RE: [Streemian.com] Operation 'Follow the Votes' by xeroc

View this thread on: hive.blog | peakd.com | ecency.com

Viewing a response to: @spaced/re-streemian-streemian-com-operation-follow-the-votes-20160713t134618622z

streemian · @xeroc · Jul 13 '16

No, it is not. However the foundations (`piston`) are open source and available for free to use: http://piston.rocks

👍 fulltimegeek, chamviet

`author`	xeroc
`permlink`	re-spaced-re-streemian-streemian-com-operation-follow-the-votes-20160713t135327026z
`category`	streemian
`json_metadata`	{"tags":["streemian"],"links":["http://piston.rocks"]}
`created`	2016-07-13 13:53:27
`last_update`	2016-07-13 13:53:27
`depth`	2
`children`	8
`last_payout`	2016-08-23 23:58:18
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	116
`author_reputation`	118,819,064,085,695
`root_title`	"[Streemian.com] Operation 'Follow the Votes'"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	95,370
`net_rshares`	1,813,577,700
`author_curate_reward`	""

properties (23)vote details (2)

voter	weight	wgt%	rshares	pct	time
chamviet	0 B		236,124,159	100%
fulltimegeek	0 B		1,577,453,541	100%

@spaced · Jul 13 '16 (edited)

I know about piston, and you wrote it. I have been reviewing the code base recently. Why isn't it? Seems pretty trivial.

Would it not also be much more secure if software with this function could be run locally? Seems there is a big trust issue with a service like this.

👍 fulltimegeek

`author`	spaced
`permlink`	re-xeroc-re-spaced-re-streemian-streemian-com-operation-follow-the-votes-20160713t140648466z
`category`	streemian
`json_metadata`	{"tags":["streemian"]}
`created`	2016-07-13 14:06:48
`last_update`	2016-07-13 14:07:36
`depth`	3
`children`	7
`last_payout`	2016-08-23 23:58:18
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	271
`author_reputation`	5,400,679,240,242
`root_title`	"[Streemian.com] Operation 'Follow the Votes'"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	95,487
`net_rshares`	1,577,453,541
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
fulltimegeek	0 B		1,577,453,541	100%

@xeroc · Jul 13 '16

If you want someone else to vote/post on your behalf, then you need to trust then entity. THere is no way around it.
Running to locally doesn't help you either, because you can't grow the numbers.

I can think of a distributed discovery process for agents and operators, but that still requires that others have posting/voting authority for your account.

👍 fulltimegeek

`author`	xeroc
`permlink`	re-spaced-re-xeroc-re-spaced-re-streemian-streemian-com-operation-follow-the-votes-20160713t141346890z
`category`	streemian
`json_metadata`	{"tags":["streemian"]}
`created`	2016-07-13 14:13:45
`last_update`	2016-07-13 14:13:45
`depth`	4
`children`	6
`last_payout`	2016-08-23 23:58:18
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	354
`author_reputation`	118,819,064,085,695
`root_title`	"[Streemian.com] Operation 'Follow the Votes'"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	95,564
`net_rshares`	1,577,453,541
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
fulltimegeek	0 B		1,577,453,541	100%

@spaced · Jul 13 '16

Could individuals not run a piece of software that watches the vote stream and then votes when a specific person on a defined list votes? 

Cross posting seems to be a similar issue, I actually already sketched out a program to do this. 

Maybe I'm misunderstanding but it appears pretty straight forward. I only see unnecessary danger of centralizing this.

👍 fulltimegeek

`author`	spaced
`permlink`	re-xeroc-re-spaced-re-xeroc-re-spaced-re-streemian-streemian-com-operation-follow-the-votes-20160713t142507283z
`category`	streemian
`json_metadata`	{"tags":["streemian"]}
`created`	2016-07-13 14:25:06
`last_update`	2016-07-13 14:25:06
`depth`	5
`children`	0
`last_payout`	2016-08-23 23:58:18
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	357
`author_reputation`	5,400,679,240,242
`root_title`	"[Streemian.com] Operation 'Follow the Votes'"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	95,692
`net_rshares`	1,545,260,611
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
fulltimegeek	0 B		1,545,260,611	100%

@spaced · Jul 13 '16

Also why are you allowing registration and sign up on a site without SSL? That is just simply reckless.

👍 fulltimegeek

`author`	spaced
`permlink`	re-xeroc-re-spaced-re-xeroc-re-spaced-re-streemian-streemian-com-operation-follow-the-votes-20160713t142624175z
`category`	streemian
`json_metadata`	{"tags":["streemian"]}
`created`	2016-07-13 14:26:24
`last_update`	2016-07-13 14:26:24
`depth`	5
`children`	0
`last_payout`	2016-08-23 23:58:18
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	103
`author_reputation`	5,400,679,240,242
`root_title`	"[Streemian.com] Operation 'Follow the Votes'"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	95,706
`net_rshares`	1,545,260,611
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
fulltimegeek	0 B		1,545,260,611	100%

@spaced · Jul 13 '16

Also the SSL on https://panel.xeroc.org:4089/ is not setup properly.

👍 fulltimegeek

`author`	spaced
`permlink`	re-xeroc-re-spaced-re-xeroc-re-spaced-re-streemian-streemian-com-operation-follow-the-votes-20160713t142936849z
`category`	streemian
`json_metadata`	{"tags":["streemian"],"links":["https://panel.xeroc.org:4089/"]}
`created`	2016-07-13 14:29:36
`last_update`	2016-07-13 14:29:36
`depth`	5
`children`	0
`last_payout`	2016-08-23 23:58:18
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	68
`author_reputation`	5,400,679,240,242
`root_title`	"[Streemian.com] Operation 'Follow the Votes'"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	95,740
`net_rshares`	1,545,260,611
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
fulltimegeek	0 B		1,545,260,611	100%

@spaced · Jul 13 '16 (edited)

And you probably should turn off tokens: Apache/2.2.22 (Debian)

Here is an exploit that works on that Apache version:
https://gist.github.com/bodokaiser/8704250

👍 fulltimegeek

`author`	spaced
`permlink`	re-xeroc-re-spaced-re-xeroc-re-spaced-re-streemian-streemian-com-operation-follow-the-votes-20160713t143052966z
`category`	streemian
`json_metadata`	{"tags":["streemian"],"links":["https://gist.github.com/bodokaiser/8704250"]}
`created`	2016-07-13 14:30:51
`last_update`	2016-07-13 14:31:57
`depth`	5
`children`	0
`last_payout`	2016-08-23 23:58:18
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	161
`author_reputation`	5,400,679,240,242
`root_title`	"[Streemian.com] Operation 'Follow the Votes'"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	95,757
`net_rshares`	1,513,067,682
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
fulltimegeek	0 B		1,513,067,682	100%

@xeroc · Jul 13 '16

Thanks for your replies and I understand your concerns. Let me address them.

> Could individuals not run a piece of software that watches the vote stream and then votes when a specific person on a defined list votes?

Sure, that can be done, but it requires additional efforts to be taken or an application to be run by the user. He also losses some time advantage.

As for xposting and upvoting, I think you missed a few essential points:
* not everyone is tech savvy enough to write or run a bot
* bots needs their own machines if they want to be run 24/7

> Also why are you allowing registration and sign up on a site without SSL? That is just simply reckless.

Apologise for that, I am working on this already!

The other issues, we have discussed on slack

👍 fulltimegeek

`author`	xeroc
`permlink`	re-xeroc-re-spaced-re-xeroc-re-spaced-re-streemian-streemian-com-operation-follow-the-votes-20160713t150743638z
`category`	streemian
`json_metadata`	{"tags":["streemian"]}
`created`	2016-07-13 15:07:42
`last_update`	2016-07-13 15:07:42
`depth`	5
`children`	1
`last_payout`	2016-08-23 23:58:18
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	762
`author_reputation`	118,819,064,085,695
`root_title`	"[Streemian.com] Operation 'Follow the Votes'"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	96,146
`net_rshares`	1,513,067,682
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
fulltimegeek	0 B		1,513,067,682	100%

1 reply