keybase / client

Keybase Go Library, Client, Service, OS X, iOS, Android, Electron
BSD 3-Clause "New" or "Revised" License
8.89k stars 1.23k forks source link

Undo adding a stellar wallet #15555

Open Parth opened 5 years ago

Parth commented 5 years ago

I created a stellar wallet to explore the feature, for now I’d like to remove it from my profile and keybase client, how would I do this?

ve3scn commented 5 years ago

I would also like to see this, Check out my sigchain, None of the wallets show as revoked. I do not want a stellar wallet anymore.

Parth commented 5 years ago

"Open source project"

junderw commented 5 years ago

Most likely won't happen.

Stellar investors invested in Keybase.

kennylindholm commented 5 years ago

I deleted my account and uninstalled for this very reason.

ali1234 commented 5 years ago

If you select the "start from scratch" option on the website this will remove the stellar account from your profile and local client. If you do this you will have to re-sign every linked account you want to keep. I recommend never linking any external accounts to keybase since the link can never be broken once it is in the sigchain, even if you never post the verification signatures.

xkr47 commented 5 years ago

What? You can't unlink an e.g. github account either? What if somebody hacks my github account and I need to create a new one and tell everybody to use the new one? Or if I just want to stop using github for whatever reason? Should this issue perhaps be widened to unlink anything, not just stellar wallets?

ali1234 commented 5 years ago

You can say "this github account is no longer mine" but what you can't do is hide the fact that they were linked in the past. And in the case of stellar accounts you can't even do that.

Mikaela commented 5 years ago

This may be becoming a legal issue in India. I sent my friend a small amount in XLM and they wondered if it's legal and reached a conclusion that it's legal for now, but Dealing in Cryptocurrency in India Could Soon Land You in Jail for 10 Years.

I don't know if India is going to enforce it, but in case it is, I guess Indian users will have to remove their Keybase accounts to not risk jail time unless this issue is fixed.

ve3scn commented 5 years ago

I have restarted my account from scratch. Very disappointed I had to do this.

meeDamian commented 5 years ago

Very interested with that as well.

ghost commented 5 years ago

thanks keybase, now I'm tied to a coin I do not want because you're hungry for shekels, cya

timmc commented 5 years ago

I think I see how to do this with the existing tools. I haven't tested this, though, since I don't actually want to revoke my keys.

If someone doesn't mind possibly messing up their account, and wants to test this out, here's what you might try:

  1. Go to https://keybase.io/YOUR_USERNAME/sigchain
  2. Find "added Stellar key" and click on it
  3. In the bottom of the righthand column, there should be a URL with a signature ID, like sig/get.json?sig_id=efa0d6a1...
  4. Use the CLI to revoke that signature ID: keybase sigs revoke <sig-id>

Will this work? Will it mess up other things? I don't know! But it would be cool if someone tried it out and reported back.

meeDamian commented 5 years ago

Great idea! Doesn't work 😭.

$ keybase sigs revoke "$(keybase sigs list -v -f stellar | awk '{print $2}')"
▶ ERROR sig not owned by user
timmc commented 5 years ago

Ah well. Thanks for trying! Perhaps while the signature is cryptographically under the user's control, they haven't implemented stellar address revocation on the server side. Perhaps there's a filter and access check there so they can't be induced to publish arbitrary junk into the public record.

Good news, though—it sounds like the requested feature is in the works (see very end of comment).

magandrez commented 4 years ago

You had one job, Keybase :-( 👎

sneak commented 4 years ago

For those who generate Stellar keys and then change their mind, not wanting them, we'll add the feature to delete all of them.

jeromebaum commented 4 years ago

@malgorithms was there any update on this? I'm running keybase 5.2.0 and it tells me I can't remove my "default" Stellar wallet.

utdemir commented 4 years ago

For those who generate Stellar keys and then change their mind, not wanting them, we'll add the feature to delete all of them.

@malgorithms, 131 days and counting. Can you at least give us another update here? This silence slowly makes me see keybase as yet another money-hungry corporation ignoring user feedback.

sneak commented 4 years ago

Here's your update, y'all:

https://blog.zoom.us/wordpress/2020/05/07/zoom-acquires-keybase-and-announces-goal-of-developing-the-most-broadly-used-enterprise-end-to-end-encryption-offering/

Congrats to @malgorithms on his payday! Hopefully the participating preferred left some for the founders!

jeromebaum commented 4 years ago

This is quite unfortunate. I've migrated away and deleted my account. So long keybase, it was good while it lasted.

stiell commented 4 years ago

@timmc 's proposed method works to add a revocation to the signature chain, at least in my case. However, the website and client still show the Stellar address and even refer to the revoked assertion as if it's still valid (#24212).

There is, however, a separate setting to hide the Stellar address on your profile: In the GUI, click the blue checkmark, then click the red text "Hide Stellar address on profile". The checkmark should turn grey, and on the website and to other users the address should be invisible.

Using both methods together seems to be as good a measure as resetting your account as far as your public profile is concerned. The wallet will still appear in the client, though, not sure if in a usable state.

(Join team @stellar_exodus on Keybase! :wink:)

jedahan commented 3 years ago

Great idea! Doesn't work 😭.

$ keybase sigs revoke "$(keybase sigs list -v -f stellar | awk '{print $2}')"
▶ ERROR sig not owned by user

This works now!

magandrez commented 3 years ago

For those who generate Stellar keys and then change their mind, not wanting them, we'll add the feature to delete all of them.

@malgorithms so, I guess you did not get around this issue and just let the conversation die slowly or?