Hi patt,

The most secure solution is not to distribute the code!

If you're running MS across a network, depending on the operating system you could use access-controls to the MSFORMxx.DTA file meaning only specific users could access the file.

It is possible to password protect indicators, but these only offer limited protection and depending on the requirements of the indicator, you might not want to give up one of the six available user Input() functions for them to enter some pass key value.

The only other option is to write the function in a compiled language and employ some sort of digital rights management system over the file, but then again, this is only a minor inconvenience to the dedicated hacker. (BTW: This is the only solution which would allow hardware level identification and tracking.)

The only real solution is the first suggestion: don't distribute the indicator.


wabbit [:D]

Some add-ons have no digital protection in them and rely on the honesty of the clients not distribute their product, or, some have an end user licence agreement which prohibits distribution of the product (but does not take any positive action to prevent distribution), or, some use a "call home" system to connect to a remote server each time the code is run to validate the authenticity of the application (requires the suer to be connected to the internet, which is not always possible and can be "easily" spoofed), or, some use an encryption algorithm and passkey/phrase which is checked when the application runs. Each methods has its advantages and limitations.

No protection system is foolproof. Given sufficient time and willingness, any application can be cracked by the motivated hacker. The only sure way not to have your product hacked is not to distribute it.

This is about as much as I would like to say on the topic in the open forum. If you want to discuss discrete details particular to your specific product, please contact a software security engineer, or contact me off-forum for some ideas.


Some general advice: One thing to be very aware of is the intelligence of most MS users / traders in general. There are very few who will use a product where they cannot see the inner workings (black boxes). You might think you have the panacea function or the holy grail, but traders wont use it if they cannot see for themselves exactly how the system works. If your function is as good as you think it is, every additional trader using the tool will reduce its effectiveness, so it is in your best interest and the interest of the few trusted traders to whom you do distribute the product to keep the product distribution limited.



wabbit [:D]

Hi wabbit and patt I gone thru with your thread but don't find any clear instruction to set a password for indicator/explorer/expert adviser in Metastock. Could you guy help to share more. TQ