I do fear for people giving out their keys to sites they shouldn't trust. There has been a recent fraud around this. Your owner key should be kept somewhere very safe and very rarely used.
You are viewing a single comment's thread from:
I do fear for people giving out their keys to sites they shouldn't trust. There has been a recent fraud around this. Your owner key should be kept somewhere very safe and very rarely used.
Now I am sorry for bringing people in. I am asking each one if they are using SteemConnect and what key they are providing. I DO warn them to never touch the Owner key after the first day but nobody listens.
If you power up Steem you’re somewhat protected, right?
If it is all powered up and you know where to look on your wallet, you would notice a new line (right before history) that says "The next power down is scheduled to happen in 2 days." which would mean the hacker got your key and started the power down 5 days ago. When the steem becomes liquid in two days, they can take it out.
True, but it’s only a small percent of your what your powering down that you get weekly. I mean it’s bad and I don’t know how you’d fix the problem (can you rekey?) but it’s at least slightly better than a full loss of value.
For the sake of round numbers, let's say I have $13k in SP. One day I notice that my next power down is in 1 day (that means I had not noticed it for 6 days).
The hacker - the one who stole my active key - is about to get 1,000 liquid Steem tomorrow. (and 1000 per week for 13 weeks if I never notice).
So I whip out my owner key and change the active and passive keys today. Tomorrow comes, and since he no longer can move my money around, I just power the 1,000 back up. Problem solved.
My beef with Steemconnect...
They ask people to put in their owner key. If a person doesn't know how dangerous that is, they will be the one locked out of moving money around - they will lose the whole account as the hacker can change all three, owner, active, and posting.
Very true! I misunderstood and thought the owner key was the active key(I might’ve lost my owner key). Anyways you’re 100% correct this key loss would be the same as having a wallet emptied.
Very good