Sort:  

A brief recent history of @matrixdweller:

  • They make a bot to respond to every post with the current price of STEEM in USD. The bot is changed to respond only when a post mentions matrixdweller, and then it is changed to respond to posts that mention Steem or Bitcoin. I find the bot comments at this point, and following a policy established long ago about auto-posting bots with irrelevant content, I add it to @cheetah's comment-only downvoting function temporarily until the bot was made more opt-in.

  • @matrixdweller begins to post rants about me and whales in response. Suddenly he takes an interest in ranting on the subject right after this unrelated comment downvoting. Seems disingenuous to me.

  • @matrixdweller's sockpuppet accounts @sarasgrace, @imarealboy777, @captainamerica, @godlike, @clarkwayne, @ashketchum, and @wholefoods begin comment spamming. Most are complaining about @berniesanders selling STEEM.

  • @imarealboy777's comments were this image:

  • As you would expect, all of these comment spammer accounts got downvoted into a negative rep, and while it can't be proven 100%, I'm reasonably certain @matrixdweller decided to switch his bot to use @the.masses which began commenting with the same image as @imarealboy777.

@matrixdweller may deny this but I would not believe him. He denied @imarealboy777 as his own alt when the resteems of his posts going back months combined with the timing of his sudden urge to comment spam tells a different story.

@matrixdweller started his Steem life as @jillstein2016 which got downvoted into a negative rep for similar toxic behavior a long time ago.

@matrixdweller's sockpuppet accounts @sarasgrace, @imarealboy777, @captainamerica, @godlike, @clarkwayne, @ashketchum, and @wholefoods begin comment spamming.

now wait just a durned minute here. There seems to be witch huntery afoot.

I thought talking about alt-accounts was verboten.

A) Take a look at the account pages
B) Take note of the timing of the comment spam from all of them
C) @matrixdweller has a history of his accounts spamming comments. See @smartguylabcoat
D)

E) "I STEEM on after whales, kill my accounts"

I did not look into it but looking at a variety of posts everyday, I could definitely see the progression of events.

So the key for the account has been changed ? What do you think would have happen otherwise ? Seems like the actual experiment wasn't fully let to happen.

[nested reply]

There is a disabled Steem command which can be used to challenge that someone using a posting authority on an account has access to the account's active key, more thoroughly indicating ownership. Here's the cli_wallet documentation on it:


Challenge a user's authority. The challenger pays a fee to the challenged
which is depositted as Steem Power. Until the challenged proves their
active key, all posting rights are revoked.

Parameters:
    challenger: The account issuing the challenge (type: string)
    challenged: The account being challenged (type: string)
    broadcast: true if you wish to broadcast the transaction (type: bool)

It was disabled in the version 0.14 hardfork and hasn't been reenabled.

Challenge Authority

Fixed a bug where an account's active authority could not be challenged. Subsequently, because there is no way of addressing the challenge through steemit.com, we have disabled the operation entirely for the moment as it could be an attack vector against users that do not know how to use the cli wallet. The operation will be enabled at a later time when steemit.com can more elegantly handle challenge scenarios.

https://github.com/steemit/steem/releases/tag/v0.14.1

But if someone's posting auth is compromised (as the.masses' intentionally was, so that it could be used as an anonymous outlet), and the account begins to spam, downvotes can be used to reduce the account's reputation. Although the higher-rep-than-downvoter immunity function of reputation might make it difficult if a very high rep account had its posting key compromised. If the owner of the account is paying attention they can change the password of their account using Steemit and the posting key will change with it.

[nested reply]
What I mean is that @timcliff changed the posting key with his authority as its owner to a new posting key which isn't public. This is the transaction: https://steemd.com/tx/0e3bf7f6cf09927bac020431f7f84c9fc8da16c0

I'm trying to say that this will most likely happen often and there will be nobody to change that posting key. How does steem mitigate agaist this kind of attack ?

The posting key was public. It was changed by @timcliff (who created/owns the account) to a new, non-public key when it was being abused for comment spamming. Before all of this, @the.masses was used for its intended purpose, with mixed results, but never enough abuse for the public posting key to be revoked.

Do you know where I can read about that revocation aspect ? I've searched online and the whitepaper and can find anything about it.

His YouTube account clearly states that he is both matrixdweller and imarealboy777