🔑🦸‍♂️ [weekly report #50] 🚑 - 0 leaks, 1 (harmless) code injection, 10 flags

@keys-defender 69

about 3 years ago (Edited)

HiveDevs

Stats of the past 7 days on Hive

K E Y S P R O T E C T I O N:

PRIVATE KEYS LEAKS protected:

No leaks this week!

_{NOTE: @keys-defender still scans the STEEM blockchain because your private keys are shared across the two chains unless you reset your password at https://wallet.hive.blog/@your-username-here/password!}

_{TOTAL KEYS FOUND since launch:}

_{posting keys: // todo}
_{active keys: // todo}
_{memo keys: // todo}
_{owner keys: // todo}

PHISHING LINKS detected (and auto-replied to): 0

_{1 warning: blacklisted account @ranaa active on steem}

_{Auto-replies in wallet memos currently being developed..}

CODE INJECTIONS detected: 1 ❗

Just some pixel tracking..
_{https://hiveblocks.com/hive-167922/@lebah/earn-usd36-airdrop-bitcoin-blackn#@keys-defender/antixss-keys-defender-bot-1611299170028}

Screen Shot 2021-01-26 at 12.46.12 AM.png

UNSAFE LINKS detected:

HTTP links: 57.8/h -> ~9,710/week. Auto-replies/warnings throttled 1/20.
Shortened links: 27.0/h -> ~4,536/month. Auto-replies/warnings throttled 1/20.

_{NOTE: links that do not use a secure protocol (https) and shortened links (eg. bit.ly) are NOT a threat per se but can lead to theft of credentials if misused or used in a malicious attack.}

O T H E R A C T I V I T I E S:

Confirmed re-posting authors: 0 ✔️

One false positive:

Screen Shot 2021-01-26 at 12.47.26 AM.png

_{critical bug fixes required}

Downvotes of @keys-defender (and its trail) against hive-abusers:
10
❗

_Accounts:
kingscrown, mintdice, sulev, estulticia

_{Followers of my downvote-trail:} 2 _{(plus their own trail - about 10 accounts total)}

What does this bot do?

- _{Keys protection_{[live scan of transfers / posts / comments / other_ops. Auto-transfers to savings, auto-reset of keys, ..] {see automatic posts on leak and weekly reports}}}
- _{Phishing protection
_{[live scan of blocks to warn against known phishing campaigns and compromised domains]}}
- _{Re-posting detection
_{[mitigates the issue of re-posters]}}
- _{Code injections detection
_{[live scan of blocks for malicious code targeting dapps of the Hive ecosystem]}}
- _{Anti spam efforts
_{[counteracts spam from hive haters]}}

_{My security disclosures:}
_{- _{XSS vulnerabilities in #########.com}}
_{- _{XSS vulnerabilities in hive-db.com}

- _{XSS vulnerabilities in scribe.hivekings.com}

- _{XSS vulnerabilities in hiveblockexplorer.com}

- _{Malicious ads redirecting all Steemit iOS users to a phishing site}

- _{Reverse tabnabbing and clickjacking in steem.chat and steeemit registration page}}