
Steemit has been the subject of many hack attempts due to its massive success. Drawing the attention of malicious attackers is one of the side-effects of becoming successful. Everything is hackable with enough time and energy put towards it. Social engineering attacks are some of the worst attacks and some of the most damaging, because they use psychological methods rather than pure code-based attacks.
In the most recent line, we have what seems to be a "Downvoting-attack". This essentially is someone aggressively downvoting articles and the comments within the articles to keep the user's content from getting to the front page.
This attack will not only inflict short term damage on the user's article, psychologically it will deter users from returning to the platform.
The downvote attack must be prevented and aggressively paid attention to in order for that not to become a major source of user-exodus at some point. Facebook users are experiencing platform-fatigue, and are looking for something new. If Steemit encounters too many problems during the Beta, it will surely benefit the social media platform that waited to learn and observe from all the attacks on Steemit, and thus how to react.
Steemit can beat those platforms if it just makes sure to be proactive against malicious attackers, and simultaneously highly reactive in attack scenarios.
Thus far, their performance has been exemplary as far as I can tell.
Keep up the good work!
Chris Bates
Chief Security Officer
Bitland Global
Great writeup thanks
Could down-vote bots serve a value of undermining the up-vote bots which run rampant? A balancing effect to counteract the fake upvotes is not necessarily a bad thing. If however it is a directed attack, one coordinated for a particular purpose of harming a specific target, then I would agree. I have not seen that as yet, but with such automated tools it could be possible.
if it is done without any impunity, then it doesn't benefit anyone. Both bots are negatively affecting community. They should not be looked at relative to each other, but as individual problems to be assessed. But this is an excellent question!
I wonder if the Dev's orchestrated the latter to interdict the former as a temporary workaround?
clearly a bot is executing these attacks, as the attack is affecting the other bots that post...
2 bots post a comment, (x) number of bots downvotes article and comments within (y) minutes of article being posted...
this article had all comments downvoted, one to (x)=6 in less than 5 minutes
six down votes for this comment... hmmm...