You are viewing a single comment's thread from:

RE: [NEW VERSION] Steemit More Info 1.2 - Chrome Extension + Firefox Extension

in #steemdev7 years ago (edited)

I will review the newest version like I did the other ones for security. Thank you for this extension, it is excellent!

Edit: if you are looking for an api, please contact me. Minnowbooster just launched its own extension and if you are interested, you can use our api to receive new Blockchain events comfortably from a websocket.

I am available for discussion here in the comments, on steemit chat and discord and would be willing to fund further development if you are interested!

Edit2: I have reviewed the extension and could not find any code that tries to access your keys or pose any other thread. I talked with @armandocat and will get some lead time for new versions, so you all can be safe to update it. I will comment under new updates with my findings in a more detailed manner that just saying that it is okay. From version 1.3 I am willing to put 100STEEM as a security should there be a security risk I am missing.

Sort:  

Users of this extension, please remember that any browser extension can potentially steal your private keys and money. Extensions installed via a web store that updates them automatically could be silently upgraded to malicious versions later, post-audit, without your knowledge if the author's own credentials (to upload new versions) become compromised somehow.

Please do be extremely careful with accounts that have significant amounts of money in them. This is not a theoretical risk.

I can not empathize this more! Using a browser extension that can read the data on steemit.com is a huge risk and should not be treated lightly. If you can (I know Firefox supports it) disable auto update or better, install it from the source I reviewed.

We are currently having multiple scamming attempts and a browser extension that steals your keys is definitely a possibility. And don't take anyone's word for it that an extension is secure. Humans make mistakes and a security audit is no protection.

certainly as the extensions can steal you datas thats why asked in the previous comment about is this official or not .

No, it is not an official project.

Much appreciated Reggaemuffin!

Hello guys i am a new person to steemit on seeing many post i found that some post having 20 upvotes having 100$ worth but i am sad to say that there are some posts which have 50 upvote is having only 1$ so can any one tell me the trick behind it.
Steemit is a crypotocurrency and is this site a part of cryptocurrency whether this site is apart of steemit coin .

@armandocat is this extension a official extension from steemit on seeing u r post i found that it has made the use easier and user friendly . if the number of words increased the post worth will increase or not @reggaemuffin you comment is worth $19.47 can u explain the trick to increase the earnings am very interested to here from you please be kind to revel the trick.

Thank you for doing this.

Thank you for the security check. Nice to have someone endorse a great extenstion.

@armandocat, I have a suggestion and wonder if can be done.

The followers names are simply listed alphabetically right now. Same is the case with people we follow. There is no other information available and for further information, we have to click the account name and open a new tab. I wonder if some key information about our connections can be seen in the list; like reputation, last active etc. It will greatly help us see who is doing what on Steemit and make our community better in my opinion.

What do you people think? I resteemed this amazing information and I think this is by far the best development for browser users.

Edit:- I just installed add-on on the Firefox mobile browser and saw that my suggestion is already so wisely incorporated. Love this tool!

you can use our api to receive new Blockchain events comfortably from a websocket

That sounds very very compelling.

From version 1.3 I am willing to put 100STEEM as a security should there be a security risk I am missing.

Great incentive @reggaemuffin!

I am looking forward to the new version. From what I saw it has some fancy new features! I am using the extension myself and it really improved my experience! So supporting it is the logical step 😉

From version 1.3 I am willing to put 100STEEM as a security should there be a security risk I am missing.

There is a lot more bounty in the wallets of all of the users of the extension than 100 STEEM. :)

Definitely! I have to say my wallet alone has more than that most of the time. It is just a way for me to empathize how confident I am in this review. Browser extensions are a huge risk and should be treated with caution, so I don't treat me auditing this extension lightly.