RE: On Sharing Keys and Passwords with SteemConnect: How Safe Is It? by overunitydotcom

View this thread on: hive.blog | peakd.com | ecency.com

Viewing a response to: @technerd888/on-sharing-keys-and-passwords-with-steemconnect-how-safe-is-it

steemconnect · @overunitydotcom · Mar 29 '18

$0.03

But what, if http://steemconnect.com is ever hacked and manipulated to fish the Master passwords in this process ??

👍 overunitydotcom

`author`	overunitydotcom
`permlink`	re-technerd888-on-sharing-keys-and-passwords-with-steemconnect-how-safe-is-it-20180329t184050508z
`category`	steemconnect
`json_metadata`	{"tags":["steemconnect"],"links":["http://steemconnect.com"],"app":"steemit/0.1"}
`created`	2018-03-29 18:40:51
`last_update`	2018-03-29 18:40:51
`depth`	1
`children`	5
`last_payout`	2018-04-05 18:40:51
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.031 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	115
`author_reputation`	306,060,043,399
`root_title`	"On Sharing Keys and Passwords with SteemConnect: How Safe Is It?"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	47,325,158
`net_rshares`	10,836,080,013
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
overunitydotcom	0 B		10,836,080,013	100%

@technerd888 · Mar 30 '18

$0.14

Hi @overunitydotcom, I'm not an expert in security.  But I think getting hacked is certainly within the realm of possibility.  There are some things we can do to reduce this possibility.  First, make sure the steemconnect must be accessed via a secure HTTPS connection, so you'll need to make sure you see this on your browser:

<center>![Screen Shot 2018-03-30 at 6.43.28 AM.png](https://gateway.ipfs.io/ipfs/QmemxMCP4X8U1eQ3ofGFY6som99wDUsrtCJ4ELfaU6t3kK)</center>

Second, always use the Posting Key if all you're gonna be doing are upvoting, posting and commenting.  If you do need to transfer Steem or SBD, or grant an app access to your account, use the Active Key.  In short, never ever use your Owner Key -- reserve the owner key only for changing passwords.  

Third, if you have any SBD or Steem in your wallet, move them to Savings or Power Up to Steem Power.

These should minimize your risk exposure.  Hope this helps.

👍 technerd888, remotehorst23, overunitydotcom

`author`	technerd888
`permlink`	re-overunitydotcom-re-technerd888-on-sharing-keys-and-passwords-with-steemconnect-how-safe-is-it-20180330t105119676z
`category`	steemconnect
`json_metadata`	{"tags":["steemconnect"],"community":"busy","app":"busy/2.4.0"}
`created`	2018-03-30 10:51:30
`last_update`	2018-03-30 10:51:30
`depth`	2
`children`	4
`last_payout`	2018-04-06 10:51:30
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.106 HBD
`curator_payout_value`	0.034 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	931
`author_reputation`	5,061,271,852,330
`root_title`	"On Sharing Keys and Passwords with SteemConnect: How Safe Is It?"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	47,434,420
`net_rshares`	46,864,915,570
`author_curate_reward`	""

properties (23)vote details (3)

voter	rshares	pct
technerd888	46,864,915,570	20%
overunitydotcom	0	100%
remotehorst23	0	100%

@overunitydotcom · Apr 20 '18 (edited)

$0.11

Hmm, but steeemconnect wants to have your master key, not just your posting key... 
So who is running Steemconnect.com ?
They don´t even have an impressum ( about us) on their website... Why should I trust them with my master keys ???

👍 overunitydotcom, technerd888

`author`	overunitydotcom
`permlink`	re-technerd888-re-overunitydotcom-re-technerd888-on-sharing-keys-and-passwords-with-steemconnect-how-safe-is-it-20180420t180656226z
`category`	steemconnect
`json_metadata`	{"tags":["steemconnect"],"app":"steemit/0.1"}
`created`	2018-04-20 18:07:00
`last_update`	2018-04-20 18:07:21
`depth`	3
`children`	2
`last_payout`	2018-04-27 18:07:00
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.104 HBD
`curator_payout_value`	0.003 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	234
`author_reputation`	306,060,043,399
`root_title`	"On Sharing Keys and Passwords with SteemConnect: How Safe Is It?"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	51,168,768
`net_rshares`	19,239,679,267
`author_curate_reward`	""

properties (23)vote details (2)

voter	weight	wgt%	rshares	pct	time
technerd888	0 B		9,267,443,984	3%
overunitydotcom	0 B		9,972,235,283	100%

@technerd888 · Apr 21 '18

$0.72

Hi @overunitydotcom, 

They don't store the keys that you enter in steemconnect.  Also, you'll have the option of either the active key or the owner key (master password).   I always use active key.  Never use the owner key as much as possible.

Steemconnect was developed by the busy.org team (the team behind https://busy.org).  They've been endorsed specifically by the Steemit team to develop it.  

Just to let you know, I've used Steemconnect countless times and have not encountered any issue so far.  So I'm reasonably confident in it now.

👍 technerd888, romancereviews, overunitydotcom, zorank

`author`	technerd888
`permlink`	re-overunitydotcom-re-technerd888-re-overunitydotcom-re-technerd888-on-sharing-keys-and-passwords-with-steemconnect-how-safe-is-it-20180421t042850926z
`category`	steemconnect
`json_metadata`	{"tags":["steemconnect"],"community":"busy","app":"busy/2.4.0"}
`created`	2018-04-21 04:28:51
`last_update`	2018-04-21 04:28:51
`depth`	4
`children`	1
`last_payout`	2018-04-28 04:28:51
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.546 HBD
`curator_payout_value`	0.171 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	547
`author_reputation`	5,061,271,852,330
`root_title`	"On Sharing Keys and Passwords with SteemConnect: How Safe Is It?"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	51,240,910
`net_rshares`	117,751,608,325
`author_curate_reward`	""

properties (23)vote details (4)

voter	rshares	pct
technerd888	61,794,712,350	20%
romancereviews	45,111,601,853	100%
overunitydotcom	10,676,795,384	100%
zorank	168,498,738	100%

1 reply

@overunitydotcom · Apr 20 '18

$0.09

Where is then my Masterkey stored ? On the Steemconnect.com database or where ?
Who can access it ?

👍 overunitydotcom, technerd888, steemsociety, pozmu

`author`	overunitydotcom
`permlink`	re-technerd888-re-overunitydotcom-re-technerd888-on-sharing-keys-and-passwords-with-steemconnect-how-safe-is-it-20180420t180849208z
`category`	steemconnect
`json_metadata`	{"tags":["steemconnect"],"app":"steemit/0.1"}
`created`	2018-04-20 18:08:51
`last_update`	2018-04-20 18:08:51
`depth`	3
`children`	0
`last_payout`	2018-04-27 18:08:51
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.087 HBD
`curator_payout_value`	0.003 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	99
`author_reputation`	306,060,043,399
`root_title`	"On Sharing Keys and Passwords with SteemConnect: How Safe Is It?"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	51,169,050
`net_rshares`	15,933,743,548
`author_curate_reward`	""

properties (23)vote details (4)

voter	rshares	pct
technerd888	6,178,295,989	2%
overunitydotcom	9,755,447,559	100%
pozmu	0	100%
steemsociety	0	0%