You are viewing a single comment's thread from:

RE: Warning to users using third party applications - Be extremely careful providing your keys to anyone or any site!

in #security8 years ago (edited)

Thank you so much for responding - this issue is coming up hard against my slowly receding ignorance. How dod you see this information? Through cli wallet?

Also i definitely didnt give them the master password - and i have definitely changed the active wif twice now - is there any way they could still have owners permission after that?

Also, checked out the #streemian chatroom and there are a few people asking to leave and no answers from streemian.

Sort:  

Steemd.com/@accountname. I doubt it, but I cannot say for 100% since I don't know what was actually shared/done.

I gave streemian my username and my active wif.

Then I changed my master password twice.

That's the extent of it.

But the chatroom has no responses from streemian people and @xeroc is not responsive, and the emails to streemian are not returned in about 48 hours.

The fact that they request the active key at all, in hindsight, seems unecessary. That they says right above that that they cannot access your money, even though you've given them the active strikes me fundamentally false... though perhaps I'm missing something.

As far as I know you should be good if you shared your active key, and after that you changed your passwords and confirmed that your old active key no longer works.

Hmm - I definitely changed my passwords, but I didn't have the old active key written down.

I went through and found the actual transaction and update notice from streemian:

streemian.png

Then found only one other update:

update 2.png
That's all I can see as far as updates go, and neither seem to add any authority to the active or owner slot. This doesn't alleviate my concerns that they are collecting active keys, but if I changed my active key twice, that original should no longer be useful if I'm understanding correctly.

I agree.

Really appreciate your help with this - really put me at ease. Thanks.