search

arsenische / bitcoinocracy

Truth backed by Bitcoin
23 stars 18 forks source link

Users can submit multiple votes with the same address and signature. #4

Open livinginformation opened 8 years ago

livinginformation commented 8 years ago

Symptoms: See title.

Discovery: I discovered this issue by accidentally signing http://bitcoinocracy.com/arguments/this-statement-is-false four times.

Fix: You need to limit voting to disallow duplicate signatures. You should also add a redirect upon vote submission.

mathwizard1232 commented 8 years ago

It actually looks like seven times: http://bitcoinocracy.com/arguments/this-statement-is-false.json

Nice catch. Fun argument. :-)

livinginformation commented 8 years ago

Interesting, the apparent 7 submissions have only mapped to 4 submissions in terms of "real" bitcoin value.

arsenische commented 8 years ago

Thanks for pointing this out. I added a constraint to the database so it should never happen again. Added redirection as well.