3 ms·
> Having used Bloomberg for nearly 10 years, not only for the front-end but the back-end API Maybe you know the answer to a question I’ve been asking for years
by elliekelly 7y ago
> Having used Bloomberg for nearly 10 years, not only for the front-end but the back-end API
Maybe you know the answer to a question I’ve been asking for years: is there any way to authenticate the data you receive over the API? Bloomberg requires credentials to prove you have a subscription but I’ve long wondered about the security/integrity of the data flowing the other direction. What mechanism stops a bad actor from slightly altering or delaying Bloomberg API data as a way to manipulate the markets?
- TuringNYC 7y agoI'm assuming you are speaking about BBDL (Bloomberg Data License). My assumption was the API client used SSL and certificate verification to prevent man-in-the-middle attacks. I'll admit I never verified this. I imagine this is easy to verify -- just do a connect w/ a 2-liner BBDL client script and examine the network.
- rbavocadotree 7y agoOnce you have a few terminals at your firm, Bloomberg will provide a dedicated router + tunnel on top off the regular security. The bad actor would likely need to be internal to Bloomberg, and at that point there is nothing you can do.