A Web of Trust reputation system can be gamed with sockpuppet accounts, because an attacker can behave well for a while and then transact with himself repeatedly and rate himself high to raise his reputation arbitrarily.
Source quote, verbatim
If I use a lot of sockpuppet accounts, I can raise my reputation arbitrarily high, by behaving well for a while, then making a lot of transactions with myself and rating myself high.
From
Craig Calcaterra, Wulf A. Kaal, Gopinath Sivalingam, Reputation Protocol for the Internet of Trust - Conceptual Whitepaper (2018), Sockpuppet Protocol, p. 21 https://ssrn.com/abstract=3266953 · source PDF
Cite as
Craig Calcaterra, Wulf A. Kaal, Gopinath Sivalingam, Reputation Protocol for the Internet of Trust - Conceptual Whitepaper (2018). SSRN: https://ssrn.com/abstract=3266953
Holds when
reputation systems based on counting positive peer rated transactions
Classification
failuresupport: arguedfailure: sockpuppet self dealing in web of trustfamily: sybil-and-identity-attackreputationconsensus-and-securityregulatory-failure
Related claims
extended_bykaal:claim:3782210-008 A Web of Trust style reputation ledger, in which each party rates each transaction and reputation is summed wi...
generalizeskaal:claim:4067783-035 Proof of personhood projects such as Proof of Humanity and UBI DAO fail because they rest on web-of-trust theo...
extended_bykaal:claim:3782210-011 The Web of Trust works acceptably for low-value information transmission but should not be used for transactio...
extended_bykaal:claim:3782210-018 Distributing salary equitably, for example equally to all members, is self-defeating: the obvious gaming strat...
supported_bykaal:claim:3782210-026 Every single reputational implementation the authors have audited in the blockchain DAO space carries the flaw...
Verify
The quote above is an exact substring of the source PDF, whose sha256 is 781758dea356e55d79c73ad7f1debe7c83de398bd1cd9e0a9a6c2802f276b4c0. Extraction method: pdf-text-layer. Attestation record: colloquium/attestations/67a1086bace63da1...json Verify the binding yourself: curl -s https://wulfkaal.github.io/claims/3266953-028.md | sha256sum