SteemAuto Warning - Here's How to Revoke Third Party Apps !steemCreated with Sketch.

in Steem Alliance2 years ago

STEEM AUTO WARNING.png

Hello Steem Alliance friends, may God bless us all? This is a very important update, so please pay close attention!

As we know that users are familiar with SteemAuto, a web that can provide convenience in automatic curation, scheduling posts and claiming rewards. Many use this website for things that are considered to be efficiently done automatically without needing or risking a lot of time to do it manually. SteemAuto(https://worldofxpilar.com/) operated and maintained by the XPILAR team.

SteemAuto is developed with amazing features: users can schedule posts, build a fanbase, follow a curation trail, and even automate claiming your payouts. The presence of SteemAuto certainly makes it easy for Steem users to carry out their activities on the Steem network with control automatically handed over through operations on the SteemAuto web network. The operational account of this project is "woxauto" which is used to run operations on the web network.

To be able to use access to SteemAuto features, users need to enter or login using their Active Key and submit operations automatically to the "woxauto" account. By logging into SteemAuto, users have fully surrendered their access to "woxauto" to perform operations such as schedule posts, build a fanbase, follow a curation trail, and even automate your claiming payouts. The automatic operation depends on what features are used by users and what access they agree to, for example if they provide access to follow a curation trail or fanbase, then the automatic operation that is run is for curation.

After logging into the web, now users have staked their post keys and active keys on the platform, in the hope that security will be the priority they get from the service. However, if something is detected suspicious, especially with reports directly on the SteemLogin web when we want access to SteemAuto. I access the login to SteemAuto via SteemLogin with this link :

https://steemlogin.com/login-request/woxauto?redirect_uri=https%3A%2F%2Fworldofxpilar.com%2Fcallback.php&scope=login.

This link is a link that I usually use to login to the SteemAuto web. I use SteemLogin, as an intermediary to be able to login to web/applications/third party services running on the steem blockchain network. Because based on my experience, SteemLogin is a fast service for login access to third parties, with confirmation usually using a post key or an active key.

2B666466-0FCF-4046-8758-9E6193273E59.jpeg

However, when I try to login to SteemAuto, they give me a warning with the words Warning! There are reports that woxauto has been involved in suspicious activities.. Then there is no feature to give access to "woxauto", only the Cancel option is available. Something suspected might be happening on the SteemAuto web, so we have to be careful.

Maybe in this case I suspect because I have logged in via the link address, or maybe because of a change in access to login to SteemAuto. So, I tried to log in directly through the "Register/Login" feature available on the SteemAuto web, but that also didn't work properly. I don't want to make any guesses, while waiting for clarification and updates in this case, maybe we should need to secure our activities from the SteemAuto web.

Even when I want to login they direct me to this link :

https://steemlogin.xyz/oauth2/authorize?client_id=woxauto&redirect_uri=https://worldofxpilar.com/callback.php&scope=login (Link false)

One easy way to do this is to stop granting access to the web, this action is called a revoke. Revoke will allow us to revoke access from this service. Because operations on the SteemAuto web are run through the "woxauto" account, so we must stop access to the "woxauto" account by revoking it.

How to revoke ?

As far as I know, revoking or disconnecting from third-party applications can be done via SteemLogin. Because operations in every third-party application are carried out through operations that are run by a certain account, we need to revoke the account. So first know their operational account, by revoking the account, it means we have revoked the activity of the service/application/web.

Here is an easy way to revoke !

83E54860-1C4D-4880-ADCC-2DD3B827130E.jpeg

1.Go to https://steemlogin.com/revoke/woxauto
2.Then you will be redirected to confirm the operational goals you want to do (read the instructions carefully)
3.To revoke "woxauto" you must click Continue.
4.Then, after clicking Continue, we will be redirected to login, login using the active key.

B6BEFF2A-7086-4BEB-B5C7-3F23A231D068.jpeg

5.Enter your username and aktive key, then click Get Started.

835C3998-B80A-4D6E-B205-0EC4A12C913F.jpeg

6.Done, if the instruction is executed successfully, it will say "Your transaction is on the way".

I hope this operation can function properly and safely. Basically I like SteemAuto, it makes it very easy for us to carry out activities on the steem blockchain, especially in terms of trail curation and automatic curation (fanbase), thanks for it ♥️. I hope this case will be recoverable and we can reuse this service with full trust and put security first.

In any case, if you use a third party service for access to the Steem blockchain network, never provide or enter a Master Key or Owner Key. So, always be more careful, thorough and protect your keys more securely. All controls for accessing third party services are in your hands, but if you are not thorough and careful in granting access, it will become a problem.

To note, SteemLogin (https://steemlogin.com/) is a multi-sign project that makes it easy for users to login to third-party applications. SteemLogin is developed by Witness @future.witness, the top 8 witness. With SteemLogin, you're always in control of your private keys: SteemLogin developers neither store nor have access to them.

If you support the SteemLogin project you can support their witness via Steemit Wallet. Vote for witness on Steem : @future.witness. Check them out in the top 8 and click the upvote icon to support the witness.

Thank you for reading and responding to my post, have a nice day ♥️☺️


Check it out and subscribe to us on YouTube! This will be a potential account for steemit promotion via YouTube, help and support us to grow!



I also invite you to support the witnesses who focus on community development, they are @bangla.witness @visionaer3003, Please review and vote for them as witness !


Via steemit wallet https://steemitwallet.com/~witnesses

Via steemworld https://steemworld.org/witnesses?login

Vote for @bangla.witness via steem connect https://steemlogin.com/sign/account-witness-vote?witness=bangla.witness&approve=1


Vote for @visionaer3003 https://steemlogin.com/sign/account-witness-vote?witness=visionaer3003&approve=1

Best regard,

@ponpase

CC @steemcurator01

Thanks to @stephenkendal @visionaer3003

STEEM FOR SDGS 8.jpg
Steem marketing Sampul 1.png
STEEMIT TRAVEL FOOTER.png
CCSBannner.jpg
72B6ABF0-4458-4DCF-9818-4983E0AAB8B6.png
STEEM FOR SDGS support.jpg
FOOTER COMMUNITY SUPPORT.png

Sort:  

Hello, I have been using this service for a long time and I have never had any problems. During this time, nothing was stolen from me. For me, this service is very convenient, and most importantly, it is free. I think you have rightly pointed out here:

SteemAuto is developed with amazing features: users can schedule posts, build a fanbase, follow a curation trail, and even automate claiming your payouts.

TEAM 1

Congratulations! This post has been upvoted through steemcurator08. We support quality posts , good comments anywhere and any tags.


Curated by : @ridwant

Screenshot_20221130-164846_Canva.jpg

I don't understand why you say that you warn against SteemAuto, we don't store the Active Key, but for our system to work, the service (https://steemlogin.com/) is used for your posting key to work when you use fanbase or trails.
neither we or steemlogin have access to the active key

To me this seems like another attack against me and steem-auto, Why are you writing this, there is something behind this.
And you mention @future.witness and yes he is a developer (https://steemlogin.com/) and he is the only one who can actually answer if his service can store the active key

Now I want to put an end to such accusations, once and for all.
We do not have access to the active key

The link that comes up when you log in is not fake
https://auth.steemnodes.xyz/login-request/woxauto?redirect_uri=https%3A%2F%2Fworldofxpilar.com%2Fcallback.php&scope=login
it was created because someone has previously tried to stop our direct login to our service, so it's quite clear that someone is really trying to destroy our service.
We have 4523 users who use our service for free, do you really think that I, as a witness and admin of the wox community, have any interest in running a scam

And where do you find this
image.png

@ponpase

I don't know you and have never met. but remember... @xpilar is not the type of person to suspect. @xpilar and wox, are the hands of the most noble people in front of the people of Aceh, before writing the words above, REMEMBER... hoping to get a big voice, but disturbing the feelings and fortune of others, all the applications you complain about are not good and dangerous , I'm quite deep and using it, but so far there are no problems, don't be arrogant bro, become an Admin that look in the mirror, and see your own face.

Hi Pompase, I think you are wrong, we all know what a great person our friend @xpilar is and that he would be incapable of doing an action like the one you are insinuating in this post. It is obvious the promotion you are doing but you are wanting to damage the reputation of one of the most important users of Steemit and that is really not right.

I think that before making false accusations would have been better to talk directly with Xpilar, this is not the way and less if we are so experienced users within the platform, I think you should know that.

What to take away from here? Not much really, I didn't learn anything new to be honest. I won't even elaborate on whether I've used it or not as we all know this article isn't about that. What I know for sure is that there are better ways of promoting a witness or finding answers about network security including a 1 year course right here in London, England but I certainly won't be providing you the accommodation. This is Steemit after all not CouchSurfing 🙃

Hmmm... this text looks like someone wants to promote one project by downgrading another. If that's the case, then it's very sad...

I have been using this service since its introduction and no problems have ever arisen

I have no doubts about the decency of @xpilar and the environmental friendliness of the service he represents. I think that if there are questions about the service, it is more productive to ask them directly to the owner of the development.

I was upset by your post...

Хммм... этот текст выглядит так, что кто-то хочет продвинуть один проект за счёт понижения другого. Если это так, то это очень печально...

Я пользуюсь этим сервисом с момента его появления и никаких проблем никогда не возникало

У меня нет сомнений в порядочности @xpilar и экологичности сервиса, который он представляет. Думаю, что если возникают вопросы по работе сервиса, более продуктивно задать их непосредственно хозяину разработки.

Меня огорчил ваш пост...

Hi @ponpase, I know you from previous work together in the same team and I always considered you to be fair but this post made me very sad. You know how many users are on WOX and majority is using Steem Auto for a long time, if you have not used it you can claim what is done and what is not.

I fully understand that you are promoting the Witness "future.witness." it is very obvious advertisement for him and against @xpilar.witness.

Why not to contact xpilar directly in our open Discord channel. I know that you are easily approaching everyone in DM before coming with such accusation and blackmailing you should check up with the people who are running the service.

CC: @visionaer3003 and @stephenkendal

Thank you, friend!
I'm @steem.history, who is steem witness.
Thank you for witnessvoting for me.
image.png
please click it!
image.png
(Go to https://steemit.com/~witnesses and type fbslo at the bottom of the page)

The weight is reduced because of the lack of Voting Power. If you vote for me as a witness, you can get my little vote.

Coin Marketplace

STEEM 0.26
TRX 0.19
JST 0.037
BTC 91836.73
ETH 3327.10
USDT 1.00
SBD 3.93