I'm about to give some guy I sort of know my login details for Liqui exchange so he can work some API magic and pull my trade history off for tax purposes.
Only thing I'm worried about is that the exchange shows the IP addresses you've logged in with. Could he go to say Binance and say this is my account, see I have the IP address, and then they give him access?
Other urls found in this thread:
pastebin.com
warosu.org
twitter.com
He would need to be on your IP when making those claims to your exchange.
there's no way to spoof that right? I'm a CS brainlet
my liqui email is the same as my binance email. Passwords are obviously very different, and I have 2fa on my binance which I don't on liqui
seems a bit risky but I need this info pronto for my taxes
Why not just copy paste the Info to him if you're that worried
wew ofcourse not
he has to manually go onto the exchange and do an API sniff to get this info
do not enable trade/withdraw ability for your API access.
I think he's using this?
>pastebin.com
Yes! Can you please provide insight? I'm about to give him my login info
You're dealing with him online?
Don't do it. Learn how to use the pastebin yourself. It will take you a week to learn.
Why the fuck can't you do it yourself?
>1 week
I need this done tonight desu. Can't even run Ruby on my computer, let alone learning to do this
You motherfuckers are serious about paying taxes. I thought we didn't have to worry about it until next year if we cashed out after December 2017.
>taxes
if you want to play the "only pay when I cash out game" then be prepared to be taxed at zero cost basis on all your trades in the event of an audit.
Don't get me wrong, I definitely plan on paying for the gains that I earned. I put in ~10k throughout 2017 and cashed out 80k on January 2018. So I'll pay taxes on $70k earnings by April 2019.
fuck is this safe or not? what can he do with my IP
Identifying someone with IP is unreliable, I doubt it would ever happen.
no
He can't do shit with your ip, but the fact that you can't figure that out means he can trick you in 7 other ways. Don't give him your login.
No, but good on you for double-checking.
Not much tbqh. If you are that concerned you could always ask your ISP to change your IP, or purchase a static IP temporarily to force a change
The only other thing you'll want to make certain of is that you are not re-using that account password anywhere else, then change the password and remove any API keys / integrations in the account after he is done.
And, duh, make sure the account does not have any bank account, credit card, or paypal info (and change PINs, implement 2 factor authentication if you haven't already).
dorky engineer out good luck OP
sage for wholesome samefagging
I'm probably never logging into this exchange again.
The email used for login is the same email I use across all other exchanges. Passwords are unique and secure. Have 2FA as well
thanks user
This person shouldn't need your login info, only the API key
he needs to look at the HTTP packet for this particular script
user have you used this script recently? Guy says it's not working, somethings out of date
It is very hard to get an IP without a 3rd party source like a rootkit or another form of malware. So unless you are autistic and downloaded something like that I would say you are fine.
And EVEN if you are autistic and managed to reveal your IP to someone. I highly doubt any company would be stupid enough to go solely based off of IP. If anything they would most likely go based off of a combination of things like mac addresses, IPs, etc.
If your worried about being tracked by your ISP you could always use something like the new cloudflare DNS to "prevent" this from happening.
No I have not I just read about it the other day. Here's a search that may help you. Read the other threads.
>mac addresses,
Personal hardware addresses are not broadcasted over WANs. MAC is strictly LAN side only.