You are viewing a single comment's thread from:

RE: api.deathwing.me Important Announcement | Anti-Phishing

in #hive3 years ago

Smooth that was not so smooth but not letting people send isn't it overdo a warning would have been nice. It sends a message if node manager like they could actually halt your account progress and if somehow all the node manager agree maybe screw someone up totally.

Sort:  

Node operators can definitely show wrong information for accounts etc. If they'd like. It's a case of trusting the node operator. Hence why some users manage their own private nodes for all their needs as to not rely on others both in terms of technical burden (bots, apps etc.) and security. (trust)

In this case, for transactions, as I mentioned in the post... Some apps do provide "feedback" whenever potential phishing is about to occur. For example, as @asgarth explained, Peakd uses a "similarity check" to see if you are sending it to the right exchange account.

Unfortunately, some apps, scripts, bots etc. Do not have this check. For example, Keychain does not detect whether or not you're sending a transaction to @blocktraded instead of @blocktrades just because you accidentally pressed "D" (which is right beside S in most QWERTY layout keyboards around the world.) -- This implemented feature helps mitigate that. I'd love to give a warning, but there is no Are you sure you want to perform this transaction? system in the codebase. It's True or False, Yes or No. In my case, I decided on creating a blacklist of phishing accounts to protect accidental transfers.

If anyone, for some reason, would like to send a transfer to these accounts, they're more than welcome to use other nodes that do not have this phishing blacklist in place.

Even if all the public api node operators did somehow agree to gang up on someone - this is only a modification in Jussi. It isn't even a modification to any of the blockchain software itself (Jussi a middleware that routes things between hived (blockchain direct node) and hivemind (layer2 social media api).

All that's needed to broadcast is the most basic of hived nodes. The most minimal requirements, and not hard to find someone running one