You are viewing a single comment's thread from:

RE: Announcing AutoSteem - An automation tool for voting, curating and browsing Steemit!

in #steemit8 years ago

Great work!

It's good that users have full control over their keys and behavior in the client side (that's why I still have concerns about BUSY). You still need to make your server and code secure(I'm not saying they're not), for example avoid compromise of js file on server side or possible XSS attacks, so people's keys won't leave the browser, although posting key only won't have big impact.

It's best that users can define the rules about how to vote for you, for example weight, frequency, delay and etc.

A side note that experienced users can modify the code in browser to bypass the 30 minute limitation as well as the vote-for-you feature.

Sort:  

Thanks abit, great points and comments here. Yes I realize that there are ways that devs could modify client side code if they really wanted, and while that is true, I don't think there are too many who know how or will care to. Plus, I trust that users on steemit will be happy to 'pay' for this application with a simple vote, which I also know is completely reasonable, considering the 100s of hours of dev, for essentially a free app.

As for the extra ideas and tips on more security, yes these are things I might move to a server in the future if needed, and am interested in using the SteemConnect for it as well, but I've had no luck with getting that to work so far. Thanks so much for your support abit!!!

Any ETA on when you'll have steemconnect support?

no plans. some users (including me) don't want to share keys with anyone, even a service such as steemconnect. It only takes a few seconds to use them in autosteem and its safer so no immediate needs really.

WARNING - The message you received from @unipsycho is a CONFIRMED SCAM!
DO NOT FOLLOW any instruction and DO NOT CLICK on any link in the comment!

For more information about this scam, read this post:
https://steemit.com/steemit/@arcange/phishing-site-reported-autosteemer-dot-com
https://steemit.com/steemit/@arcange/phishing-site-reported-autosteemer-dot-club
https://steemit.com/steemit/@arcange/phishing-site-reported-autosteem-dot-info

If you find my work to protect you and the community valuable, please consider to upvote this warning or to vote for my witness.