search

shadowproject / shadow

ShadowCore integration/staging tree
MIT License
95 stars 62 forks source link

Potential troll/shill vector in chat #56

Closed LiteBit closed 7 years ago

LiteBit commented 7 years ago

Currently we have the ability to select different addresses to post comments in both Private and Group chat. This could be used to troll/shill with sock accounts and nobody would be the wiser.

capture

Sample image is an example of this. All those posts were made from my account but either aren't identified, linked or invited by my account or other people in the chat.

A solution would be to eliminate the drop down address selector and only allow address invited to chat session or address who created chat session.

LiteBit commented 7 years ago

This is probably more likely in group chat over private chat

kewde commented 7 years ago

Yes,

The next update should take care of this a bit, not perfectly but to some degree. We'll be locking the dropdown if you've ever sent a message. A user would have to constantly delete his messages and pick another address.

Trolls and shills will always be a problem, regardless of the solution you throw at it.

Currently we can not enforce restricting it to invited-only addresses due to the cryptography and time-limit of messages which are part of the core engine driving the messaging system.