RE: NobleBot Updates And New Announcement
Hey @noblebot,
it seems like a lot of steem users don't really care about their accounts and keys.
For example https://steemd.com/@telasius and http://steemd.com/@richjr
Both published their private active key.
I rendered both active keys useless (a split of a seconds after you moved their funds to savings).
But I am still an active authority on both accounts.
@telasius still hasn't changed his password, while he is commenting and upvoting - like he don't miss his active key at all.
While searching for keys in old blockchain blocks, I found an account https://steemd.com/@drydoc46 with several withdraw routes to him.
He set a withdraw route to himself from accounts, which published their active keys long ago.
Even big and active steemians (one with more than 18,000 SP) have or had withdraw routes to him - now for over 6 month.
I think just moving the funds to savings is not sufficient.
Someone can easily write a script, to remove the funds from saving, wait for 3 days and transfer the funds.
Or setup some withdraw routes, after you saved the funds.
Therefore I delete all withdraw routes from an account after I am an active authority, just in case.
But I think the owner of the accounts should be shocked more.
Maybe also render the posting key useless.
So they are forced to change their password, if they want to use their account.
Or transfer all funds to an account and transfer them back, after they changed their password.
By now, you should have more experience with removing active authorities as myself.
Can I remove myself from another account as active authority?
Removing myself as posting authority is no problem.
Removing myself as active authority fails.
I think an active authority or active key can only remove another active authority or active key, but not itself.
Can you confirm this?
Do you have any idea, what happened to the following accounts?
@jodonbob @bob1988
They published their master passwords.
I tried to set myself as owner authority, but was not fast enough.
While reflecting about active keys, it propably is no good idea to add myself as owner authority.
I won't have the ability to remove myself afterwards.
Hello! I realized that I pasted in a comment my key by mistake, but I am unable to change it, dont know what to do, when in steemit account it refuses to change my password.
@telasius what errors are you getting? Please click here https://steemit.com/@telasius/password and try changing your password. Don't forget to keep it safe.
After that use this tool https://thenoblebot.herokuapp.com/ to remove all unwanted authorities and vesting withdrawal routes.
When you are done, change your master password again and be safe.
I am trying with my active pass and I am getting
To change password please use your current master password. Be sure to back up your new password. After that use your new active key to remove all authorities using this http://thenoblebot.herokuapp.com/.
When you are done, change master password again.
Thank you for your help!!
Hey @telasius, there is more to do. Please use this to reset your account authorities https://thenoblebot.herokuapp.com/. After that please change your master password again.
Hey @lostkey, I liked what you are doing recently.
NobleBot currently only moves funds to savings and informs victim. Its victim's responsibility to change his/her master password and @noblebot also don't want to transfer funds to itself. 3 days is enough time to change master password, clear all vesting withdrawal routes, and removal of authorities.
Can I remove myself from another account as active authority?I am not sure.
Owner authorities can be added using owner key or master password.
@lostkey can you please message me on Discord? Guiltyparties [Witness]#5071