Hi, just woke up here, I currently have Flu-A. People are saying there was a verifiable FC post from my account. Any WC protocol sleuths who can help me identify the exact signer that sent it (would sure be nice if these were device linked), I'd appreciate it.

https://signers.steer.fun to see messages from signers

co founder of @metamask . Making computers behave for us.

if I add a message with signer A
and then delete the message with signer B

does the activity show up as A having no recent activity? my understanding is the tombstone message from signer B replaces the original?

Creator of @harmonybot /bot-or-not | /blitkin | /orange-dao | IRL: Building spatial computing for construction @ Resolve YC W15

Afaik you can’t reliably get deleted messages because hubs can prune them

Not taking any sides here just trying to make sure we're all secure. Some useful info I just validated myself:

If you ADD a message (hub speak for casting) using signer A
and then DELETE a message using signer B

all the signing tools, hub message APIs, etc. will say signer A doesn't have any recent activity because the message returned by the hub is overwritten to say signer B is affiliated with the message. Because it was the last one to interact with it (delete). 

If someone (most likely MM team @dwr.eth @v) has logs of hub events then we'll know which signer sent the cast from @danfinlay's account this am. 

Until then we can't be sure that it was the Warpcast signer. We also can't be sure that any of the other signers are off the hook. All we know is the Warpcast signer deleted the message (probably after Dan logged on).

makes sense! i was asking this because people are jumping to conclusions it's the WC signer since the signers tool says all others have no activity and WC is the only one for Dan's FID

I don't think that conclusion can be drawn yet.

makes sense! i was asking this because people are jumping to conclusions it's the WC signer since the signers tool says all others have no activity and WC is the only one for Dan's FID

I don't think that conclusion can be drawn yet.

https://warpcast.com/sayangel/0xb5d58dfd

Mini apps will eat the internet | Latest drop: /clankermon | Building : /large /fctrivia /miniapps /flappycaster /jeeves /source @degentip @playsource /jump

It came from the Warpcast signer. That signer isn't revealed to users.

We should wait for @danfinlay to clarify his security posture, otherwise we have larger implications to address.

https://warpcast.com/christopher/0x0249cf12

Farcaster Development Boutique @ https://dTech.vision 💜 in love with tech 🤓decentralization, fitness and oldschool rap 😎

how do you know the ADD came from the signer? 

the hub overwrites the add message with the signer for the delete and the tombstone is overwritten with the latest signer.

I can check our own hub logs for the original message signer. Merkle can also check their APIs for the same.

Good insight.

Christopher is on it! 

https://warpcast.com/christopher/0x23f9a7ec

I am just relaying info here.

Though if you stream all events from hub and don’t do the delete you get the add too and have a reference even though it’s gone from hubs 

Cc @christopher is that the original add message?