RE: [ingan.elements] Idea to prevent fraud

You are viewing a single comment's thread from:

RE: [ingan.elements] Idea to prevent fraud

etainclub (78)Verified Developerin Steem Dev • 19 days ago

thank you for sharing your thoughts. I wall also look into the 'recovery thing'.

19 days ago in Steem Dev by etainclub (78)Verified Developer

Sort:

moecki (70)Verified Developer 18 days ago (edited)

I have thought a little about the problem.

I think the only way to handle this safely at the moment would be to wait 30 days + x hours.
I could imagine the following procedure (the new steps are in italics):

The seller registers the account with the master password.
The app assigns a new master password and then changes (only) the OwnerKey (so that the seller can continue to use the account).
The waiting period of 30 days + x hours (recovery window plus x hours for safety) begins.
The account is displayed as "reservable" in the app. After the waiting period has expired, the account is displayed as "available for sale".
The purchaser transfers the amount of steem to the service account when buying the account.
~~At the moment of the purchase, the app changes the master password to a new one using the initial private owner key.~~
Wait until the waiting period has expired.
Then, the purchaser gets the new password and the old password is not valid anymore.
The service account transfers the amount of steem to the seller.
Refund the amount to the purchaser if an error occurs during this process.

As an option, you could also offer a risk variant for the buyer, where the waiting period can be explicitly deactivated...

So, now it's your turn :-)

$5.05

4 votes

[-]

etainclub (78)Verified Developer 17 days ago

Thank you for your idea. Now I know how the account recovery works.

What if the recovery account is changed to something else owned by the buyer at the time of purchase?

Then, the seller cannot try to recover the account. right?

$0.22

1 vote

[-]

moecki (70)Verified Developer 17 days ago

I think so, but changing the recovery account also takes 30 days. The old recovery account is valid for this period. For your purpose, changing the recovery account immediately at the time of purchase would therefore not bring any advantage.
You can see this with my account (Account Details on https://steemworld.org/@moecki). I changed the recovery account today.

$0.00

[-]