Hmm I'd feel like someone will abuse it

TornExchange and W3B already have reputation systems in them though. Be careful trading large sums of money next time and protect yourself by self hospitalizing.

That’s exactly the issue though — right now there really isn’t a better practical signal, so traders are mostly dealing blind. I’ve tried to limit abuse by making it one vote per player per target, allowing vote changes/removal instead of spam, and blocking self-voting. It’s not perfect, but mass abuse takes a lot more effort than just one scammer doing one dirty trade. And the more real traders use it, the harder it becomes for a small group to meaningfully distort the signal.

As for TornExchange and W3B: yes, they do have reputation systems, but those mainly help on the seller side. They don’t really solve the buyer-side problem, and they also don’t help much with players who don’t run active market listings there at all but still use trades to scam, bait, or mug. That’s one of the main gaps I wanted to cover here.

Also, being able to see someone’s reputation directly on their profile page and right there in the live trade window is, in my opinion, far more useful than having to rely on separate outside tools before every deal.

And yes, being careful with large amounts of cash is always smart — but “self-hospitalize every time” is more of a survival workaround than an actual reputation solution. This is meant to help traders identify patterns before the dirty trade happens in the first place.

If you’ve got ideas to make abuse even harder, I’d genuinely love to hear them.

This gets downvoted for what? 

I have the feeling that it hit the nerve of certain folks who want to stay in the shadows.

the reason is i mean people can group up and downvote someone who is actually honest and upvote themselves and pay others to vote others either up or down so very abusable in my eyes but the idea is there i am not criticizing it it just people find ways to abuse things :(

"right now there really isn’t a better practical signal, so traders are mostly dealing blind" 

the 16 enemies and 4 friends didn't tip u off on the first guy? genuinely curious. I assumed everyone checked friend/enemy ratios before trading. 

"you just need to register on my site which requires full access API, and pls dont read my non existent ToS in which i describe what i do with the keys"

man people cant keep getting away with this shit

"This script requires a public Torn API key" followed by what the key is used for...

[The] ToS with the information above needs to be clearly and visibly stated in any place where user is providing their API key in the table format highlighted above.

Source: Torn API

I'm aware, but saying it's a full API key and nonexistent ToS is just untrue.

Thanks for the feedback — and also for proving, quite loudly, that this topic touched a nerve.

A few things need to be made clear:

1) This script uses a public Torn API key, not a full access key.
There is no hidden registration system on my site, no secret full-key requirement, and no account creation flow. The key is only used to identify the viewer, identify the target being viewed or traded with, and show the correct reputation in context.

So the claims about “full access API” and “non-existent ToS” are simply false.
That said, the point about making the key usage / ToS information more clearly and visibly stated anywhere the key is mentioned is fair, and I will improve that.

2) “Just check friends and enemies” is not a real solution on its own.
Yes, sometimes that helps — but a lot of newer players do not pay attention to those numbers, some people go straight into the trade page without checking much at all, and friend/enemy counts can also be misleading or manipulated. That was one of the main reasons I wrote this in the first place.

3) No, I’m not pretending any community reputation system is abuse-proof.
But right now traders often have almost no practical signal at all. This at least gives people something visible and immediate, directly on profile pages and in the live trade window. I also already tried to reduce abuse by limiting it to one vote per player per target, allowing vote changes/removal instead of spam, and blocking self-voting.

And of course, as always, when someone tries to build something useful, half the crowd suddenly shows up not to improve it, not to contribute, not to help make it stronger — but to enthusiastically trip over themselves finding reasons why it shouldn’t exist. That part is almost tradition at this point.

It’s funny how some people never seem to have the time or energy to build anything helpful, but somehow always have unlimited stamina for throwing rocks at the people who do. And unsurprisingly, that kind of reaction tends to come most strongly from exactly the sort of people who are very comfortable with traders staying blind.

Let’s also be honest: this thread has very obviously attracted the attention of the exact kind of people it was meant to make uncomfortable. The downvotes, the noise, and the attempts to muddy the waters are not exactly a strong argument against the tool — if anything, they are a pretty good advertisement for why it exists.

So no, I’m not claiming perfection. I’m claiming usefulness.
And if people have real ideas to improve transparency or make abuse harder, I’m happy to hear them.

This script is secretly tracking your $$ on hand so he can mug you!!

Ah yes, of course — Dsla [2807954], resident professor of made-up cybersecurity, please, for the benefit of the room, explain how a public Torn API key is supposed to reveal another player’s cash on hand.

Because this theory would be a lot more impressive if the script actually asked for a limited or full key — but it doesn’t. It does not ask for a limited key, does not ask for a full access key, and does not have some magical secret tunnel into private account data. It uses a public key.

Public keys are used by plenty of Torn tools for features based on public data, while the more sensitive stuff is tied to higher access levels. So before people start confidently inventing fantasy security disasters, it might help to first understand the difference between public access and private account data. Otherwise this stops being a “security concern” and just becomes another man talking very loudly about something he clearly never bothered to understand.

Ghost565

What a horrible thing this is then! how do we stop him?!

beside the point, if you don't bother self hosping, i don't think you would bother installing scripts, upvoting and downvoting

and SHAT is very trustworthy bunch

Be careful using this script!! That’s how others got banned for using UNSAFE and ILLEGAL scripts!! Do your own research before using this unsafe script!

I have a lot of issues when a script sends an api key somewhere.. if you want to register a key onto a script that will be used remotely the registration should be on that site with a clear API Key Policy

im all good with scripts that use api keys LOCALLY, this one sends it to a server.. so registering the api on the script itself without any acknowledgment of its use is risky!

Dude, do you ever write your own text? Yikes.

On-topic: Torn already has a "rating" system built into the base game. It's the Friends/Enemies list. Check the enemy count on anyone who wants something from you, and you will know how suspicious to be.