Allow whitelisting of tokens.

[MicahZoltu]

The recent Simolean airdrop to every Ethereum account has made it so all of my accounts/contractsin Parity now show me as having 10,000 Simoleans. This is quite annoying since they are worthless and this is really just an advertising scheme. As a user, I would like the ability to click on a token in the UI and have it blacklisted so it no longer shows up for me.

I'm worried that the whole "automatically list tokens" thing is going to become more and more problematic as advertisers realize that for a couple of dollars they can make their random worthless token show up on everyone's account in Parity (and likely other wallet UIs). I'm not sure what the best long-term solution for this is since I think we are all generally against censorship, but at the same time I think we need a way to mitigate this sort of low-cost spam.

[MicahZoltu]

Note: This particular technique is clever in that it costs me ETH at the moment to clear the Simoleans out of my account. Not only do I have to pay the cost of transferring them, but I also have to pay the cost to initialize them into my account since the airdrop mechanism made it so users pay initialization costs.

[3esmit]

I'm also tired of seeing tiny bits of worthless tokens in my accounts just because some dumb marketing airdropped them, and Simolean scheme can be exploited to write anything in all Parity UI clients, even offensive words.

[5chdn]

Yeah, we already have an idea for this. Stay tuned.

Meanwhile, I will remove spammy tokens like SIM. Just nuked it.

[Grix]

@3esmit

and Simolean scheme can be exploited to write anything in all Parity UI clients, even offensive words.

What about using it to inject javascript code? I hope that field is sanitized in the web client.

[jacogr]

There is no JS inject avenue. The issue with the SIM tokens, is as follows -

1. Parity reads the Token registry
2. I finds all tokens where balance > 0 and displays these
3. It displays these with the balance (read from contract)

In the case of SIM it returns > 0 balance for all addresses.

[5chdn]

Spammy tokens like Simleon and Penis won't show up if you upgrade to 1.8.1 (stay tuned for binaries in a couple of hours).

[radarcg]

I'm on 1.8.4 beta, and I still see the PNS token.

[joshuad31]

I'm on 1.8.4 beta and I still see the PNS token.

[radarcg]

@5chdn can this be reopened? It is still an issue.

[43061b4a]

This is happening to new accounts too:

Version: v1.8.2-beta-1b6588c-20171025/x86_64-linux-gnu/rustc1.21.0

[remi]

@43061b4a Did you trying clearing your browser local storage?

window.localStorage.clear()

Did the trick for me!

[joshuad31]

window.localStorage.clear() - This goes where exactly? Saying things like this is like saying "we don't expect non-technical users to use our product" or "penis coin is not real just get over it"

Its gross and in very poor taste. Do something about it. Its one of the first things a user notices when using the Parity wallet and it means I can't really tell my friends to use it, its embarrassing.

[43061b4a]

This goes in the web-developer console area. See more details here for firefox. Local storage is somewhat newer data storage mechanisms and hence browser and software may not be as mature just yet. But I agree that this is something that should be addressed.

[joshuad31]

Unable to make a connection to the Parity Secure API. To update your secure token or to generate a new one, run parity signer new-token and paste the generated token into the space below.

Ensure that both the Parity node and this machine connecting have computer clocks in-sync with each other and with a timestamp server, ensuring both successful token validation and block operations.

Pathetic

[joshuad31]

And its STILL THERE even after going to all the trouble

[43061b4a]

What version of Parity are you running? and on what OS? Clearing storage fixed it for me, I'm running on Ubuntu.

[joshuad31]

Windows
Parity/1.8.4/1.22.1/wi
Tried on BOTH Chrome and Firefox

[5chdn]

Are you fully synchronized?

[vidov1]

Those spam tokens are taking space on my display, now there are 2PR, BET, HSC, ROT, WIT... A blacklist functionality is really needed.

[Tbaut]

Moved to parity-js/shell#80