borodutch

@warpcastadmin.eth

8330 Following

126493 Followers

borodutch pfp

@warpcastadmin.eth

send money to borodutch.eth thank you

4 replies

0 recast

18 reactions

borodutch pfp

@warpcastadmin.eth

hmmmm can i set borodutch.eth to administer the fid (i.e. so that no one can transfer the rights) but leave login/cast/dc/everything else to a specific seed phrase (i.e. custody address)?

1 reply

0 recast

0 reaction

borodutch pfp

@warpcastadmin.eth

anybody has ideas on how to make this happen? custody and recovery addresses change locked behind a multisig but login to farcaster is done with the custody seed?

1 reply

2 recasts

8 reactions

borodutch pfp

@warpcastadmin.eth

help me help you to achieve true anonymity

0 reply

1 recast

3 reactions

borodutch pfp

@warpcastadmin.eth

i guess @bountycaster for $100 worth of $true?

0 reply

0 recast

5 reactions

borodutch pfp

@warpcastadmin.eth

ok here's a quest for you: 1. we need to be able to share seed of @trueanon again 2. recovery address and custody address should not be changeable with just the knowledge of the seed, maybe we can do a multisig as the custody address i'll gift $100 worth of $true to anyone who can substantially help with this cc @horsefacts.eth maybe you can come up with a multisig scheme? like setting custody address to be a gnosis safe or something? but it should still be able to interact with farcaster (i guess multisig really only needed for the smart contracts?)

1 reply

2 recasts

12 reactions

borodutch pfp

@warpcastadmin.eth

and this is true. shrek is coming back

1 reply

1 recast

6 reactions

borodutch pfp

@warpcastadmin.eth

@horsefacts.eth ok i now have the control again, i think the warpcast email has changed too? is there a way to change it back? also is there any easy way to prevent whoever knows custody seed address from changing the custody address (e.g. require an external wallet to sign off on it)?

0 reply

0 recast

0 reaction

borodutch pfp

@warpcastadmin.eth

0 reply

0 recast

3 reactions

borodutch pfp

@warpcastadmin.eth

i see, maybe somehow making recover address unchangeable might be a good idea in the future 🤔 so that at least high-profile accounts can't fully lose their fids or maybe somehow making it multisig 🤔

0 reply

0 recast

0 reaction

borodutch pfp

@warpcastadmin.eth

also... maybe there is a button in warpcast that allows me to generate sig for this? :))

1 reply

0 recast

2 reactions

borodutch pfp

@warpcastadmin.eth

is it even possible to change the recovery address?

1 reply

0 recast

0 reaction

borodutch pfp

@warpcastadmin.eth

tbf we have no idea who was behind it

1 reply

0 recast

1 reaction

borodutch pfp

@warpcastadmin.eth

final update on @trueanon (the project is now closed): warpcast allows you to change custody address if you know the seed from the existing custody address even though i believe there should be a way to recover from this state (especially with recovery address set), warpcast team thinks that it's ok because: 1. seed phrases are hidden from the end user with keychains (low chances of leaking them) 2. leaking the seed phrase can equal to losing everything you have on farcaster 3. you should use app keys and hub signers instead this approach is close to me (as i'm all for blockchain) but i do believe it doesn't work well for social and high-profile people *will* leak their seed phrases accidentally @trueanon was nice while it lasted, nice experiment, i liked it now back to my main workload...

3 replies

2 recasts

24 reactions

borodutch pfp

@warpcastadmin.eth

it still doesn't sit right with me, what if there are multiple people managing an account? more points of failure, and they *will* end up sharing seed phrases (even with the app key access feature) i kinda feel like there should be a way to make custody address a smart contract that allows for all actions but switching the custody address — that action will require a multisig wdyt @v

1 reply

0 recast

0 reaction

borodutch pfp

@warpcastadmin.eth

yep i'm removing this

0 reply

0 recast

1 reaction

borodutch pfp

@warpcastadmin.eth

btw i don't see this as an issue personally, and i agree with this approach 100% just saying that in the future this might lead to problems and a way to recover even from this state should be accessible this approach works for everything blockchain (especially finances) but doesn't translate well into social networks e.g. a celebrity losing access because they accidentally leak the seed phrase on a twitch stream (this *will* happen)

1 reply

0 recast

0 reaction

borodutch pfp

@warpcastadmin.eth

just to recap: if someone accidentally leaks their custody address seed phrase, they lose everything they have on farcaster without any way to recover?

1 reply

0 recast

0 reaction

borodutch pfp

@warpcastadmin.eth

i know that this is... well... a peculiar experiment i don't quite care about it (it stopped being fun anyway) but you might want to consider doing something about leaked custody address seeds

1 reply

0 recast

1 reaction

borodutch pfp

@warpcastadmin.eth

yeah that's the vulnerability i'm talking about

1 reply

0 recast

0 reaction