You are viewing a single comment's thread from:
RE: Security: Watch out, this is Steem
It is a challenge because compared to 'normal sites', there is more complexity here and not a great deal of clear communication. Combine that with some clever scammers and it is unfortunately going to be more and more of an issue moving forward with mainstreaming.
Absolutely, only having a serious of different keys (compared to one password you usually have on other social media sites) makes it incredibly complex. Sometimes it's not even about not being informed, but being distracted - like it happened to me twice. A couple of weeks back, I accidentally introduced my active key into the memo field of the smartsteem promotion service. At that point in time, there was no alert implemented yet, that informed you when you accidentally typed something into the field that looked like a key. I lost 18 SBD which was not much, but still a lesson. As a positive takeaway, the website was updated and now people are warned when introducing a key into the wrong field (like it was already implemented on steemit.com before).
The second time (as you mentioned here) I was provided with a phishing link that was wearing such a good make-up that already 850 other users had been fallen for it (as I learned later on from a developer). Eight hundred fifty people!
Now the no. 1 rule is surely to NEVER use the wrong key. That can prevent us from a lot of trouble.
Total security doesn't exist when human beings are involved - as in real life so online. However, I feel that there's a big lack of education and we should start a whole campaign to better inform those who join us.
Btw I was desperately trying to find some information in the Steemit FAQ on how to safely STORE keys. It's just said that they should be stored safely / offline, but a non-crypto person would never understand at first glance what that actually means...
Again, thanks for bringing this up! We need more of it :-)