Author Topic: [Worker] Reference faucet via BitShares.eu  (Read 1390 times)

0 Members and 1 Guest are viewing this topic.

Offline xeroc

  • Board Moderator
  • Hero Member
  • *****
  • Posts: 12879
  • ChainSquad GmbH
    • View Profile
    • ChainSquad GmbH
  • BitShares: xeroc
  • GitHub: xeroc
Re: [Worker] Reference faucet via BitShares.eu
« Reply #15 on: February 14, 2019, 08:39:49 am »
Thanks everyone for your support. The reference faucet worker is active now and account creation continues as usual.
Give BitShares a try! Use the http://testnet.bitshares.eu provided by http://bitshares.eu powered by ChainSquad GmbH

Offline sschiessl

Re: [Worker] Reference faucet via BitShares.eu
« Reply #16 on: February 14, 2019, 09:58:21 am »
Also, it has never stopped to operate for the community!

Offline xeroc

  • Board Moderator
  • Hero Member
  • *****
  • Posts: 12879
  • ChainSquad GmbH
    • View Profile
    • ChainSquad GmbH
  • BitShares: xeroc
  • GitHub: xeroc
Re: [Worker] Reference faucet via BitShares.eu
« Reply #17 on: March 03, 2019, 12:15:12 pm »
FYI:
Due to a distributed attack on the onboarding faucet, account registration for account names that are shorter than 6 is now forbidden. The (now stopped) attacker tried to have hundreds of thousands of accounts registered with community funds.

The way the attacker misuses the faucet made me force this limitation onto everyone. I am truly sorry that, after having tried to slow him down by other means, the ultimate answer to the attacker is to restrict account names to a length of 6 or more.

If any business relies on account creations that are no longer possible, please contact me directly and have your setup whitelisted. Thank you.
Give BitShares a try! Use the http://testnet.bitshares.eu provided by http://bitshares.eu powered by ChainSquad GmbH

Offline xeroc

  • Board Moderator
  • Hero Member
  • *****
  • Posts: 12879
  • ChainSquad GmbH
    • View Profile
    • ChainSquad GmbH
  • BitShares: xeroc
  • GitHub: xeroc
Re: [Worker] Reference faucet via BitShares.eu
« Reply #18 on: March 03, 2019, 12:22:23 pm »
Options to resolve this from the top of my head:

1. One option to prevent this kind of issue going forward would be to implement a two-step account registration that requires verification of an email address or even better a mobile phone (SMS). However, this is considered too aggressive w.r.t. privacy concerns and barriers of entry by many.

2. Another option to reduce this kind of attack would be to require an invitation code for account registrations which could be tightly integrated into bitshares.eu and anyone with an account there could get an invitation code that fills up to a certain threshold within 24hr or so. (might be interesting in combination with becoming the referrer). Obv, people would need to have an account on bitshares.eu.

3. Yet another way could be to require a *signed message* from a life-time member that could then be set as referrer. This does not require people to have an account on bitshares.eu but signed message are longer and more cumbersome than simple invitation codes.

Anyone with another way of dealing with this?
Give BitShares a try! Use the http://testnet.bitshares.eu provided by http://bitshares.eu powered by ChainSquad GmbH

Offline iamredbar

Re: [Worker] Reference faucet via BitShares.eu
« Reply #19 on: March 03, 2019, 12:59:43 pm »
FYI:
Due to a distributed attack on the onboarding faucet, account registration for account names that are shorter than 6 is now forbidden. The (now stopped) attacker tried to have hundreds of thousands of accounts registered with community funds.

Thank you for being diligent in dealing with the attack. I wouldn’t be sorry about the restriction, one person can ruin things for many people.

As far as dealing with it, that is a hard call. I really like how easy the onboarding process is for new members, it is difficult for me to suggest anything that really inhibits the process. Maybe account names that are shorter than 6 have to be a premium account? This wouldn’t slow down the process and it would give incentive to purchase the shorter names.