Feature Request: Reduce Transfer Fraud By Quickly Adding Form Autocomplete Support For The Steemit Wallet Transfer "To:" FieldsteemCreated with Sketch.

in #utopian-io8 years ago

When transferring SBD or Steem via the Steemit wallet, it is unnecessarily easy to typo a transfer target and "lose" the funds at the destination.

Currently, when you attempt to send a transfer via the Steemit.com interface, this is what you will see:

Transfer2.png

If you type into the field to enter a transfer target, it will not save your past entries nor provide autocompletes based on your currently entered letter(s). This is a helpful feature for increasing entry accuracy in many online forms. It definitely provides piece of mind when entering targets, and I appreciate the autocomplete feature when transferring cryptocurrency at exchanges, where it is usually enabled for wallet targets.

Without this feature, communities that send many transfers regularly (for example, payouts for all sorts of community games and contests) are more likely to make transfer errors, leading to lost funds and unnecessary blockchain traffic.

Another unfortunate issue aggravated by this missing feature is "account impersonation", or what I like to call "typo fraud". Below are a number of examples of this type of impersonation affecting the community:

Transfer1.png

Adding form autocomplete would reduce both actual typos and account impersonation.

This would appear to be as easy as toggling the autocomplete= field in the wallet to on. It is currently set to off.

Transfer4.png

I am not aware of any security reason why this should be forced to remain off, however, there could be one.

There is no option to add a favorite or saved transfer receipient. These would be great, but form autocomplete support is an extremely easy to implement stop gap option until a better feature can be included.



Open Source Contribution posted via https://utopian.io

Sort:  

Good idea, you can create a pull request for that. If you don't know how, I could do it for you guys. It's worth a try.

Thanks Drakos, great idea. Sounds like a good learning experience for me. I will take a crack at it, and if you don't mind, I'll DM you if I have any issues.

god, I have wished for this so many times!

Once I made the mistake to order a goat from minnowbooster but mistakenly put 3 "n"s instead of two. I hadn't even noticed the mistake and I asked @@@reggaemuffin for a refund. He pointed out my mistake BUT still was kind enough to send me a freebie goat matching my error (without me asking) despite of my stupidity :D

I have heard he is most benevolent, and having read his comments, he seems very reasonable, intelligent, and sociable. Your story is not surprising.

I'm sure he would be happy to see this feature too. I haven't made this mistake yet, but it's only a matter of time.

I just took a closer look at the fake randomwhale and saw its dubious associate accounts. It's a bit scary.

Now I am wondering how would blockchain address such issues ongoing? I mean In the fiat financial world our deposits can be insured in a bank against thief upto hundreads of thousands. Will similar protection or assurances ever exist with blockchain assets?

Any thoughts on this?

"Will similar protection or assurances ever exist with blockchain assets?"

They would have to be provided by third party, insurance type service, and may be cumbersome. There may simply be an ever-present tax on these sort of mistakes that can only be countered by pre-emptive actions. Remove the economic incentive to do this, and it will mostly disappear.

For example. Randowhale should have registered the account Randomwhale at the same time.

Captain_Hindsight.jpg

I was also having the same thought. I would consider this as 'must have' feature in the transfers page. It will be 'nice to have' when we author post or comment, as soon as we type '@' or '#' it should pull up list of accounts and tags respectively. In both the cases autocomplete can be used.

An example can be found in ant.design (React library of components) - https://ant.design/components/mention/

Thank you for a relevant link. I think all we need to do is toggle =off to =on and the rest will take care of itself.

Hell yes! This would be a great improvement to wallet transfers. If they do have a security reason for not enabling it, I'm also curious as to what it is.

I have no idea what it could be, if Bittrex thinks it is ok to keep autocomplete on for wallet addresses?

Hey @lexiconical I am @utopian-io. I have just super-voted you at 70% Power!

Suggestions https://utopian.io/rules

-Your contribution is less informative than others in this category.
-Utopian has detected 2 bot votes. I am the only bot you should love!!

Achievements

-Good amount of information. Thank you!
-Votes on this contribution are going well. Nice!
-You are having more votes than average for this category. Nice!
-You are generating more rewards than average for this category. Super!
-This is your first accepted contribution here in Utopian. Welcome!
Up-vote this comment to grow my power and help Open Source contributions like this one.

Thank you, I am looking forward to contributing more! It may force me to brush up on my coding skills, or lack thereof.

Yes, this would be a great feature to have! And also, if we could save certain addresses that would be good too, but I agree this is a nice stepping stone in between!

There is actually already a feature-request for favorite payees on Utopian-io, or I would have focused more on that.

I actually did initially, but then found the request after I had already written a bunch of now-deleted content. =.

Welcome @lexiconical
Approved
[utopian-moderator]

Much obliged!

Very informative, and a great idea to use to help with I am sure more things to come then just what you have brought up. With the quickness new people joining(me being one of them) it is great to have ones working so hard to make this community a place where, liars and cheats are not allowed!!
#cof

Thank you for the support!

This is very much needed feature. Thanks for bringing it to the notice of the community.

You are welcome, and welcome to the platform!