4th Street Bar Hive-Bar

Hive-Bar Powered by Hive beta-fdb5b5b

Community post

Leak -- Compromised POSTING key successfully protected

https://cdn.steemitimages.com/DQmRBQhwa1mKebp3zmT3i8CNPmDRMTcpwwfrWXAMEeWRDSR/image.png


โ—โ—โ— ๐Ÿ’€ โš ๏ธ ๐Ÿ’€ โš ๏ธ โ—โ—โ—
It's a new day and another user leaked one of their private keys into the Hive Blockchain.

https://cdn.steemitimages.com/DQmXrgmkPidLgXtMvLHPYM44Gd32zayQ3ZuWKj3z6gAGRMj/image.png

They COMPROMISED their:

private POSTING key

HOW: in a comment operation


The compromised account owner has now been notified in multiple ways. The identity of the user will be disclosed only in the monthly report in order to give them time to address the issue.



https://steemitimages.com/640x0/https://i.pinimg.com/236x/60/a7/0b/60a70b92165f10376d3d64c357fc7577--the-matrix-keanu-reeves.jpg

Compromised account stats:

  • Reputation: 59

  • Followers: 50

  • Account creation: 6/2022

  • Last social action on chain: 2023/11/18

  • Estimated account value: $ 93.42



Top 5 private ACTIVE keys protected:

1. @nextgen622: ~$ 28,000
2. @cryptoandcoffee:
~$ 8,400
3. @runridefly:
~$ 3,300
4. @globalmerchantio: ~$ 250

5. @j3dy: ~$ 120 (500 HIVE automatically protected for 9 days)


My security disclosures for Hive:
- XSS vulnerabilities in #########.com
- XSS vulnerabilities in hive-db.com
- XSS vulnerabilities in scribe.hivekings.com
- XSS vulnerabilities in hiveblockexplorer.com
- Malicious ads redirecting all Steemit iOS users to a phishing site
- Reverse tabnabbing and clickjacking in steem.chat and steeemit registration page


Other contributions:
- Universal script to prevent phishing in all Hive frontends
- Commands for community reports and ban/mute lists

Future development: ย  plan

Last report: https://peakd.com/@keys-defender/monthly-report-june-july-august-2021-hive-13323

Keys-Defender features:

- Keys protection [live scan of transfers/posts/comments/other_ops. Warnings (reply and memo), auto-transfers to savings until fully restored, auto-reset of keys, ..] {see automatic posts on leak and monthly reports}
- Phishing protection [live scan of comments and posts to warn users against known phishing campaigns and compromised domains or accounts, scan of memos and auto-replies, anti phishing countermeasures - eg. fake credentials]
- Re-posting detection [mitigates the issue of re-posters]
- Code injection detection [live scan of blocks for malicious code targeting dapps of the Hive ecosystem]
- Anti abuse efforts [counteracts spam from hive haters and milking campaigns]



To support this project..
https://images.hive.blog/DQmWmRN7k741DbkG5jL19Y5h1H5tqhpHLJUtGiTgPUy3C4y/image.png
- Delegations:ย  10, 50, 100
- Curation trail: join my curation trail to upvote all my posts with a fixed weight.
- Downvote trail: join my downvote trail to follow my downvotes on security threats and abuse.
- VOTE for our WITNESS !! ย  ย  ย  ย 

ย 


This project is sponsored by @cryptoshots.nft Browser-based ย  play-to-earn ย 3D Shooter on HIVE
https://files.peakd.com/file/peakd-hive/cryptoshots.nft/23w2aSsvsWfCzrWC8tAB5PPj59zDX2TFb9dvDtz9ivVHbWRLN51ka5waJ4Se2fv7VhFib.png
CRYPTO SHOTS
Discord ย  ย Twitter ย 
82 upvotes $1.60

Replies (0)

Conversation

No replies yet

Replies will appear here as people join the conversation.

Review before signing

Posting as . Signing with . Keychain permission: Posting. Hive Keychain will ask you to approve this action next.


  
Technical details

Operation fingerprint: