How to deal with "clone" or alternative website accessing the steem blockchain by artakan

View this thread on: hive.blog | peakd.com | ecency.com

security · @artakan · Jul 31 '16 (edited)

$0.50

How to deal with "clone" or alternative website accessing the steem blockchain

http://i.imgur.com/j1IGsBG.png
I am trying to start a discussion and find a solution about the following problem:

As steem.it is now [Open Source](https://steemit.com/steemit/@steemitblog/steemit-com-is-now-open-source), we will watch alternative site of steemit.com pop up everywhere.

So I guess we will want to login, sometimes if we want to interact with these sites.  How will we know we can trust them ?
Anyway, whatever happens in the future, NEVER, NEVER put anything else than your posting key to any website other tham steemit.com (even if they look the same). I on purpose created this url https://steemlt.com, replacing the i with an l to make the community aware of the security problems we could be confronted with.

If you want to build your own alternative of steemit.com, you can read my instructions here (https://steemit.com/steemit/@artakan/how-to-build-your-own-steemit-com-website).

But my main point is how we will trust the future alternative of steemit.com ?

👍 pal, gabi-dumitriu, jesta, artakan, mabiturm, nastrom, endgame, history, pedrosgali, ardina, nindzik12, dmns, cire81, forgetthefallen, softpunk, daysmega, eleiminer, danarm, luke490

`author`	artakan
`permlink`	how-to-deal-with-clone-or-alternative-website-accessing-the-steem-blockchain
`category`	security
`json_metadata`	{"tags":["security","steem","steamit"],"image":["http://i.imgur.com/j1IGsBG.png"]}
`created`	2016-07-31 09:54:51
`last_update`	2016-07-31 10:02:06
`depth`	0
`children`	11
`last_payout`	2016-08-30 22:50:42
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.388 HBD
`curator_payout_value`	0.107 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	985
`author_reputation`	2,351,335,125,519
`root_title`	"How to deal with "clone" or alternative website accessing the steem blockchain"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	507,750
`net_rshares`	375,024,299,879
`author_curate_reward`	""

properties (23)vote details (19)

voter	rshares	pct
nastrom	1,729,979,722	100%
pal	213,290,667,338	100%
history	379,413,258	100%
gabi-dumitriu	73,282,777,037	100%
endgame	410,978,802	100%
ardina	182,873,689	100%
jesta	69,656,048,854	100%
artakan	12,896,853,728	100%
cire81	2,513,464	100%
pedrosgali	296,293,949	100%
nindzik12	106,361,744	100%
luke490	0	100%
daysmega	1,240,130	0.1%
dmns	60,396,465	100%
forgetthefallen	1,248,757	0.1%
eleiminer	1,232,854	0.1%
softpunk	1,243,442	0.1%
mabiturm	2,724,176,646	100%
danarm	0	100%

@daysmega · Jul 31 '16

Nice @artakan 
 Shot you an Upvote :)

👎 steemservices

`author`	daysmega
`permlink`	how-to-deal-with-clone-or-alternative-website-accessing-the-steem-blockchain
`category`	security
`json_metadata`	""
`created`	2016-07-31 09:59:09
`last_update`	2016-07-31 09:59:09
`depth`	1
`children`	0
`last_payout`	2016-08-30 22:50:42
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	37
`author_reputation`	-513,060,008,757
`root_title`	"How to deal with "clone" or alternative website accessing the steem blockchain"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	507,798
`net_rshares`	-10,989,218,054
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
steemservices	0 B		-10,989,218,054	-1%

@eleiminer · Jul 31 '16

Upvoted

properties (22)

`author`	eleiminer
`permlink`	how-to-deal-with-clone-or-alternative-website-accessing-the-steem-blockchain
`category`	security
`json_metadata`	""
`created`	2016-07-31 09:55:27
`last_update`	2016-07-31 09:55:27
`depth`	1
`children`	0
`last_payout`	2016-08-30 22:50:42
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	7
`author_reputation`	-792,845,825,211
`root_title`	"How to deal with "clone" or alternative website accessing the steem blockchain"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	507,756
`net_rshares`	0

@forgetthefallen · Jul 31 '16

Keep up the great work @artakan 
 Upvoted

👎 steemservices5, antispam

`author`	forgetthefallen
`permlink`	how-to-deal-with-clone-or-alternative-website-accessing-the-steem-blockchain
`category`	security
`json_metadata`	""
`created`	2016-07-31 10:02:39
`last_update`	2016-07-31 10:02:39
`depth`	1
`children`	0
`last_payout`	2016-08-30 22:50:42
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	42
`author_reputation`	-540,797,285,730
`root_title`	"How to deal with "clone" or alternative website accessing the steem blockchain"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	507,820
`net_rshares`	-264,914,274
`author_curate_reward`	""

properties (23)vote details (2)

voter	weight	wgt%	rshares	pct	time
steemservices5	0 B		-261,689,648	-1%
antispam	0 B		-3,224,626	-5%

@herzmeister · Jul 31 '16

On the one hand, that's desirable, because the blockchain is open and decentralized. There have been other decentralized social networks out there already for a while (Diaspora*, Friendica) that also have different "pods" or "hubs" in the web (though you can mostly log in only at your "home pod").

On the other hand, of course someone who runs a web frontend could be malicious. Though your wallet keys and passwords could and should all be handled client-side (in javascript), an evil web administrator can of course serve a modified version that sends home your passwords and keys.

But you also have to trust the guys who run steemit.com that they don't secretly store your private keys and passwords.

That's why the best solution for a blockchain-based social network would be its own client, its own app to install and run.

👍 artakan, skarl, luke490

`author`	herzmeister
`permlink`	re-artakan-how-to-deal-with-clone-or-alternative-website-accessing-the-steem-blockchain-20160731t100844067z
`category`	security
`json_metadata`	{"tags":["security"]}
`created`	2016-07-31 10:08:12
`last_update`	2016-07-31 10:08:12
`depth`	1
`children`	1
`last_payout`	2016-08-30 22:50:42
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	831
`author_reputation`	20,893,103,396,296
`root_title`	"How to deal with "clone" or alternative website accessing the steem blockchain"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	507,851
`net_rshares`	12,643,974,243
`author_curate_reward`	""

properties (23)vote details (3)

voter	rshares	pct
artakan	12,643,974,243	100%
luke490	0	100%
skarl	0	100%

@artakan · Jul 31 '16

Well for steemit.com, I have to trust them, no choice, but for the future clones to come, I am not sure ... There should be something more secure put in place.

properties (22)

`author`	artakan
`permlink`	re-herzmeister-re-artakan-how-to-deal-with-clone-or-alternative-website-accessing-the-steem-blockchain-20160731t113535292z
`category`	security
`json_metadata`	{"tags":["security"]}
`created`	2016-07-31 11:35:33
`last_update`	2016-07-31 11:35:33
`depth`	2
`children`	0
`last_payout`	2016-08-30 22:50:42
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	159
`author_reputation`	2,351,335,125,519
`root_title`	"How to deal with "clone" or alternative website accessing the steem blockchain"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	508,818
`net_rshares`	0

@isaac.asimov · Jul 31 '16

Flesch Kincaid Grade Level

Hi! This post has a <a href="https://en.wikipedia.org/wiki/Flesch%E2%80%93Kincaid_readability_tests">Flesch-Kincaid</a> grade level of 10.8 and reading ease of 56%. This puts the writing level on par with Michael Crichton and Mitt Romney.

👎 steemservices1, cheetah09, antispam

`author`	isaac.asimov
`permlink`	re-how-to-deal-with-clone-or-alternative-website-accessing-the-steem-blockchain-20160731t095452
`category`	security
`json_metadata`	""
`created`	2016-07-31 09:54:51
`last_update`	2016-07-31 09:54:51
`depth`	1
`children`	0
`last_payout`	2016-08-30 22:50:42
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	238
`author_reputation`	-982,572,424,326
`root_title`	"How to deal with "clone" or alternative website accessing the steem blockchain"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	507,751
`net_rshares`	-543,519,124
`author_curate_reward`	""

properties (23)vote details (3)

voter	rshares	pct
steemservices1	-535,416,365	-1%
cheetah09	-4,878,133	-20%
antispam	-3,224,626	-5%

@jesta · Jul 31 '16

$0.12

I'm not sure this is a problem exclusively with steemit and it's source code. It's the same risk as someone running a fake store online or performing a phishing attack. This kind of stuff happens all the time! Peoples credit cards, user credentials and personal information gets stolen all the time.

This isn't a problem with steemit alone, this is a problem with the internet itself. Vigilance on the part of the user is the solution here.

👍 jesta, artakan

`author`	jesta
`permlink`	re-artakan-how-to-deal-with-clone-or-alternative-website-accessing-the-steem-blockchain-20160731t102559034z
`category`	security
`json_metadata`	{"tags":["security"]}
`created`	2016-07-31 10:25:57
`last_update`	2016-07-31 10:25:57
`depth`	1
`children`	1
`last_payout`	2016-08-30 22:50:42
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.110 HBD
`curator_payout_value`	0.008 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	441
`author_reputation`	140,605,453,893,072
`root_title`	"How to deal with "clone" or alternative website accessing the steem blockchain"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	507,967
`net_rshares`	82,300,023,097
`author_curate_reward`	""

properties (23)vote details (2)

voter	weight	wgt%	rshares	pct	time
jesta	0 B		69,656,048,854	100%
artakan	0 B		12,643,974,243	100%

@artakan · Jul 31 '16

Ok, but I do not feel comfortable giving my private key to any third party website. Steemit.com should create  a service like the OAuth protocol.

properties (22)

`author`	artakan
`permlink`	re-jesta-re-artakan-how-to-deal-with-clone-or-alternative-website-accessing-the-steem-blockchain-20160731t113326311z
`category`	security
`json_metadata`	{"tags":["security"]}
`created`	2016-07-31 11:33:24
`last_update`	2016-07-31 11:33:24
`depth`	2
`children`	0
`last_payout`	2016-08-30 22:50:42
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	145
`author_reputation`	2,351,335,125,519
`root_title`	"How to deal with "clone" or alternative website accessing the steem blockchain"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	508,793
`net_rshares`	0

@random-potato · Jul 31 '16 (edited)

@arkatakan your site is listed with the 'scam' tag over here - https://steemit.com/scam/@ash/scam-alert-steemlt-com - you might want to go over and put their minds at ease.

👍 artakan

`author`	random-potato
`permlink`	re-artakan-how-to-deal-with-clone-or-alternative-website-accessing-the-steem-blockchain-20160731t102610210z
`category`	security
`json_metadata`	{"tags":["security"],"users":["arkatakan"],"links":["https://steemit.com/scam/@ash/scam-alert-steemlt-com"]}
`created`	2016-07-31 10:26:09
`last_update`	2016-07-31 10:26:27
`depth`	1
`children`	1
`last_payout`	2016-08-30 22:50:42
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	172
`author_reputation`	112,358,983,053
`root_title`	"How to deal with "clone" or alternative website accessing the steem blockchain"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	507,974
`net_rshares`	12,643,974,243
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
artakan	0 B		12,643,974,243	100%

@artakan · Jul 31 '16 (edited)

Thank you, at least there was a reaction, that's good. But my intention were not to scam anyone, just to raise awareness. 
And thank you to defend me over there, I appreciate that.

properties (22)

`author`	artakan
`permlink`	re-random-potato-re-artakan-how-to-deal-with-clone-or-alternative-website-accessing-the-steem-blockchain-20160731t104027215z
`category`	security
`json_metadata`	{"tags":["security"]}
`created`	2016-07-31 10:40:24
`last_update`	2016-07-31 10:40:42
`depth`	2
`children`	0
`last_payout`	2016-08-30 22:50:42
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	180
`author_reputation`	2,351,335,125,519
`root_title`	"How to deal with "clone" or alternative website accessing the steem blockchain"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	508,117
`net_rshares`	0

@softpunk · Jul 31 '16

Keep up the great work @artakan 
 Upvoted

👎 cheetah19

`author`	softpunk
`permlink`	how-to-deal-with-clone-or-alternative-website-accessing-the-steem-blockchain
`category`	security
`json_metadata`	""
`created`	2016-07-31 10:00:09
`last_update`	2016-07-31 10:00:09
`depth`	1
`children`	0
`last_payout`	2016-08-30 22:50:42
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	42
`author_reputation`	-711,516,507,127
`root_title`	"How to deal with "clone" or alternative website accessing the steem blockchain"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	507,806
`net_rshares`	-9,634,277
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
cheetah19	0 B		-9,634,277	-20%