You are viewing a single comment's thread from:

RE: Update On streemian issue

in #steemit7 years ago

Since you seem to not be able to read the whole page, let me quote from there:

Your password authorizes you to post with this account.
In order to let us use your account, this app will install the streemian account into the posting permission.
This gives us posting and voting permission for your account
You can remove the streemian account at any time using this app

Why do people expect a response in under 48hours for a free-to-use service?

Btw, you can use the same page to remove the posting permission for streemian. Its not my fault the steemit.com still doesnt support that feature..

Sort:  

I have since read the whole page - and you did post, as far as I can tell, only put permissions into the posting account.

However:

  1. The active key is still being input in order to get only posting authority. Your website says you will only use it for posting authority - but we're still handing over the active password. The first thing you say is the code will not allow you to reach our finances. That isn't true about the active password.

I admit freely, I acted in ignorance just handing out the password to you guys without reading further. However, you still placed what seems to be a direct misrepresentation about the power of the active password at the front end.

  1. Your permission removal page is not working, and there are others on the #streemian chat room who are seeking to remove permissions and cannot.

As long as you're quoting your page let me screenshot it

image

This is the language at the very top of the page where your active wif is requested. You indicate you cannot access finances, however this is not technically true anytime the active wif is known to you. What you're really saying is "we promise we won't use you active wif to interact with your finance." But that isn't the same thing -and to a new user it is a confusing distinction that can engender an undue sense of security.

Its good that you take care of your funds and be extra cautious.
Let me clear some dust:

  • The active key is required in order to add the streemian account to your posting permission
  • this account update happens in the browser and your active key is only use to do that and is not stored. You can see that from any block explorer.
  • Instead os using the unlock-app pf streemien, you can also use any other steem-compatible app that allows to add an account to permissions ... like piston, or busy.
  • once the account is updated, streemian can only post and vote and the owner of the account can remove that permission at any time
  • it is unfortunate, but i cannot change the fact that this feature isnt exposed on steemit.com properly.

Look - it does appear based on a look at the blockchain that only the posting permission was authorized. Which is to say, streemian appears to be acting in trustworthy way.

I appreciate you're taking the time to respond in some detail - I think to avoid further confusion it might make sense to clarify what's happening on your registration page. I imagine you must get a lot of newer users and confusion is easy to come by.

Is the esteemapp also associated with you guys - i thought i only gave the active key to you but both of you got posting permission at the same time.

No relation to esteemapp.
I am currently on vacation and pretty busy with some other project right now. Need to look on how to handle streemian in the future. Until then, i am running it on a best-effort basis.

Coin Marketplace

STEEM 0.19
TRX 0.18
JST 0.036
BTC 90080.39
ETH 3207.90
USDT 1.00
SBD 2.75