{{Quickfixn}} verifying the trustworthyness of the QuickFixN non official nuget publication made by junvtd

[DAVID Christophe]

Thanks for the clarification. I will stay clear from this nuget package, and I will build it internally instead.

FTR, as I’m used to use the public nuget repository for many libraries, I installed QuickFix/n from https://www.nuget.org/packages/QuickFix.Net without thinking twice. I surveyed other FIX .NET developers in my vicinity, and most of them just used https://www.nuget.org/packages/QuickFix.Net it without realizing it was not coming from the QuickFix/n project team.

From: Quickfixn [mailto:quickfixn-bounces at lists.quickfixn.com] On Behalf Of Grant Birchmeier
Sent: Wednesday 4 April 2018 19:50
To: Mailing list for QuickFIX/n <quickfixn at lists.quickfixn.com>
Subject: Re: {{Quickfixn}} verifying the trustworthyness of the QuickFixN non official nuget publication made by junvtd

That's my personal opinion.  However, the documentation for doing that is pretty thin, not to mention the fact that it requires installing Ruby which seems like a major reluctance-factor for a lot of devs.

I'm reluctant to push my opinion with full gusto until those are better.  And perhaps I should spend some time on that.



On Wed, Apr 4, 2018 at 11:34 AM, James Riehl <pete.riehl at gmail.com<mailto:pete.riehl at gmail.com>> wrote:
I don’t believe the concept of nugetting the quickfix n project is palatable to the maintainers of the project. The suggested modus operandi is to customize your data dictionary and then re generate the classes so that all the custom fields that are added by counter parties become first class citizens in their respective message classes.

This doesn’t lend itself to a general package.

Please correct me if I’m wrong Grant et all.
Sent from my iPhone

On Apr 4, 2018, at 11:42, DAVID Christophe <christophe.david at sgcib.com<mailto:christophe.david at sgcib.com>> wrote:
Hello,

I sent the below message to the owner of the nuget publication.
It sounds quite fishy that the publication https://www.nuget.org/packages/QuickFix.Net look official, but isn’t.
It should at least add a disclaimer making it clear to nuget users. It could contain a trojan horse, for all we know…

Did you ever get some credentials from the owner of this publication?

Best regards,
Christophe

>>> Messsage sent to jvuntd via nuget site <<<
>>>Hello,
>>>Thank you for your work of uploading QuickFixN to nuget.
>>>I noticed this is not published by the official github maintainers.
>>>Why aren't you making it clear with a disclaimer such as:
>>>"Non official publication, provide as a courtesy of..."
>>>Best regards,
>>>Christophe


*************************************************************************
This message and any attachments (the “message”) are confidential, intended solely for the addressee(s), and may contain legally privileged information.
Any unauthorised use or dissemination is prohibited.
If you are not the intended recipient please notify us immediately by telephoning or e-mailing the sender.
You should not copy this e-mail or use it for any purpose nor disclose its contents to any other person.
E-mails are susceptible to alteration. Neither SOCIETE GENERALE nor any of its subsidiaries or affiliates shall be liable for the message if altered, changed or falsified.
You agree to receive all communications by email or through dedicated websites.
Please visit https://cib.societegenerale.com/en/market-regulation/ for important information on MiFID, SFTR and with respect to derivative products.

Ce message et toutes les pieces jointes sont confidentiels et susceptibles de contenir des informations couvertes par le secret professionnel.
Ce message est etabli a l’attention exclusive de ses destinataires. Toute utilisation ou diffusion non autorisee est interdite.
Tout message electronique est susceptible d'alteration.
SOCIETE GENERALE et ses filiales declinent toute responsabilite en cas d’alteration, modification ou falsification de ce message.
Vous acceptez de recevoir nos communications par email ou via des sites web dedies.
Veuillez consulter le site https://cib.societegenerale.com/en/market-regulation/ pour des informations importantes sur MiFID, SFTR et sur les produits derives.
*************************************************************************
_______________________________________________
Quickfixn mailing list
Quickfixn at lists.quickfixn.com<mailto:Quickfixn at lists.quickfixn.com>
http://lists.quickfixn.com/listinfo.cgi/quickfixn-quickfixn.com

_______________________________________________
Quickfixn mailing list
Quickfixn at lists.quickfixn.com<mailto:Quickfixn at lists.quickfixn.com>
http://lists.quickfixn.com/listinfo.cgi/quickfixn-quickfixn.com



--
Grant Birchmeier
Connamara Systems, LLC
Made-To-Measure Trading Solutions.
Exactly what you need. No more. No less.
http://connamara.com
*************************************************************************
This message and any attachments (the “message”) are confidential, intended solely for the addressee(s), and may contain legally privileged information.
Any unauthorised use or dissemination is prohibited.
If you are not the intended recipient please notify us immediately by telephoning or e-mailing the sender.
You should not copy this e-mail or use it for any purpose nor disclose its contents to any other person.
E-mails are susceptible to alteration. Neither SOCIETE GENERALE nor any of its subsidiaries or affiliates shall be liable for the message if altered, changed or falsified.
You agree to receive all communications by email or through dedicated websites.
Please visit https://cib.societegenerale.com/en/market-regulation/ for important information on MiFID, SFTR and with respect to derivative products.

Ce message et toutes les pieces jointes sont confidentiels et susceptibles de contenir des informations couvertes par le secret professionnel.
Ce message est etabli a l’attention exclusive de ses destinataires. Toute utilisation ou diffusion non autorisee est interdite.
Tout message electronique est susceptible d'alteration.
SOCIETE GENERALE et ses filiales declinent toute responsabilite en cas d’alteration, modification ou falsification de ce message.
Vous acceptez de recevoir nos communications par email ou via des sites web dedies.
Veuillez consulter le site https://cib.societegenerale.com/en/market-regulation/ pour des informations importantes sur MiFID, SFTR et sur les produits derives.
*************************************************************************
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.quickfixn.com/pipermail/quickfixn-quickfixn.com/attachments/20180405/682cf374/attachment.htm>