I was thinking, considering what happened with Steam in regards to that last game with the malware and similar other stories in the past, how can I have a security review system for games in DEGA, considering its decentralized permissionless and there's the idea that it will still run even if the company and team goes under?
I tried thinking about this in the past, but nothing came up. But now the idea hit me: A decentralized marketplace of security reviews.
This would result in more security reports, higher level of security, less chances of corruption, multiple fail safes, much higher efficiency, no lag time before release (no bureaucracy), and no reliance on the store hub (DEGA) to handle all of this, there would be security reviews for the game build and all updates, and this would create more economic activity for this type of work.
I'll be updating the design (still working on it, slowly but surely) to have this type of system for the game store page and other relevant pages.
Replies (2)
That's kinda what Zapstore is trying to solve with web of trust.
Aye. Technical a bunch of sites/apps already have WoT, even for my nostr:nprofile1qqs0f0clkkagh6pe7ux8xvtn8ccf77qgy2e3ra37q8uaez4mks5034gppemhxue69uhkummn9ekx7mp0qy2hwumn8ghj7un9d3shjtnyv9kh2uewd9hj7qg4waehxw309ahx7um5wghx77r5wghxgetk9uvmc9v7, it's basically comments but with a differentiating tag in the published event to indicate that it's a general review or a security review and so on.
Idea here is, along with web of trust and general user posts, the site/app would also categorize posts with such tags and collects them to average out a security score, with different sites/apps selecting npubs that they consider as trustworthy. (Users can switch to see who they trust and disregard the site's trust, of course).
With that, companies would start doing a bit of probono work on a few games or apps, so they'd build up a reputation and market themselves as well, resulting in developers paying for their service to have them review their stuff and publish it.
If zapstore will get to it before I do, nice, if not then whenever I do (not anytime soon) I'd send it over for review and get his input since he'd probably want such a system too.
