I've just read your thread but yea I agree. It should have been done from the start.

I guess a rule like this wouldn't hurt, in case of unusuals. Other items are a different story, you'll almost always find someone "quickbuying" Bill's Hats for 7 Keys which I don't have any problem with. Others are free to buy for less than that but they will most likely get ignored.

When it comes to unusuals, buying a 3 buds unusual for 2 buds I'd say is not crossing any lines. So in my opinion anything up to 33% off would be ok. However if a rule like that is put up, that won't really stop the quickbuyers, you'll see the same old trades except everyone will be buying 33% off "or more".

Originally posted by Champelliot:

Seriously, at least 10% of all suggestions are about this very topic, they should add a colossal arrow pointing at the sign saying "Press this!".

It's because it isn't obvious at all that it's a button you can press, it's not on the help page either. When I first started using outpost I didn't know of it and I was about to post a new suggestion here when I saw a similar thread. I think there should be a text label next to the button saying "Advanced Options" or something.

I guess that would work too. I rarely link anything in my trades and I doubt it would affect too many users. You could whitelist: outpost links, steam community/forum links, price check sites, imgur, tf2 wiki, stats.tf and that's about all that comes to my mind.

Yea, report the trade.

Nope.

Originally posted by Uranium235:

k, my last comment. That is not a phishing attack.

I'm just assuming things here, because I wanna refuse to believe that so many users got their account hijacked so easily (I mean really? who would actually believe that you can get free games just like that). It's a lot easier to find 1 or 2 newbies out of thousands, who would input their password on such a site. In order to do that though you'd have to massively advertize your link and one way is to spread it like a virus.

Originally posted by Uranium235:

But that is not the case. I visit these sites when I see them regularly (out of "professional" curiosity), and my account is still solely under my control.
The victim has to be active in order for a phishing attack to be successful, not just passive.

Not necesserily. If the attacker can exploit a vulnerability in a browser (I'm sure you've heard about the Java 0-day exploit) and he can gain access to your computer and read say a session cookie (I do hope it's not that easy but it's just an example) then they might be able to use your account without you even noticing.

Originally posted by Uranium235:

You are always behind in this game. Compare with SPAM filters.

You'd be far more ahead compared to the current system. Relying on the users to report links, waiting for admins to process reports etc.

Originally posted by Uranium235:

edit: What could be more efficient from the site owner's perspective than a large user base already eager to find a reason to report anything?

Outpost is still littered with those recent phishing links. Some have been reported, some have been hidden by users and some are left to be discovered. I am not sure what exploit that site is using, but if it can hijack your account by simply visiting it and then spread it like a virus, you see the problem?

What's more efficient than being one step ahead and not let those links posted at all? So I wouldn't have to visit a trade and accidentally click on one of them and risk being hijacked myself. Sneeza has already banned the phisher's IP but nothing stops him from hopping onto a new computer and continue doing what he was doing. It might seem like a cat and mouse game, but eventually the cat or the mouse gets tired.

Originally posted by Uranium235:

Yes, automated systems could potentially be more work for administrators. And with that I rest my case, as I like to think I made my point clear enough regarding why using automated filters is not worth the effort.

lol I'm not sure I understand the logic in this. An automatic system is designed to take away work from admins, hence automatic. If you call a 2 minute editing job for coming up with a new regular expression "more work", well no comment then. Also automatically hiding phishing links so that nobody has to report them manually and the admins going through reports not having to take action is "more work", how?

With such a system in place you'd be prepared for more than just phishing. Maybe some morons will find it funny to start spamming the site with the same thing on every trade. It can happen and it would be a pain, but you could stop them easily in no time taking away work from admins.