Improve security, use Busy.org with POSTING-Key [en]

in #busy7 years ago

Why is the master password requested

posting_role_full.png
Busy.org requests posting role but expects higher-value Key

Busy.org is a Steem frontend (as is Steemit.com) for displaying postings on the Steem Blockchain. Unlike Steemit.com, Busy.org offers many advanced features such as Notification.

A special feature of the Steemit-SmartContracts is that different access keys are available for different activities. Posting Key is used for typical social media activities (posts post, upvoten) and the Active Key is used for transactions.

For daily use as a social media platform you should never use a higher-value Key, such as the Owner password or the Active Key. The automatic storage of this access data in your browser is a serious security risk.

Steemit.com offers the possibility to register via Private Posting Key. So you can use all the social media features and your earnings are protected. If this key falls into the hands of third, no major damage is possible and you can change the Private Posting Key.

Due to the tempting functionality of Busy.org, I also logged in there and found that Busy.org wants to use the posting role, but requires a higher-value Key. See picture above.

So here's a little trick on how Busy.org can be used with the private Posting Key.

The solution

Before you open Busy.org in the browser, log in directly to SteemConnect with your private Posting Key. Under https://steemconnect.com/login

After successful login, leave this tab open and open Busy.org. Now you can select the currently active SteemConnect profile without entering a Key or password and register directly.

Unbenannt.PNG
Choose profile directly without the need for any higher-value Key