(UPDATED) The SteemPress plugin developers take a 10% cut of rewards; this is completely unmentioned in the documentation

in #utopian-io7 years ago (edited)

warning-alert-sign.jpg

(Update at bottom)

Earlier tonight, on my first working use of SteemPress, I discovered that the plugin developers @howo and @fredrikaa hardcoded themselves a 10% cut of the rewards from my post. Each gets 5% of the reward of the post.

Setting aside the absurdly huge cut they're taking, the more disturbing aspect is they have not mentioned this ten percent haircut anywhere that I've been able to find. It's not mentioned in their posts on Steemit, the SteemPress plugin information, or the github repo. Go look for yourself, if you'd like:

Steemit Posts
Introducing SteemPress beta, a wordpress plugin for steem
Steempress developer update #1---(Archived)

Third Party Sites
The SteemPress plugin page at Wordpress---(Archived)
The Github repository---(Archived)

Nor do I find any reference to a ten percent cut doing various searches through DuckDuckGo. I think I've done a sufficiently thorough search to conclude that it simply is not mentioned anywhere, not even in the plugin code if you want to dig through that.

Instead, I first found out about it when I made a test post through the plugin and saw something new pop up on my steemd page:

Steemd page for @jd-alden

I watch my account on Steemd because it's easier to see upvotes and comments there, and I'd never seen that note before. Beneficiaries? I've never set anyone as a beneficiary of my posts. I have no reason to. Didn't even know I could.

So what does that mean? The total weight of rewards in a Steemit post, as Steem currently works, is 10,000. That's the number set in the Steem config file if you want to dig it up yourself. So each 100 points is 1% of the reward. Each of these developers is getting 500 points of the reward weight, or 5% each. See below:

Parable post advanced info screenshot

You can see the reward_weight at the top of the image, that's the 10,000 total. And you can see the 500 each developer has gifted himself from my work. The posts I've submitted through Steemit alone look like this:

Baneful post advanced info screenshot

As you can see, the beneficiaries array is empty on a normal post. Because, again, I've never set beneficiaries and I didn't even know it was an option until today.

You can see the information about the post I posted through SteemPress here, and an example of a normal post here. Just click on the "advanced mode" link on the top right to expand the data.

But maybe it's something I can turn off, or adjust. Maybe it's some option that's set in the SteemPress settings? Nope, there's no option to do that:

Steempress Settings image

What about in the plugin code? Is it some careless remnant from development that was left turned on when the code shipped? I spent some time digging through the plugin code and it's clearly not a setting leftover in there. No, the beneficiaries are being set on a black box server controlled by the developers.

Steempress dev comment confirming middleman server

It's clear the problem is as I originally stated. The SteemPress devs have cut themselves in on the rewards for the posts made through their plugin, and you have no choice in the matter. Nor did they ever mention anything about taking a ten percent cut in any of their posts or documentation.

This is incredibly dishonest.

Whatever you might think about third party developers taking a (huge) cut of your rewards for using their service, they absolutely have to be up front about it. And the SteemPress developers have failed horribly in that respect. They have asked you to trust them with your private key, and immediately betrayed that trust.

Further, without being able to look at their black box code, we have no idea if they're even handling the keys securely. Your private posting key is very important, and should be well protected. Even if someone can't steal your money with it directly, they can flood your account with spam posts, upvote whatever they want, and generally wreak havoc. Do you want someone posting pornography or gore on your family-friendly account, or worse, posting illegal content?

And will @howo or @fredrikaa be tempted to use the posting keys to upvote themselves a huge reward, as we just saw Streemian do a few days ago to significant outcry? There's absolutely no technical barrier to the SteemPress crew maintaining a database of usernames and private posting keys, ready to be stolen or abused.

Given the dishonesty so far, I'm not willing to take the chance by continuing to use their service even if they dramatically reduce their cut and start being honest. I would've probably been okay with 1% total if they were up front about it, but that ship has sailed.

I already changed my keys and uninstalled SteemPress. It's up to you whether you want to do the same.


UPDATE:

The SteemPress developers put out a new post a few hours ago (1:15 PM EST, Jan 5, 2018) where they finally mentioned that they were taking a cut. You can see it here:

SteemPress now available in the WordPress.org plugin store! – Introducing V1.0

My opinion has not changed. You get one chance to be truly honest, and if you only decide to tell the truth after someone calls you on it, you don't get credit from me. Especially if you don't even acknowledge your screw up.

Sort:  

Hello, @jd-alden and thank you for taking the time to both try out SteemPress and also share your point of view.

I already replied to your review on wordpress.org, which can be read here. As stated, I agree it would have been better to make this clear from the beginning in the WordPress description. I take that fully on me as something I could and should have done.

However, SteemPress has been in beta until 6 hours ago, and thus a lot has been lacking. Informing about the benefactor rewards was always in the draft for the post introducing the Version1.0, and the text explaining benefactor rewards was literally written days ago, long before your post and review. The description used at wordpress.org at the time contained many typos and was fully incomplete as we expected only our testers to really be finding and using the plugin before our announcement post. Again, my mistake.

I would recommend you not to be so quick to jump at conclusions regarding other peoples intentions. We did not withhold this information purposefully hoping that somehow people would not notice. This is merely what you get when 2 people work weekends and late nights to make a product and leave out polishing details until the main parts are finished.

On a side note, if you want to understand more of how benefactor rewards are used by virtually all app developers on STEEM, you may want to look into how dtube, dsound, dmania, utopian, zappl, steepshot, etc, all rely on benefactor rewards. Most charge as much as 25%. So if you feel 10% is a robbery, you may want to do some outreach to people about that too. Mind that the percentage only affects the vested reward, meaning Steem Power, and not at all affecting the Steem Dollars you earn posting with these Apps.

Once again, I'm sorry for the mistake, but am fully convinced that we are, and will be, building great tools to help the STEEM ecosystem grow.

Steem on buddy.

Upvoted for visibility.

I never used SteemPress, but was considering it. Thank you for your warning!

It is one thing to clearly state that they were taking a cut. After all, they created a service and I understand that they would want to be paid for their hard work. If this was stated this information up front, the user could make the decision whether that cut was fair or not and use/not use the service because of that.

But being underhanded and secretive about it? That is unacceptable.

in the SteemPress settings? Nope,

Sad. I never wanted to use it, but I thought it was a good development,too bad some people go for the 'easy ' money. This will reflect badly on the crypto sphere and Steemit. They done us a disservice.