bitshares1-webwallet icon indicating copy to clipboard operation
bitshares1-webwallet copied to clipboard

Double check the "transfer" command in GUI-terminal , prevent smart scamer

Open ghost opened this issue 10 years ago • 3 comments

Some people may tell newbies to use a command line to get free funds or fix their accounts .

One version or scamer:

Hi , BTS can give you free money ! just type in the command below :

transfer 100000 BTS wodes sho-me-the-money !

Newbies who know nothing about what a terminal command is would fall this trick . Since no newbie really know you can transfer funds on the command line .

suggestion : 1、 Double check when use "transfer" command in the GUI terminal 2、Need to manually enable an check box to allow transfer command in GUI interface .

ghost avatar Jan 26 '15 10:01 ghost

Requesting a "confirm the above tx" - message for the CLI .. not the RPC

xeroc avatar Jan 26 '15 11:01 xeroc

Perhaps the console could detect when a wallet_transfer or any alias is used and prompt: are you sure (yes,no). That message could then be internationalized.

jcalfee avatar Jan 26 '15 14:01 jcalfee

proposed example: localel_en.json "console_confirmations":{ "wallet_transfer":"Are you sure you want to transfer {{1}} {{2}} funds to {{4}}?", "...." } Never add an alias to the json it will not work, only the full command. The code will check for aliases. I would also suggest having a single preference to enable or disable all of the confirmations (enabled by default).

jcalfee avatar Jan 26 '15 14:01 jcalfee