1. There is no such thing as a "pending" ban or Steam admin. Anyone threatening your account is a scammer trying to scare you. Read more.

Pending: Friends DiscordRep

Discussion in 'Community Applications' started by leny32, Feb 17, 2020.

  1. leny32

    leny32 New User

    Messages:
    18
    Steam:
    STEAM_0:0:109744853
    Firstly, the request is only being accepted through the extensions, which means we can't receive packets from anything but the extensions. In the extension, we use a technique where you click "Scan". It will then refresh your browser, and when the messages are loaded it will be saved and automatically uploaded to another URL. This URL can be shared in the Scam Report. We're expecting it to have good accuracy of gathering chat-logs. Currently, our extension is uploaded on Google Store Listings and can be added to the browser.
  2. leny32

    leny32 New User

    Messages:
    18
    Steam:
    STEAM_0:0:109744853
    We have other procedures such as, but not limited to, screen share (through Discord), where you don't need to run the extension. Yes, of course, we allow them to appeal even if not using the extension even though in the report the extension were used by the reporter.
  3. Enstage

    Enstage SteamRep Admin Partner Community Donator - Tier V

    Messages:
    4,651
    Steam:
    STEAM_0:1:52569926
    This is not possible. Anyone who has the extension can see its code, and therefore replicate any sort of process or technique you use to validate where the request came from.

    Refreshing the browser does not guarantee that the data on the page is what was sent by the server. This can be changed at so many points throughout the process. Besides, anyone could just write their own request to your API with whatever data they want, replicating any sort of validation or verification used in the extension.

    None of this is particularly hard to do, it could be accomplished by most people who know how to open their browser's developer tools.
  4. Manatee

    Manatee SteamRep Moderator Friend Community

    Messages:
    24
    Steam:
    STEAM_0:1:39625442
    Hi leny32, I glossed through the application and replies and had a few inquiries of my own:

    • You mentioned in an above reply that you do not permit payment for reputation, however; in your own FAQ on your website, it mentions that users can donate to the community for reputation. Perhaps you can clarify for me as to what specifics or contexts payment is or is not permitted in regard to rep.
    • [​IMG]
    • My second question would be that of the auto identification system you mention within discord that can identify fabricated reputation.
      I was curious if you would be able to elaborate what parameters this system evaluates on (how do you or the bot know they're fake or bought), how the flags go through human eval and then how it would then be administrated.
    Best regards--
  5. leny32

    leny32 New User

    Messages:
    18
    Steam:
    STEAM_0:0:109744853
    Well, if you didn't know, each chrome extension has its own ID. We only allow requests through that ID. The ID can be found in chrome://extensions/.
  6. leny32

    leny32 New User

    Messages:
    18
    Steam:
    STEAM_0:0:109744853
    I'm sorry for the trouble with our FAQ, and it's obviously not updated to current standards. The current FAQ was made by a previous Staff Member and is outdated. As shown here:
    upload_2020-3-5_10-57-17.png
    Allow me to explain this. We previously had the idea of using reputation as a trust factor. The higher the trust factor of the user you traded with the more money you could get back if the user was found guilty in a Scam Report. However we've changed up a lot since then, and we'll be doing an update to the FAQ to ensure that this will not be misunderstood. Thanks for letting me know.

    To your second question. We can take a look at the bot. The bot can scan messages and through arguments/values, it matches and finds things like rep4rep, or other values. If we detect anyone against our reputation rules, we'll give punishments. We can detect bots by checking when their account was created, and usually, we do manual checks on users that are flagged. Users created under 1 month ago will not be permitted to use DiscordRep's voting feature.
  7. Enstage

    Enstage SteamRep Admin Partner Community Donator - Tier V

    Messages:
    4,651
    Steam:
    STEAM_0:1:52569926
    I'm telling you now, there is no way to verify the legitimacy of the data you receive from this extension. Anyone can just forge a request and include this "extension ID" in the request.
  8. leny32

    leny32 New User

    Messages:
    18
    Steam:
    STEAM_0:0:109744853
    I mean you are not wrong, but we manually ask both sides. We don't blindly believe in the scans, but it's better than a normal screenshot. It's not 100% accurate.
  9. Sniper Pro

    Sniper Pro FirePowered Head Admin Partner Community

    Messages:
    176
    Steam:
    STEAM_0:1:49525162
    Even if the information coming in was 100% accurate, the fact that you require users to download and trust this extension in the first place is, in my opinion, a nonstarter.
  10. leny32

    leny32 New User

    Messages:
    18
    Steam:
    STEAM_0:0:109744853
    Users are not required to use the extension, we are open for other options, and there is no need to use the extensions. Trust is something that must be built up, and we’ve built trust into our userbase and been interacting with them closely.
  11. leny32

    leny32 New User

    Messages:
    18
    Steam:
    STEAM_0:0:109744853
    Another Staff member @_Blizzard_ will inform you of upcoming updates and will be following up on further questions.