![warning-alert-sign.jpg](https://steemitimages.com/DQmYLUuoYesEjMoFpfUh4DU8cQ2y2EaeM4espaX4ELJ7mZN/warning-alert-sign.jpg) *(Update at bottom)* Earlier tonight, on my first working use of SteemPress, I discovered that the plugin developers @howo and @fredrikaa hardcoded themselves a 10% cut of the rewards from my post. Each gets 5% of the reward of the post. Setting aside the absurdly huge cut they're taking, the more disturbing aspect is they have not mentioned this ten percent haircut anywhere that I've been able to find. It's not mentioned in their posts on Steemit, the SteemPress plugin information, or the github repo. Go look for yourself, if you'd like: _Steemit Posts_ [Introducing SteemPress beta, a wordpress plugin for steem](https://steemit.com/utopian-io/@howo/introducing-steempress-beta-a-wordpress-plugin-for-steem) [Steempress developer update #1](https://steemit.com/utopian-io/@howo/steempress-developer-update-1)---([Archived](http://archive.is/f7Vs0)) _Third Party Sites_ [The SteemPress plugin page at Wordpress](https://wordpress.org/plugins/steempress/)---([Archived](http://archive.is/RmhX5)) [The Github repository](https://github.com/drov0/steempress)---([Archived](http://archive.is/zCHer)) Nor do I find any reference to a ten percent cut doing various searches through DuckDuckGo. I think I've done a sufficiently thorough search to conclude that it simply is not mentioned anywhere, not even in the plugin code if you want to dig through that. **Instead**, I first found out about it when I made a test post through the plugin and saw something new pop up on my steemd page: ![Steemd page for @jd-alden](https://roughcoat.net/steempress/steemdpage-crop.png) I watch my account on Steemd because it's easier to see upvotes and comments there, and I'd never seen that note before. Beneficiaries? I've never set anyone as a beneficiary of my posts. I have no reason to. Didn't even know I could. So what does that mean? The total weight of rewards in a Steemit post, as Steem currently works, is 10,000. That's the number set in the Steem config file if you want to dig it up yourself. So each 100 points is 1% of the reward. Each of these developers is getting 500 points of the reward weight, or 5% each. See below: ![Parable post advanced info screenshot](https://roughcoat.net/steempress/parable-smallcrop.png) You can see the reward_weight at the top of the image, that's the 10,000 total. And you can see the 500 each developer has gifted himself from my work. The posts I've submitted through Steemit alone look like this: ![Baneful post advanced info screenshot](https://roughcoat.net/steempress/baneful-smallcrop.png) As you can see, the beneficiaries array is empty on a normal post. Because, again, I've never set beneficiaries and I didn't even know it was an option until today. You can see the information about the post I posted through SteemPress [here](https://steemd.com/creativity/@jd-alden/theparableofthepotteryclass-oyuhouxv4o), and an example of a normal post [here](https://steemd.com/fiction/@jd-alden/a-baneful-bequest-part-6-of-6). Just click on the "advanced mode" link on the top right to expand the data. But maybe it's something I can turn off, or adjust. Maybe it's some option that's set in the SteemPress settings? Nope, there's no option to do that: ![Steempress Settings image](https://roughcoat.net/steempress/steempress-settings.jpg) What about in the plugin code? Is it some careless remnant from development that was left turned on when the code shipped? I spent some time digging through the plugin code and it's clearly not a setting leftover in there. No, the beneficiaries are being set on a black box server controlled by the developers. ![Steempress dev comment confirming middleman server](https://roughcoat.net/steempress/steempress-dev-comment-blackbox.jpg) It's clear the problem is as I originally stated. The SteemPress devs have cut themselves in on the rewards for the posts made through their plugin, and you have no choice in the matter. Nor did they ever mention anything about taking a ten percent cut in any of their posts or documentation. **This is incredibly dishonest.** Whatever you might think about third party developers taking a (huge) cut of your rewards for using their service, they absolutely have to be up front about it. And the SteemPress developers have failed horribly in that respect. They have asked you to trust them with your private key, and immediately betrayed that trust. **Further**, without being able to look at their black box code, we have no idea if they're even handling the keys securely. Your private posting key is very important, and should be well protected. Even if someone can't steal your money with it directly, they can flood your account with spam posts, upvote whatever they want, and generally wreak havoc. Do you want someone posting pornography or gore on your family-friendly account, or worse, posting illegal content? And will @howo or @fredrikaa be tempted to use the posting keys to upvote themselves a huge reward, as we *just* [saw Streemian do a few days ago to significant outcry](https://steemit.com/streemian/@chainsquad/negotiations-succession-of-streemian-com-reactivation)? There's absolutely no technical barrier to the SteemPress crew maintaining a database of usernames and private posting keys, ready to be stolen or abused. Given the dishonesty so far, I'm not willing to take the chance by continuing to use their service even if they dramatically reduce their cut and *start being honest*. I would've probably been okay with 1% total if they were up front about it, but that ship has sailed. I already changed my keys and uninstalled SteemPress. It's up to you whether you want to do the same. ____ **UPDATE:** The SteemPress developers put out a new post a few hours ago (1:15 PM EST, Jan 5, 2018) where they finally mentioned that they were taking a cut. You can see it here: [SteemPress now available in the WordPress.org plugin store! – Introducing V1.0](https://steemit.com/steem/@fredrikaa/steempress-now-available-in-the-wordpress-org-plugin-store-introducing-v1-0) My opinion has not changed. You get one chance to be truly honest, and if you only decide to tell the truth **after** someone calls you on it, you don't get credit from me. Especially if you don't even acknowledge your screw up.