So, one problem that we need to avoid is the double voting. Right now this is done by generating a random uuid when you run the extension for the first time, and saving it on the localstorage. We also save the ip address.
Those are easy to trick (clear localstorage and reset your router or use a vpn that rotates ips every time).
This is fine for now, because the only users are people wanting to help the project, not break it, but maybe in the future we will have problems.
Since the focus is mostly on facebook, I thought of asking the users to sign in with facebook before voting, because it is not very easy to create a lot of facebook accounts just to manipulate the results.
It is important that our APIs never allows others to see publicly who voted in what, because we want to protect user privacy, the sign in is just for guarantee the unique voting
So, one problem that we need to avoid is the double voting. Right now this is done by generating a random uuid when you run the extension for the first time, and saving it on the localstorage. We also save the ip address.
Those are easy to trick (clear localstorage and reset your router or use a vpn that rotates ips every time).
This is fine for now, because the only users are people wanting to help the project, not break it, but maybe in the future we will have problems.
Since the focus is mostly on facebook, I thought of asking the users to sign in with facebook before voting, because it is not very easy to create a lot of facebook accounts just to manipulate the results.
It is important that our APIs never allows others to see publicly who voted in what, because we want to protect user privacy, the sign in is just for guarantee the unique voting
This feature is not a priority for now
Idk how to do this in rust, I need help