Abusing Steemit, creating multiple & potentially abusive accounts, is currently possible.
There are two ways to sign up on Steemit.com, using Facebook (FB) or Reddit. Reddit requires positive Reddit comment karma to signup but Facebook requires no baseline checks, encouraging spam or abusive users.
The Facebook abuse: Creating an account on Facebook requires an email address & email confirmation (verifies email address only), phone authentication can be skipped and an active Facebook account created. Once created can be used to sign up on Steemit. 'It’s that simple which is the inherent problem!'
Note: If you have used FB authentication to sign up on Steemit previously, all it takes is to simply switch internet browsers and log in via that browser using the new FB credentials, to prevent the below error;
Proposed fix: Include multiple authentication levels using Facebook signup, examples below;
@ned
@dan