XPONZ Revisited Part 2 – Real Use Cases Solving Real Problems15 min read
XPONZ project solving identity theft on social media and the real world.
On the first part of this review, we have revisited the XPONZ newly updated website and they have done some impressive updates. You can read the first part of article here, XPONZ Revisited Part 1- Positive Outlook Moving Forward.
This part 2 of the review we will be focusing on the use cases of this XPONZ blockchain. We will have a look at what they are claiming. The XPONZ blockchain can be used to add a layer of security for your social media accounts and also with certificates and identifications.
We all know that there are many cases about stolen identity in Facebook and other social media like twitter, etc. There are many incidents where someone in Facebook created an account and copy someone else profile pictures, images and other credentials pretending to be that person.
The XPONZ project are claiming to have figured out how to add another layer of security on your Facebook account. No one is stopping someone copying and pretending to be you on Facebook but this XPONZ project have added a feature where you can use to double check if that account you are dealing with on Facebook is real and not a fraud account.
The other security feature that the XPONZ team are claiming is that they have added a fool proof security in the issuance of certificates and identifications. They are claiming that you can issue certificates and identifications on the XPONZ platform and no one can tamper it or manipulate it because it is recorded and unique in the XPONZ blockchain.
These are their claims and are very good because having another layer of security is a lot better than nothing at all.
What I will try to do now is to put that claims to the test. This is not to discredit the XPONZ project but to see how fraudster will try to get around this security. Also the XPONZ team might see this and might put another layer of security to stop any loop holes from being exploited.
Faking Facebook Account
We will start with fraud Facebook accounts. Cliff Howard the founder of XPONZ project said that you can include your XPONZ wallet address and your account name in your Facebook account. To verify if that is the real account you can match the credentials between that Facebook account and the said XPONZ account.
What I have done was created a fake Cliff Howard Facebook account and let us see if you, the readers, can see the differences and judge if XPONZ does add another layer of security to your Facebook accounts.
There are 2 images below, one is a fake Cliff Howard Facebook account.
According to Cliff Howard, if you match the XPONZ wallet id that is shown in his Facebook intro to the actual XPONZ wallet, you should be able to confirm if that Facebook account you are looking at is the real Cliff Howard Facebook account.
Now let us take a look at his XPONZ wallet address XPZ-XFND-A5ML-6JWP-9ZWAV and match his credentials. He said the main credential to look for or to match is the “Alias” and the “URL address”.
The image below is the real Cliff Howard XPONZ account. Now have a look at that and match it with the images above and see if you managed to picked the real Cliff Howard Facebook account.
So how did you go? Did you manage to spot the main credentials that you need to look for? If you didn’t, I have circled the things that you need to check shown on the images below.
It is great right? Well every criminals will always look for a loop holes that they can exploit and that is exactly what I have done on the next experiment.
Let us say you have never encountered Cliff Howard before and you have never seen his original Facebook account. Then all of a sudden a Cliff Howard messaged you and the 2 of you went on a business deal.
Now you want to check if you are dealing with the real Cliff Howard by taking his XPONZ wallet address that is shown on his Facebook intro, XPZ-S3NJ-PN9W-WUF8-FBRUC and match it with the credentials on that XPONZ account.
As you can see everything matches, the wallet address XPZ-S3NJ-PN9W-WUF8-FBRUC matches. The “Alias” CIiffHoward also matches and most importantly as Cliff Howard said the “URL” matches.
So what do you think? Did I manage to fool you? If I used that in real life, do you think you will fall for it? Everything matches right, from the URL, Alias and the wallet address.
All the examples here can be accessed on line.
The fake Cliff Howard Facebook account is this https://www.facebook.com/cliff.howard.9847
The fake Cliff Howard XPONZ account can be seen here http://wallet-xponz.com:8900/index.html using this wallet address XPZ-S3NJ-PN9W-WUF8-FBRUC
The other use case that the XPONZ team recently brought up is the protection of an ID.
On the example that the XPONZ team made, the Judo Organization had its members recorded on the XPONZ blocchain platform. Everything can be traced within the blockchain. If you look at the example images below, everything have its corresponding XPONZ blockchain ID numbers. From the personnel wallet address to the individual transaction ID.
If you trace all that numbers from the images above on the XPONZ blockchain, it does always point to the correct person and to the correct organization that issued that ID.
Now with all that numbers, it will be very hard to create a fictitious Judo Organization member ID because it would be impossible to get the same wallet address to issue that ID. Unless of course you are able to hack that wallet then you can issue that ID.
Hacking that pass phrase would be very hard. So what would a criminal do to be able to get him/her a Judo Organization Member ID?
Let us say a that the JUDO ORGANIZATION have a very grand party/get together/ meeting and one of their agenda is very important secret. Now an enemy criminal NINJA want to infiltrate that meeting but the only way that NINJA can get in is a valid Judo Organization Member ID. This NINJA knows that all the ID will be matched against the XPONZ blockchain.
The NINJA sprung into action carrying out his/her criminal activity starting by kidnapping one of the Judo Organization members and manipulating his/her Judo Organization Member ID.
This is as shown below.
Like I said before this review is not to discredit the XPONZ project. I want all that securities specially with the social media problem.
All the loop holes that I mentioned (if they are loop holes) are there to point out that their could be more problems that needs attention.
Maybe the XPONZ team can think of more security features to be added to prevent those loop holes being exploited.
I just want to thank the founder of XPONZ project Cliff Howard for donating his 5 xponz to me. Without that, I would not be able to do the experiments that I did for this review.
Watch Out For Part 3
This security features that the XPONZ team brought out are pretty good and very needed. If it can be polished it will be mass adopted.
This is a great start coming from a very small blockchain project. I have not heard or read any projects that are trying to solve this type of problem especially with the fake accounts on social media.
Part 3 will be covering the business side of this XPONZ project and how far it could get.
I hope you enjoyed reading this part 2 of the review and be eagerly waiting for the part 3.
XPONZ Video Tutorials Related To The Review
The videos are mainly in Tagalog but you will see how the xponz team are implementing layer of securities to your Facebook account and to your organization member ID’s.
The article above is based on my own experiences and my own research. I don’t claim it to be 100% accurate.
I am not a financial adviser. The article above is just my own opinion. Please do your own research.
Do You Like What You’ve Read?
Smash Up That LIKE BUTTON