You are viewing a single comment's thread from:
RE: Splinterwars: A quest to give valuation to our assets!
For me it is difficult having a completely different mode of card requirements than Splinterlands. For instance, if I have two high-level Divine Healers, I want each of them in a different account for Splinterlands. I imagine it's going to be difficult for Splinterwars to have enough value to justify keeping cards in accounts where they aren't playable in Splinterlands.
One (maybe too complicated) way around that might be for Splinterwars to have an independent card-delegation system. So if I have all my cards in cold wallet, I could delegate them in singles to accounts for Splinterlands but then also delegate the same cards in larger numbers to a different account to play Splinterwars.
That's a great point tcpolymath.
Keeping duplicate high level cards has no immediate use in Splinterlands, except that you can delegate them or rent them to other players.
For the moment, I decided to trigger import on ownership of cards - to prevent some kind of abuse. More details about this later, as nothing can prevent people from giving cards anyway. But it still respects the card delegation and rental system while not affecting negatively your Splinterwars value.
This means if you have several high level cards sitting on a Splinterlands main account, but you delegate them, you will have the advantage of using them still in Splinterwars.
It is then interesting to have a main account where all cards are, and delegate them to friends and other accounts - which I believe is the most interesting way of using Splinterlands delegation.
I think it also fulfills the way cards and loot may overpopulate your main account while waiting to be sold.
However, this also means this does not help your friends to gain superior strength in Splinterwars - because delegated cards do not count for collection import. I believe this is an acceptable side-effect, but will look for users feedback on the matter!
If you want your friends to have superior Splinterwars strength, you could still give them cards.
About interest in unlocking Splinterwars specific content, something to be discussed with the Splinterlands team (just to make sure they are okay with it) is if new Splinterwars creature, when they will come, could be tradable on their own.
Splinterlands license is made to prevent makers from selling card starters and boosters. But also from being in competition with Splinterlands itself. I think it is great.
With the Dark Energy Crystals (DEC) coming in, and a possible PVE activity scheduled for Splinterlands, this means I must make sure Splinterwars still walks on the good side of synergy with Splinterlands.
I can assure you I want everything to be smooth on that part.
I am certain there will be ways to give extreme value to Splinterwars content - there are some routes I cannot confirm yet, but the Splinterlands team has proven to be very open, so I think solutions will come :-)
From my perspective that's much worse, as there's no chance I'm giving any other app the posting key for the account that holds my Splinterlands cards.
Hello tcpolymath, I roger that!
So, in your opinion, using owned cards instead of delegated cards to create your collection is worse.
Please note that the app uses Steem Connect:
the only place where you put a posting key is on the browser's steem connect page; it's used to make sure you are this person and play, and it can't even touch your Splinterlands assets.
The only URL it reads to read a collection, are from Splinterlands public API ( ie. just like https://steemmonsters.com/cards/collection/tcpolymath ).
It can't touch your cards.
To be clear, it's an entirely separated dapp, with no authority over Splinterlands assets.
It only creates new stuff from what it sees you have on Splinterlands thanks to the public API. And uses Steem Connect not to read into Splinterlands (that would be impossible) but to make sure you are tcpolymath.
There is no place where posting keys, or any keys is to input on pages of the client or server. And I think it's very important to stay that way: only Steem Connect should receive keys, that way no one stores them.
So it sounds like you're not really clear on how Splinterlands security works. The only thing you need to move a Splinterlands card between accounts is the ability to make a custom_json transaction on the account that owns the card. Which means that if you're granted posting authority through SteemConnect, anyone who hacks either your server or the account you're using to hold the authority can steal the cards of everyone who has granted that authority. If you're able to make the custom jsons for your game, you will be able to make the custom jsons for Splinterlands; there's no technical distinction between them. This sort of hack happened to Utopian last year, fortunately before Splinterlands cards were a thing; if it can happen to them it can happen to anyone.
Similarly, putting the key into SteemConnect over and over is risky: it can be read from your screen, or it can be taken by fake SteemConnect clones (this happens a lot).
The only way to secure assets in a way that I'm comfortable with is to hold each application's assets in a single account which does only the operations which are necessary for that application. So I have an account that plays NextColony, which uses auths; it doesn't do anything else. Not only does that make my NextColony assets as secure as NextColony itself, it also doesn't allow anyone who compromised NextColony to take my Splinterlands cards, which would be possible if I used the same account to play both games.