We welcome you all to this week's issue of #talkchannel in the WORLD OF XPILAR Community Theme this week: "Can anyone steal upvote from you?"( week28)

in WORLD OF XPILAR4 years ago

The idea of ​​"Talk Channel"

Maybe many of us want a place we could only talk about loosely and firmly. Ask questions about things we wonder about, for example, about the STEEM community or other things. That's why we want to create a post with "talk channel" Just talk to some or ask questions

The post"Talk Channel" will be posted weekly, every Monday and is open to everyone the whole week. And there we should all appreciate comments and responses to each other.
Yes, we need to talk to each other as well

Theme this week: "Can anyone steal upvote from you?"

The answer is yes.

phishing-3390518_1280.jpg
The image was created by Tumisu from Pixabay.com

Keys dont matter anything if you have given access to posting to any app
it will still continue to works as posting auth (not the keys but the access token ) , unless you revoke access

We discovered it here a day from one of our Norwegian team members @bippe

As this photo shows, all 100% upvotes are stolen from @bippe.

The thief is @dims

image.png

image.png

image.png

image.png

image.png

image.png

Of course, these upvotes will be downvoted to minus

https://steemd.com/@ username, you will find the list of apps you have authorized.
Time to revoke some of them

image.png

We invite @steem-supporter who set up the links for us, he can explain this in more detail


https://steemlogin.com/revoke/dpoll.xyz
https://steemlogin.com/revoke/utopian.app
https://steemlogin.com/revoke/steemreply.app
https://steemlogin.com/revoke/steemauto
https://steemlogin.com/revoke/partiko-steemcon
https://steemlogin.com/revoke/dtube.app
https://steemlogin.com/revoke/downvote-tool
https://steemlogin.com/revoke/dlive.app
https://steemlogin.com/revoke/buildteam
https://steemlogin.com/revoke/bottracker.app


In the "talk channel" we or you can also post a topic that needs a review, for example tools on Steem or other things you want to know about

SteemWorld.org Built with ♥ by @steemchiller

image.png



Responsibility moderator for "Talk Channel" is @adeljose

Regards
@adeljose @art-venture @stef1 @myskye @sultan-aceh
@franyeligonzalez @leveuf @axeman @xpilar





Sort:  

thanks for the tag ,

basically when you change keys the keys are changed and people cannot access the account without having a new updated keys ,

But when you authorize an app to do posting operations (post, comment , vote , downvote) , you also give an access token to the app (previously via steemconnetct and now via steemlogn) , which the app owner can use no matter you changed your keys or not until you revoke the app.

for example i own steemauto.app and all steemauto services votes , posts are boradcasted using a wif of account steemauto.app , combining with the access token we get from steemlogin , so you are not yet secured , so revoke all access to apps you stopped using or are no more oeprating on steem (like previous steemauto) , these maybe dangerous as they can abuse the chain .

Hope this answers the question


If you think i am helping the community please support us my casting your witness vote to steem-supporter

Also add revoke link for steempeak.app,nextcolony,holybread.app

 4 years ago 

yes, there may be more that we should revoke

I authorized my account in the few site like steemvoter,partiko,steemdunk,smartsteem ,e,t,c so they can also use my vote powers?

everyone you authorized can use your posting auth

Wow... I didn't know that could be done. Interesting topic! Every day we learn something new. Greetings friend @xpilar!!

@xpilar thank you for this informational and reminder for us to be aware of any apps that we authorize using our posting key

Hello @xpilar.

Amazing topic!
Uhm sorry but I have an offtopic question, would you be willing to be a judge for a short story contest I will be creating? It's part of the knitrias project initiatives.

I wish you a good day 😊

Hello @XPilar, I don't want to rush you whatsoever, but I would really like to know, if you are interested, since I would like to start the contest today :)
If so, I would also like to know how to reach you on discord or you can reach me, since I will be making a discord for the judges of the contest.

Thank you very much for taking your time to read this.
I wish you a wonderful day!

Hey this is very good information thanks for give information

 4 years ago 

Thanks for the invitation @rashia, but I hope you can find others to be a judge.
I can sponsor your competition with 10 Steem :)

I can understand, thank you for considering it though. And wow thank you so much! I could raise the rewards accordingly 😁

@xpilar considering your amazing community and generous support for the short story contest, could I ask you for your support by sharing the contest in your community? I will publish the post tomorrow. 🥰

Thanks for this valuable information

it is really very much informative so very sad, how people are stealing vote

 4 years ago 

Hi friends, this you have explained is really serious and dangerous for users, thanks for sharing this information..!

Thanks for letting us know this things, am never gonna let and app access my account.