BitShares Forum

Main => General Discussion => Topic started by: noisy on March 06, 2016, 04:44:15 pm

Title: Scenario of abusing rate limited free transactions for spamming
Post by: noisy on March 06, 2016, 04:44:15 pm
Imagine that I have a lot of BTS on my account. That will give me a possibility to send a lot of transaction without any costs when abit's code will be deployed. How I can use this to do wrong things?

I can issue some asset, like NO.DILUTION or SIDECHAINS.YES or ONLY.DASH, and send some amount to every user in the network. I could then write some information in description of the coin... having hope, that someone will read it.... and I think some would read that.

After some time we can have tons of scam assets. People will be annoyed that they wallet looks like garbage.

I think Rate Limited Free Transactions will be one of the best feature of Bitshares, but we have to make sure, that they will not be used agains a network or their users.

Proposition of solution?

Maybe we should have a reputation system for all assets? All users in wallet settings could have set default value below which coins will be ignored (I mean, will not be displayed).

Of course users should be able manually override that he trust specific asset even if its reputation is below his setting for "Display assets with reputation greater than".

Maybe there are simpler ways of preventing this kind of spam attack. What are your ideas?
Title: Re: Scenario of abusing rate limited free transactions for spamming
Post by: abit on March 06, 2016, 04:54:38 pm
Instead that poeple can send 0.00001 bts with ads in memos.
Title: Re: Scenario of abusing rate limited free transactions for spamming
Post by: noisy on March 06, 2016, 05:02:11 pm
Instead that poeple can send 0.00001 bts with ads in memos.

Actually, that will no be so bad :P But then at some point I would probably need some tool to filter received transactions and hide those bellow some amount.
Title: Re: Scenario of abusing rate limited free transactions for spamming
Post by: xeroc on March 06, 2016, 05:10:45 pm
We can prevent asset spam by raising the create asset fee significantly. But in the ends .. its the same thing as in mail, people are misusing it for their own benefit, not matter what you do and its the responsibility of users to not fall for the trick.
Title: Re: Scenario of abusing rate limited free transactions for spamming
Post by: Akado on March 06, 2016, 05:11:01 pm
Have an option not to get transfers other than your whitelisted contacts. Then every transfer done to your account that comes from an account that is not whitelisted gets immediately burned.

Basically an option that blacklists all non-whitelisted contacts
Title: Re: Scenario of abusing rate limited free transactions for spamming
Post by: cube on March 06, 2016, 05:11:31 pm
Yes, anything free or subsidised is proned to abuse.  Be prepared to receive spammy and junk UIAs.

Basically an option that blacklists all non-whitelisted contacts

Now, we need a firewall for our bts accounts.
Title: Re: Scenario of abusing rate limited free transactions for spamming
Post by: Thom on March 06, 2016, 05:26:25 pm
Have an option not to get transfers other than your whitelisted contacts. Then every transfer done to your account that comes from an account that is not whitelisted gets immediately burned.

Basically an option that blacklists all non-whitelisted contacts

That prohibits unsolicited, desired tips, say from a youtube video or similar use case. However, the solution then is to setup a separate BTS account to receive the tips and disable and restrictive blacklisting. A bot could be used to "clean" the junk UIA's out of that account or possibly employ a filter to only view tips of interest in it.
Title: Re: Scenario of abusing rate limited free transactions for spamming
Post by: Samupaha on March 06, 2016, 07:21:45 pm
Maybe wallet just needs options to hide certain assets and small transactions? No need to show everything for the user that happens in the blockchain.
Title: Re: Scenario of abusing rate limited free transactions for spamming
Post by: Akado on March 06, 2016, 07:51:12 pm
Have an option not to get transfers other than your whitelisted contacts. Then every transfer done to your account that comes from an account that is not whitelisted gets immediately burned.

Basically an option that blacklists all non-whitelisted contacts

That prohibits unsolicited, desired tips, say from a youtube video or similar use case. However, the solution then is to setup a separate BTS account to receive the tips and disable and restrictive blacklisting. A bot could be used to "clean" the junk UIA's out of that account or possibly employ a filter to only view tips of interest in it.

Well that's up to the user to manage. Like you said he can just create a new account for tips. As for the rest of the users who don't want to be bothered this is useful.
Title: Re: Scenario of abusing rate limited free transactions for spamming
Post by: Erlich Bachman on March 06, 2016, 08:03:28 pm
You're right, we didn't really think about that angle.  It seems that we need to assume that at the worst case, every "free transaction" will generate a "free disposal" on the other end.

If the spam eventually becomes a problem, then we can always vote to raise the fees in the future.  Remember, we are encouraging people to make transactions right now.  Having spam marketers on this platform is a positive sign that this platform has value.
Title: Re: Scenario of abusing rate limited free transactions for spamming
Post by: emailtooaj on March 06, 2016, 09:58:35 pm
What about creating a "coin in box" that displays new coins that have been sent to your account, that aren't already part of you current token holdings? That way you can batch delete  the coins you don't want and keep the ones you do wasn't.  I'd imagine this would be simpler route of action against spam shit coins, if this becomes an issue??