I will give it a shot. Right now there are three types of permissions recognised by the blockchain:
- active: allows things like moving money, voting for witnesses, powering up, powering down, and updating your account parameters.
- posting: allows things like posting, voting on posts and comments, following, editing, etc.
- owner: allows changing your other keys. If someone else gets your owner key it is very bad news.
Posting authority, for example, is what you give to apps like Partiko so that they can do things you asked them to do. However, the way things work right now, there is no way to give an app the power to vote without also giving the power to post as well, or vice versa.
When one popular community was hacked earlier this year, the posting authorities held for those users meant that the hackers were able to make upvotes from all the users' accounts. If we could give apps the right to post for us without giving them the right to vote, we could dampen the impact of another such incident.
Other new, exciting possibilities would open up as well; a new "market" authority for example, with the ability to make bids on the internal market but not to move funds, could power a mobile trading app.
Much appreciated! Yes , I was not aware of the reason why that incident happened and you come up with a good idea. 🙌
Posted using Partiko Android