We welcome you all to this week's issue of #talkchannel in the WORLD OF XPILAR Community Theme this week: "Can anyone steal upvote from you?"( week28)

in WORLD OF XPILAR4 months ago

The idea of ​​"Talk Channel"

Maybe many of us want a place we could only talk about loosely and firmly. Ask questions about things we wonder about, for example, about the STEEM community or other things. That's why we want to create a post with "talk channel" Just talk to some or ask questions

The post"Talk Channel" will be posted weekly, every Monday and is open to everyone the whole week. And there we should all appreciate comments and responses to each other.
Yes, we need to talk to each other as well

Theme this week: "Can anyone steal upvote from you?"

The answer is yes.

phishing-3390518_1280.jpg
The image was created by Tumisu from Pixabay.com

Keys dont matter anything if you have given access to posting to any app
it will still continue to works as posting auth (not the keys but the access token ) , unless you revoke access

We discovered it here a day from one of our Norwegian team members @bippe

As this photo shows, all 100% upvotes are stolen from @bippe.

The thief is @dims

image.png

image.png

image.png

image.png

image.png

image.png

Of course, these upvotes will be downvoted to minus

https://steemd.com/@ username, you will find the list of apps you have authorized.
Time to revoke some of them

image.png

We invite @steem-supporter who set up the links for us, he can explain this in more detail


https://steemlogin.com/revoke/dpoll.xyz
https://steemlogin.com/revoke/utopian.app
https://steemlogin.com/revoke/steemreply.app
https://steemlogin.com/revoke/steemauto
https://steemlogin.com/revoke/partiko-steemcon
https://steemlogin.com/revoke/dtube.app
https://steemlogin.com/revoke/downvote-tool
https://steemlogin.com/revoke/dlive.app
https://steemlogin.com/revoke/buildteam
https://steemlogin.com/revoke/bottracker.app


In the "talk channel" we or you can also post a topic that needs a review, for example tools on Steem or other things you want to know about

SteemWorld.org Built with ♥ by @steemchiller

image.png



Responsibility moderator for "Talk Channel" is @adeljose

Regards
@adeljose @art-venture @stef1 @myskye @sultan-aceh
@franyeligonzalez @leveuf @axeman @xpilar





Sort:  

thanks for the tag ,

basically when you change keys the keys are changed and people cannot access the account without having a new updated keys ,

But when you authorize an app to do posting operations (post, comment , vote , downvote) , you also give an access token to the app (previously via steemconnetct and now via steemlogn) , which the app owner can use no matter you changed your keys or not until you revoke the app.

for example i own steemauto.app and all steemauto services votes , posts are boradcasted using a wif of account steemauto.app , combining with the access token we get from steemlogin , so you are not yet secured , so revoke all access to apps you stopped using or are no more oeprating on steem (like previous steemauto) , these maybe dangerous as they can abuse the chain .

Hope this answers the question


If you think i am helping the community please support us my casting your witness vote to steem-supporter

Also add revoke link for steempeak.app,nextcolony,holybread.app

I authorized my account in the few site like steemvoter,partiko,steemdunk,smartsteem ,e,t,c so they can also use my vote powers?

everyone you authorized can use your posting auth

 4 months ago 

Wow... I didn't know that could be done. Interesting topic! Every day we learn something new. Greetings friend @xpilar!!

@xpilar thank you for this informational and reminder for us to be aware of any apps that we authorize using our posting key

Hello @xpilar.

Amazing topic!
Uhm sorry but I have an offtopic question, would you be willing to be a judge for a short story contest I will be creating? It's part of the knitrias project initiatives.

I wish you a good day 😊

Hello @XPilar, I don't want to rush you whatsoever, but I would really like to know, if you are interested, since I would like to start the contest today :)
If so, I would also like to know how to reach you on discord or you can reach me, since I will be making a discord for the judges of the contest.

Thank you very much for taking your time to read this.
I wish you a wonderful day!

Hey this is very good information thanks for give information

Thanks for the invitation @rashia, but I hope you can find others to be a judge.
I can sponsor your competition with 10 Steem :)

I can understand, thank you for considering it though. And wow thank you so much! I could raise the rewards accordingly 😁

@xpilar considering your amazing community and generous support for the short story contest, could I ask you for your support by sharing the contest in your community? I will publish the post tomorrow. 🥰

Thanks for this valuable information

it is really very much informative so very sad, how people are stealing vote

Hi friends, this you have explained is really serious and dangerous for users, thanks for sharing this information..!

Thanks for letting us know this things, am never gonna let and app access my account.

This clarification is very useful. Unfortunately, these cases have also occurred in the past.

thank you so much for this information, especially beneficial for newbies who are just starting out in this platform.

Cheers, mate.

Everything is possible in the Internet world, we just have to investigate about the control and monitoring applications that help us to keep our Steemit account safe, which present @xpilar in their post.

Welcome and success on the platform.

Am glad to be a part of this community and this post is really educative and helpful . Thanks for this awesome contribution

So what app did made bippe's account to get compromised?

Hi @cryptopie

@dims says that @bippe indicated his posting key in the wallet.
I asked him to give me proof of that

That can happen to you if you follow any unsecured link and this leads you to use your vote without being aware of it, you have to pay attention to what permission you make.

I think that is possible, since not long ago a user published an article where he showed that many inactive accounts were being used, and he made a call to that account, in addition to leaving a link to let them use your vote.

That's right, anything's possible.

I think I've heard about those cases of account plagiarism.

Really?

Well, this should be easy to find out, at least, after the fact that an unauthorized vote is given by a user, we could find out through applications like SteemWorld or Steemd

Thanks @xpilar for this post , becouse i have a question about my wallet from 1 week i am seeing that my author rewards automaticaly claimed . I dont know who has acces to my account . I logged on through 3 apps in past 3 weeks ..
Steempeak
Travelfeed
Dlike
Now please tell me what to do ?
Hope you will reply me as soon as possible
Thanks
Regard @rashid001

Hi @rashid001

Can you explain more about it, take a screenshot of it

Thanks @xpilar, for replying me .. from 3 hour i have not claimed any single rewards in my wallet by myself but these rewards were claimed automatically ,i am sharing screenshots below.

Screenshot_2020-07-10-19-30-48-69.png

Screenshot_2020-07-10-19-31-14-12.png

Screenshot_2020-07-10-19-31-26-41.png

Hi @rashid001

You can use the example from @ritch info which he refers to here

another way to revoke authorities by using the steempeak front-end.

Go to your profile
Actions button
Keys & permissions
Authorities
Then just revoke all of them. I hope this info could be useful for new steemians.

🌹Thanks alot Sir🌹😊

this action cannot be tolerated, it is very dangerous especially for novice steemit users. I hope there will be a hard action from Team Steem.
thank you

Ohh this is bad but we can logout form those dirty site and dapp might it can be solution ,...????!?

you must revoke, you can use the links described in the post

I'm just realizing that. I'm a newbie here. I am grateful to have come across this information at the start of my journey so that I can apply cautious when giving assess to posting on any app.

Thank you very much for sharing and your kind response @steem-supporter

❤️❤️❤️❤️
Becky.

How do I become a verified member of the community @xpilar. I've subscribed already and ice read the kind of quality contents you expect from subscribers.

Thank you very much.
❤️❤️❤️❤️
Becky

!shop
$trdo

Congratulations @eii, you successfuly trended the post shared by @xpilar!
@xpilar will receive 0.04671675 TRDO & @eii will get 0.03114450 TRDO curation in 3 Days from Post Created Date!

"Call TRDO, Your Comment Worth Something!"

To view or trade TRDO go to steem-engine.com
Join TRDO Discord Channel or Join TRDO Web Site

This is an experiment, you indicated your posting key in the wallet. Change your keys!

Hi @dims

you call it an experiment, why did you test it several times.
Can you show me that you really found @bippe's posting key in his wallet

Hi @xpilar,
Of course, please see memo of transfer from Bittrex 6251.937 STEEM 6 days ago in @bippe's wallet.

Yes, you're right @dims, it's a posting key, not a memo key
I assume you are using a program to find keys in a wallet that has been used incorrectly

Oh no, I do not have a program, I saw a key by accident in bittrex's wallet.

Ok, great that we got to shed light on this.
You have been very good at answering us, you actually deserve those upvotes to stand. Good luck

Oh thanks. And do not forget to change the keys;) Good luck!

resteemed post! How to avoid these problems

As described

Incredible work!!! Good idea!!!

Gracias por esta valiosa información

I do not want to enter using third party links, I hope, everyone must be careful, always be vigilant when using third party links, I suspect they are using the application to carry out their activities, thank you for providing theft related information.

Hello, thank you @xpilar

Thank you very much for all the information shared here and I have already revoked some permits, for safety.
We also share your post so that more people see this information. :)

Thanks @team-mexico
yes everyone needs to know about this

Thank you for sharing this info @xpilar. Let me add another way to revoke authorities by using the steempeak front-end.

  1. Go to your profile
  2. Actions button
  3. Keys & permissions
  4. Authorities

Then just revoke all of them. I hope this info could be useful for new steemians.

pic.png

Have a nice day!

Hi @ritch

Thanks for the information, it's helpful

very informative post dear. love you.

@xpilar thanks for passing this across, will must be very careful with all our keys and how will used them.

你好鸭,xpilar!

@eii给您叫了一份外卖!

小笼包

吃饱了吗?跟我猜拳吧! 石头,剪刀,布~

如果您对我的服务满意,请不要吝啬您的点赞~

Congratulations @xpilar, your post successfully recieved 0.04671675 TRDO from below listed TRENDO callers:

@eii earned : 0.0311445 TRDO curation


To view or trade TRDO go to steem-engine.com
Join TRDO Discord Channel or Join TRDO Web Site

Coin Marketplace

STEEM 0.15
TRX 0.03
JST 0.024
BTC 13570.31
ETH 390.85
USDT 1.00
SBD 0.98