I just tried to login to Busy.org but I got a very strange message that only had the option "continue" in the sense of "accept". A few days ago it was this one:
SteemConnect is the trusted way to connect apps to Steem via Steemit.com access. It means the guys at Busy.org never need to have access to your key directly, like the way OpenID works. It looks they've updated to show you exactly what the posting key can do so there has been no effective change, only a UI change.
That's what logging in is so if you don't want to log in you can just not log in and continue using Busy.org without being logged in.
But I agree that there should be an option to choose between permissions. That is for SteemConnect to implement however, not Busy.org
I love busy.org and SteemConnect, my hyper paranoia will never allow me to click that continue button though. Ironically, I have always known this was the access I was granting when using the SteemConnect, but the raw brutal transparency just hit a little too hard.
How do I post articles and comments on Busy without being logged in?
You can't! But you can use Busy.org for viewing without logging in, that's the only point I make. Otherwise you have to accept it.
I should also say that using your posting key is more secure than you're master key (called the active key), so really at every level they seem to be following best practice here. If your posting key is compromised you can always regenerate it with your master key.
I can see how you or anyone could come to that conclusion, I don't debate that it should be clearer, I'm just trying to make it clear to you, here 🙂 The ticket has been accepted so looks like they will do something about it.
Utopian has detected 1 bot votes. I am the only bot you should love!!
Achievements
Much more informative than others in this category. Good job! Up-vote this comment to grow my power and help Open Source contributions like this one. Want to chat? Join me on Discord https://discord.gg/Pc8HG9x
SteemConnect is the trusted way to connect apps to Steem via Steemit.com access. It means the guys at Busy.org never need to have access to your key directly, like the way OpenID works. It looks they've updated to show you exactly what the posting key can do so there has been no effective change, only a UI change.
That's what logging in is so if you don't want to log in you can just not log in and continue using Busy.org without being logged in.
But I agree that there should be an option to choose between permissions. That is for SteemConnect to implement however, not Busy.org
I love busy.org and SteemConnect, my hyper paranoia will never allow me to click that continue button though. Ironically, I have always known this was the access I was granting when using the SteemConnect, but the raw brutal transparency just hit a little too hard.
Let it hit hard and look into the jaws of reality!
You can't! But you can use Busy.org for viewing without logging in, that's the only point I make. Otherwise you have to accept it.
I should also say that using your posting key is more secure than you're master key (called the active key), so really at every level they seem to be following best practice here. If your posting key is compromised you can always regenerate it with your master key.
I can see how you or anyone could come to that conclusion, I don't debate that it should be clearer, I'm just trying to make it clear to you, here 🙂 The ticket has been accepted so looks like they will do something about it.
This might help you:
https://busy.org/utopian-io/@gregory.latinier/design-of-the-authorize-page-and-add-revoke-tokens
Wow this is so relieving thank you
Upvoted and resteemed
Thank you for the contribution. It has been approved.
You can contact us on Discord.
[utopian-moderator]
Hey @doodlebear I am @utopian-io. I have just super-voted you at 0.3% Power!
Suggestions https://utopian.io/rules
Achievements
Up-vote this comment to grow my power and help Open Source contributions like this one. Want to chat? Join me on Discord https://discord.gg/Pc8HG9x