Social Engineering 101: Beyond Simply Stealing Steem Dollars! Guranteed to Make You Rich :-) #steemit
Edit: I no longer espouse the anti-whale views expressed in this article, and am keeping this post because I think it was fairly well written.
Since I'm inherently irrational, may as well commit to it completely!
Hopefully scam-whales will upvote my work, since it seems no one else really gives a crap!
So before I discussed how easy it would be for a "malicious" user to steal Steem dollars by impersonating exchanges.
That's a brilliant way to make money since devs don't seem to care, so no one will be preventing you from earning money.
Just remember: Everytime you receive some SBD/Steem from a user say "Sorry for your loss".
It's a matter of basic etiquette.
But why stop there?
This platform is ripe for social engineering and nothing is being done to discourage it, Yay!
Lesson is starting now shhh...
Note: I've talked with one of the owners of this site: http://www.redditsecrets.com/buy-reddit-accounts
And he has agreed to knock 10% off large orders of accounts!
Make some extra cash by engineering non-diligent users!
Mo' Money, Mo' Power, Amiright?? -
1. Look for the accounts of whales and popular posters.
2. Change their names slightly in a manner that can be missed. Change craig-grant to criag-grant or better to craig-grannt, for example.
3. Submit stories and comment under as many posts as you can bother to. Try to keep the themes similar to that of the original posters you are emulating. Don't plagiarise! You don't want to attract negative attention. Keep it authentic!
4. Result: Non-diligent users from minnows to whales will rush to upvote your posts! Well, provided they are written in English.
You're not doing anything wrong right?
Just submitting some content.
Steemit is a FreeMarket ™ - so the payout you'll receive just reflects what the market values.
Plus the incentives are perfect so by definition anything that happens was already thought about by the developers.
Alternative to the above:
1. Place a short on Poloniex for either SBD or STEEM.
2. Impersonate developer accounts and exchanges and write posts claiming that "you've been hacked".
I recommend you read my post on crypto "Sorry for your loss" events for inspiration.
You want to incite panic selling, and make it clear to people that their money is at risk.
If you're not a good writer go on freelancer sites and hire someone. For $20 someone will create top-notch short-bait!
Successful Catfishing:
1. There's a website https://extralunchmoney.com/ where hot girls will do anything you want for money.
So for $10 you can get a nice, spoken verification video. And for about $30 you can probably get 10-30 images (based on the prices I observed today browsing on the site).
Using 1 image per post, that's up to 30 posts!
The average a hot girl gets here per posts is $500-$2000, so you could make up to $60,000 in one month!
Several very shrewd users have written posts formally proving that the optimal strategy is to please whales, and that this is what truly makes Steem world-changing.
I'm too ignorant to challenge you, even if I come up with logical arguments that are rigorously proven, I've only been here for about a week so by definition I'm an idiot.
So I'll adhere to the knowledgeable!
I entreat thou benevolent scam-whales to bestow some upvotes below mine post.
Please, Whale, c-c-c-c-can I-I h-h-have some more?
Consider it a way for you to pay for the consultancy I'm offering.
If you'd like me to continue these series, then either transfer me some SBD or make sure I get well paid in upvotes.
You make money, I make money. Nothing else matters, AmIRight? #FreeMarket ™
Hint: Reductio ad absurdum
#steemit #steem #hack #money #security #funny #life #writing #the-hack
great stuff man, thanks to sharing this to the community!
Appreciate it!
upvoted you, thanks for taking the time to write this :)
I appreciate it a lot.
Unfortunately I fear this will be another instance of being unrewarded for exposing vulnerabilities, so there'll be a lot more where that came from until I have accumulated enough $ that I feel rewarded.
I don't see these as vulnerabilities, but as challenges to the idea of what Steem stands for. What I've noticed is that the community is exposing scammers left and right. When something like Steemit is created there are bound to be scammers, hackers, etc. but I think that helps strengthen the platform, as we devise ways to combat the crap. It's going to be the well intentioned Steemian's who help do that, and that's pretty sweet.
The original post was the vulnerability, it literally means money transfers aren't very secure, since the probability of spelling an exchange's name correctly over enough iterations is almost certanly non-zero.
If you read the last scam tip I gave. You'll find there is no way to expose scammers completely with the community's current incentive system. The level of verification is very low, and there's no incentive to require more, or to even pursue proof.
I wasnt disagreeing at all, just being romantic and hopeful that innovative solutions arise naturally
You are a white hat genius. All of your posts need to be considered by the devs. Steemit needs to be continuously refined to discourage spam and scam.