5 ms·

thats because they signed a transaction, obvious distinction as it is preparing to send money to authorize the scam. signing a keypair does not send money and d

thats because they signed a transaction, obvious distinction as it is preparing to send money to authorize the scam. signing a keypair does not send money and doesn't use the blockchain, only the addressing namespace. of course with the state of education on this topic being such wide and widening gulf, people are going to get taken advantage of with obvious distinctions that are not so obvious to them.

tshaddox 4y ago
I'm no expert, but aren't most of these scams the result of the user choosing to deliberately transfer their assets to another party because that party has convinced them they will get something in return? In other words, I think the victim is mistaken not about the fact that they're transferring away their assets, but rather is mistaken about the identity and intentions of the party they're transferring their assets to.
- vmception 4y ago
  no. thats one kind. many of these scams are erroneous approval transactions. an approval transaction is necessary for another program to use your assets. that program can have a human controller or another function that allows it to seize your asset later. you can read more about this here https://kalis.me/unlimited-erc20-allowances/ https://kalis.me/unlimited-erc20-allowances/ (NFT standard classes inherit the ERC20 interface)
stormbrew 4y ago
In other words: maybe using the same key for your wallet as for logging into random websites is not a good idea, and “web3” as an approach to identity has some real flaws that are being papered over. Certainly involving more crypto in the issue of logging in to things might be a net benefit, but there’s no reason it should come from blockchain instead of, say, the password manager and totp token software people are already getting used to using and that don’t expose you to financial damage. In the end though, people still need to get into their accounts when software is unavailable so it seems unlikely passwords are ever completely going away.
- vmception 4y ago
  every wallet has unlimited addresses, this is a user education issue alongside an implementation issue. if you feel there are some user interface and user experience things that can help, then the space is available for you to contribute to. thats what a lot of people are doing and it is very lucrative. What did you mean by this? > people still need to get into their accounts when software is unavailable so it seems unlikely passwords are ever completely going away. Using a password uses software?
  - stormbrew 4y ago
    I don't really have any interest in solving a problem I don't think makes sense to solve? I fundamentally don't think "using your wallet to log in to your porn" is a good idea, and I don't think any amount of education is going to change that. There's just no reason this needs to be solved with blockchain. It doesn't add anything useful except that a bunch of people suddenly have private keys but don't know what they even really are. Like I said, I think password managers and totp software are just inherently better positioned to 'solve' this (if it needs solving). Also, I've long since lost any interest in participating get rich quick schemes built on fads, so "it's a lucrative space" isn't really the appeal you think it is. > What did you mean by this? Sometimes people lose their phones.
    - vmception 4y ago
      Like I said, it's a choice. Everything that has been built has been because people channel their cynicism into an improvement. This particular space is inherently built to incentivize that, and thats what has occurred over the last decade and is only accelerating now that the builders are capitalized well enough to hire more builders.
      - stormbrew 4y ago
        Your mistake is assuming that your pet cause is the thing people should be channeling their skepticism-driven effort into. You’re basically asking me to try to solve world hunger with car manufacturing. I can see the merit in solving the problem, and am perfectly happy to help contribute to solving it, but your chosen tool has literally nothing to recommend itself as a solution.

tshaddox 4y ago

I'm no expert, but aren't most of these scams the result of the user choosing to deliberately transfer their assets to another party because that party has convinced them they will get something in return? In other words, I think the victim is mistaken not about the fact that they're transferring away their assets, but rather is mistaken about the identity and intentions of the party they're transferring their assets to.

vmception 4y ago
no. thats one kind. many of these scams are erroneous approval transactions. an approval transaction is necessary for another program to use your assets. that program can have a human controller or another function that allows it to seize your asset later. you can read more about this here https://kalis.me/unlimited-erc20-allowances/ https://kalis.me/unlimited-erc20-allowances/ (NFT standard classes inherit the ERC20 interface)

stormbrew 4y ago

In other words: maybe using the same key for your wallet as for logging into random websites is not a good idea, and “web3” as an approach to identity has some real flaws that are being papered over. Certainly involving more crypto in the issue of logging in to things might be a net benefit, but there’s no reason it should come from blockchain instead of, say, the password manager and totp token software people are already getting used to using and that don’t expose you to financial damage. In the end though, people still need to get into their accounts when software is unavailable so it seems unlikely passwords are ever completely going away.

vmception 4y ago
every wallet has unlimited addresses, this is a user education issue alongside an implementation issue. if you feel there are some user interface and user experience things that can help, then the space is available for you to contribute to. thats what a lot of people are doing and it is very lucrative. What did you mean by this? > people still need to get into their accounts when software is unavailable so it seems unlikely passwords are ever completely going away. Using a password uses software?
- stormbrew 4y ago
  I don't really have any interest in solving a problem I don't think makes sense to solve? I fundamentally don't think "using your wallet to log in to your porn" is a good idea, and I don't think any amount of education is going to change that. There's just no reason this needs to be solved with blockchain. It doesn't add anything useful except that a bunch of people suddenly have private keys but don't know what they even really are. Like I said, I think password managers and totp software are just inherently better positioned to 'solve' this (if it needs solving). Also, I've long since lost any interest in participating get rich quick schemes built on fads, so "it's a lucrative space" isn't really the appeal you think it is. > What did you mean by this? Sometimes people lose their phones.
  - vmception 4y ago
    Like I said, it's a choice. Everything that has been built has been because people channel their cynicism into an improvement. This particular space is inherently built to incentivize that, and thats what has occurred over the last decade and is only accelerating now that the builders are capitalized well enough to hire more builders.
    - stormbrew 4y ago
      Your mistake is assuming that your pet cause is the thing people should be channeling their skepticism-driven effort into. You’re basically asking me to try to solve world hunger with car manufacturing. I can see the merit in solving the problem, and am perfectly happy to help contribute to solving it, but your chosen tool has literally nothing to recommend itself as a solution.