You can setup two factor authentication for your account through Google Authenticator (free Android and iOS app). This provides a higher level of security for your account.

Note: Once two factor authentication has been activated, it will be required to access your account at all times.
rjk
sr. member
Activity: 448
Merit: 250
1ngldh
June 23, 2012, 04:25:11 PM
Sounds good. So to bitfloor: What is the protocol for when I lose my phone and no longer trust my secret key? I like the yubikey because it can simply remain in a safe place.

I'm assuming you would just log in and disable 2FA, then re-enable it to generate a new OTP.
hero member
Activity: 560
Merit: 500
I am the one who knocks
June 23, 2012, 04:23:13 PM
Thanks for your help. One last thing I want to verify though:

Quote
Also, if I write down the secret provided by google authenticator I can simply input that into JAuth if I lose my phone, which will then generate the 6 digit pin that allows me to log in.

Is the above true?
Yes. The secret is the key to it, and it theoretically should work across several devices and always generate a working OTP. Your clock must be correct since it is a time-based system.

Sounds good. So to bitfloor: What is the protocol for when I lose my phone and no longer trust my secret key? I like the yubikey because it can simply remain in a safe place.

Right because something that size can never got lost so that isn't a problem with the yubikey  Roll Eyes
hero member
Activity: 728
Merit: 500
June 23, 2012, 04:21:48 PM
Thanks for your help. One last thing I want to verify though:

Quote
Also, if I write down the secret provided by google authenticator I can simply input that into JAuth if I lose my phone, which will then generate the 6 digit pin that allows me to log in.

Is the above true?
Yes. The secret is the key to it, and it theoretically should work across several devices and always generate a working OTP. Your clock must be correct since it is a time-based system.

Sounds good. So to bitfloor: What is the protocol for when I lose my phone and no longer trust my secret key? I like the yubikey because it can simply remain in a safe place.
rjk
sr. member
Activity: 448
Merit: 250
1ngldh
June 23, 2012, 04:11:24 PM
Thanks for your help. One last thing I want to verify though:

Quote
Also, if I write down the secret provided by google authenticator I can simply input that into JAuth if I lose my phone, which will then generate the 6 digit pin that allows me to log in.

Is the above true?
Yes. The secret is the key to it, and it theoretically should work across several devices and always generate a working OTP. Your clock must be correct since it is a time-based system.
hero member
Activity: 728
Merit: 500
June 23, 2012, 04:06:31 PM
Yeah I used GLBSE as an example because I wasn't sure whether bitfloor supported it. Depending on how you want the balance of usability and security to be, you could store it in Truecrypt. You would have to unlock the volume any time you wanted to use it though. Generally, when you set up GA the website such as bitfloor would give you a secret string. You just create a blank text file and paste the secret in there, and then use the text file's name as the only argument to jauth.exe. For instance:

Code:
"C:\Program Files (x86)\JAuth\JAuth.exe" D:\TruecryptStuff\bitfloor.secret.txt

With that example, your truecrypt stuff is mounted at D:

The jauth.rc file is optional, and only used if you don't want to create a custom shortcut to launch with an argument. You could store the secret there, and then no other changes would need to be made.

Thanks for your help. One last thing I want to verify though:

Quote
Also, if I write down the secret provided by google authenticator I can simply input that into JAuth if I lose my phone, which will then generate the 6 digit pin that allows me to log in.

Is the above true?
hero member
Activity: 728
Merit: 500
June 23, 2012, 04:01:15 PM
So there is a trade on gox and now bitfloor started working for me as well.
rjk
sr. member
Activity: 448
Merit: 250
1ngldh
June 23, 2012, 03:47:57 PM
Yeah I used GLBSE as an example because I wasn't sure whether bitfloor supported it. Depending on how you want the balance of usability and security to be, you could store it in Truecrypt. You would have to unlock the volume any time you wanted to use it though. Generally, when you set up GA the website such as bitfloor would give you a secret string. You just create a blank text file and paste the secret in there, and then use the text file's name as the only argument to jauth.exe. For instance:

Code:
"C:\Program Files (x86)\JAuth\JAuth.exe" D:\TruecryptStuff\bitfloor.secret.txt

With that example, your truecrypt stuff is mounted at D:

The jauth.rc file is optional, and only used if you don't want to create a custom shortcut to launch with an argument. You could store the secret there, and then no other changes would need to be made.
Pages:
Jump to: