RE: Denial of Service Vulnerability Fix by andrarchy

View this thread on: hive.blog | peakd.com | ecency.com

Viewing a response to: @glenalbrethsen/re-steemitblog-denial-of-service-vulnerability-fix-20190417t025941756z

steem · @andrarchy · Apr 17 '19

$0.03

I believe this will be fixed, but it is much easier to discuss and address UX issues like this if a PR is submitted and shared. Then I can say whether the PR will be approved or not. Also it may well be the case that a PR has already been submitted, in which case we can skip the discussion and move straight to the meat, "Will this get merged." The goal is to fix all UX issues so that it is a seamless experience, so any poor UX should be resolved.

👍 glenalbrethsen

`author`	andrarchy
`permlink`	re-glenalbrethsen-re-steemitblog-denial-of-service-vulnerability-fix-20190417t175626951z
`category`	steem
`json_metadata`	{"tags":["steem"],"app":"steemit/0.1"}
`created`	2019-04-17 17:56:27
`last_update`	2019-04-17 17:56:27
`depth`	2
`children`	3
`last_payout`	2019-04-24 17:56:27
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.020 HBD
`curator_payout_value`	0.006 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	450
`author_reputation`	230,168,201,522,782
`root_title`	"Denial of Service Vulnerability Fix"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	83,272,522
`net_rshares`	45,580,768,460
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
glenalbrethsen	0 B		45,580,768,460	18%

@glenalbrethsen · Apr 17 '19

Hey, @andrarchy

I think I'm looking at the PR list on steemit/steem's github now. I don't see anything. The most recent thing has to do with the Steem Proposal System (worker proposals via blocktrades), and some median feed update from 29 days ago.

Can anyone submit a pull request? I wouldn't know where to begin. I'm sure there's more technical terms for "stay logged in check box when checked doesn't stay logged in." :) I'm willing to learn, though, I'd just need to be pointed in the direction of some tutorials or something.

properties (22)

`author`	glenalbrethsen
`permlink`	re-andrarchy-re-glenalbrethsen-re-steemitblog-denial-of-service-vulnerability-fix-20190417t203642373z
`category`	steem
`json_metadata`	{"tags":["steem"],"users":["andrarchy"],"app":"steemit/0.1"}
`created`	2019-04-17 20:36:42
`last_update`	2019-04-17 20:36:42
`depth`	3
`children`	2
`last_payout`	2019-04-24 20:36:42
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	532
`author_reputation`	123,853,032,378,097
`root_title`	"Denial of Service Vulnerability Fix"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	83,279,090
`net_rshares`	0

@andrarchy · Apr 17 '19

$0.02

Are you using your active key to sign in to steemitwallet.com? The active key is not cached because that would put them at risk re: hacking. If you are using your posting key to sign into steemitwallet, this should not be happening. Also if you sign in with your master password this should not be happening because that is used to derive your posting key which would then be cached.

So if you're using your active key then this is the desired behavior, but if not, let me know as that would be a bug.

👍 glenalbrethsen

`author`	andrarchy
`permlink`	re-glenalbrethsen-re-andrarchy-re-glenalbrethsen-re-steemitblog-denial-of-service-vulnerability-fix-20190417t213725709z
`category`	steem
`json_metadata`	{"tags":["steem"],"app":"steemit/0.1"}
`created`	2019-04-17 21:37:24
`last_update`	2019-04-17 21:37:24
`depth`	4
`children`	1
`last_payout`	2019-04-24 21:37:24
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.018 HBD
`curator_payout_value`	0.005 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	502
`author_reputation`	230,168,201,522,782
`root_title`	"Denial of Service Vulnerability Fix"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	83,281,442
`net_rshares`	43,957,178,447
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
glenalbrethsen	0 B		43,957,178,447	18%

@glenalbrethsen · Apr 27 '19

hey, @andrarchy.

I guess I was using the Active key, which is odd, since I thought I'd changed it to the posting key. However, I just did make the change, and it seems to be doing what I would like it to do, so thanks for the IT help. :)

properties (22)