Suggestion - Could be Beneficial

Okay I noticed a user a few days ago giving free copies of a grinderscape cheat client away for free. That's irrelevant this could be for any type of downloadable program with a link.

Example: (here is the original post)

Alright Blupig Responded with:

-----
Okay say he sends a clean file to Blupig and it's verified, what would happen if he changed that clean file and replaced it with a ratted/keylogged file later on down the road? Once the clean files gain reputation and verification switching them would bring in a-lot of successful downloads resulting in infected users of Sythe.org
-----

What I am thinking regarding the situation is maybe the Staff Member that verifies the program posts it on Sythe.org in behalf of the user. That way the legitimacy is known and can not be switched out with a new link containing an infected file.

Other wise I don't know another way around this and it seems like a possible exploit. I'm not really sure how to word this better but yea. Hopefully you all can see where I am coming from. My apologies if this is a stupid idea.

 

I dont think this is a bad suggestion, but you have not offered an alternative.


in the situation stated it is alot more beneficial for sythe to ask for proof that the user in question owns it.


Its like making people prove they can get firecapes before they offer firecape services on sythe, if you can actually get firecapes it is not an issue by any means, however if you only have the intention to scam, you may be unable to have the means to get a firecape yourself.

 

I did sort of offer a basic idea for improvement, the staff member posting it in behalf of the user that way the user himself cannot switch and add a new link at any time containing a infected file. He would also have to repeat process if there's any updates and so forth because it would be a new file entirely. I'm open to other insights here I just figured this could be a serious issue.

 

no staff member is ever gonna post some random guide/site on a user's behalf, verified or not, if there's a chance the user is going to change the underlying guide/site into something malicious. don't see this ever working sadly

edit - to be clear, the user can just change whatever's underlying the site/code/guide/whatever that the mod posts; having a new link to that guide won't prevent that from happening

 

Alright no problem, was just a thought.

 

Unfortunately this kind of thing can only really ever be based on the integrity of the provider.

I myself can't think of a way to make this kind of trade/sale secure as the provider can change the download or client or whatever at will, if they so wished to.

 

Denied