New Posts For Thread: Why hasn't there been much furore about the hacking?https://community.betfair.com/general_betting/go/thread/view/94082/28252715/why-hasnt-there-been-much-furore-about-the-hackingWas everyone affected? I'd have thought those betting on the tennis would be a little peeved that they were unable to bet inplay, and anyone who lost out would be calling for a cancellation of bets placed.There's also nothing (that I can see) on theYes you're right Ghetto Joe with the cookie thing, all makes sense now.I just checked the security tab though, and it shows the last 10 logons from my IP address all at 00:01 and 00:02! I'll check it again later as it may update slowly.https://community.betfair.com/general_betting/go/thread/view/94082/28252715/why-hasnt-there-been-much-furore-about-the-hacking?post_id=506340795#506340795Yes you're right Ghetto Joe with the cookie thing, all makes sense now.I just checked the security tab though, and it shows the last 10 logons from my IP address all at 00:01 and 00:02! I'll check it again later as it may update slowly.Tue, 06 Sep 2011 20:45:48 -0500Once it's logged in via the website it'd hold a session cookie and have no need to login again at each graph request Trev, you can check that by looking at the My Account->My Security tab which will show all login attempts, API and web. Click as manyhttps://community.betfair.com/general_betting/go/thread/view/94082/28252715/why-hasnt-there-been-much-furore-about-the-hacking?post_id=506331855#506331855Once it's logged in via the website it'd hold a session cookie and have no need to login again at each graph request Trev, you can check that by looking at the My Account->My Security tab which will show all login attempts, API and web. Click as manyTue, 06 Sep 2011 16:22:23 -0500Sorry guys, I didn't mean to turn this into a Gruss thread! But you were all right, Gary from Gruss said..."It logs in to the website in the background so that it can scrape the price charts from the website and it is this request that is causing faihttps://community.betfair.com/general_betting/go/thread/view/94082/28252715/why-hasnt-there-been-much-furore-about-the-hacking?post_id=506329761#506329761Sorry guys, I didn't mean to turn this into a Gruss thread! But you were all right, Gary from Gruss said..."It logs in to the website in the background so that it can scrape the price charts from the website and it is this request that is causing faiTue, 06 Sep 2011 15:43:39 -0500"viva the way i see it is that banks are responsible for losses that they cant prove are due to their customers fault, so they have introduced higher levels of log in security to help save themselves money. Whereas Betfair have no such legal reponsihttps://community.betfair.com/general_betting/go/thread/view/94082/28252715/why-hasnt-there-been-much-furore-about-the-hacking?post_id=506320813#506320813"viva the way i see it is that banks are responsible for losses that they cant prove are due to their customers fault, so they have introduced higher levels of log in security to help save themselves money. Whereas Betfair have no such legal reponsiTue, 06 Sep 2011 12:58:24 -0500ghetto joe - i guessed that probably what gruss is doing.are you sure about the graphs being delayed though, i just though it was the prices? besides it would take a very keen eye to pick a relatively minute amount of staleness on a mature market.https://community.betfair.com/general_betting/go/thread/view/94082/28252715/why-hasnt-there-been-much-furore-about-the-hacking?post_id=506316915#506316915ghetto joe - i guessed that probably what gruss is doing.are you sure about the graphs being delayed though, i just though it was the prices? besides it would take a very keen eye to pick a relatively minute amount of staleness on a mature market.Tue, 06 Sep 2011 11:36:42 -0500@TrevhDStyle's right. You need to call login on the API once, then take the session token you get back from log in and submit that with our subsequent calls to the API.No need at all to call login with username & password more than once per session.https://community.betfair.com/general_betting/go/thread/view/94082/28252715/why-hasnt-there-been-much-furore-about-the-hacking?post_id=506315437#506315437@TrevhDStyle's right. You need to call login on the API once, then take the session token you get back from log in and submit that with our subsequent calls to the API.No need at all to call login with username & password more than once per session.Tue, 06 Sep 2011 11:05:27 -0500DS, you don't need to login to see the graphs but the data's delayed if you're not logged in. I very much doubt gruss makes repeated logins once it's retreieved a succesful session cookie for the web but as trev changed passwords mid session any logihttps://community.betfair.com/general_betting/go/thread/view/94082/28252715/why-hasnt-there-been-much-furore-about-the-hacking?post_id=506314919#506314919DS, you don't need to login to see the graphs but the data's delayed if you're not logged in. I very much doubt gruss makes repeated logins once it's retreieved a succesful session cookie for the web but as trev changed passwords mid session any logiTue, 06 Sep 2011 10:54:27 -0500sorry trevh - i'm definitely not guessing, but at the same time i'm not saying you've imagined it. i'm saying there is no repeated requirement to log in numerous times in the API. the problem appears to be with gruss doing something it doesn't need thttps://community.betfair.com/general_betting/go/thread/view/94082/28252715/why-hasnt-there-been-much-furore-about-the-hacking?post_id=506313771#506313771sorry trevh - i'm definitely not guessing, but at the same time i'm not saying you've imagined it. i'm saying there is no repeated requirement to log in numerous times in the API. the problem appears to be with gruss doing something it doesn't need tTue, 06 Sep 2011 10:29:55 -0500Trevh , the graphs aren't available via the api so gruss is basically getting round it by logging into the main site to retreive them. It was probably trying to login each time you clicked a graph as you'd changed password and each attempt got rejecthttps://community.betfair.com/general_betting/go/thread/view/94082/28252715/why-hasnt-there-been-much-furore-about-the-hacking?post_id=506309225#506309225Trevh , the graphs aren't available via the api so gruss is basically getting round it by logging into the main site to retreive them. It was probably trying to login each time you clicked a graph as you'd changed password and each attempt got rejectTue, 06 Sep 2011 08:49:27 -0500You just need to send the SessionToken via the keepAlive API, no need to Send password after login.https://community.betfair.com/general_betting/go/thread/view/94082/28252715/why-hasnt-there-been-much-furore-about-the-hacking?post_id=506308555#506308555You just need to send the SessionToken via the keepAlive API, no need to Send password after login.Tue, 06 Sep 2011 08:32:03 -0500