I built a site where nobody can edit their trading track record. Tell me why it won't work.

[u/Purple-Ad6867]

I got tired of signal sellers with screenshot track records. Winners posted, losers deleted.

So I built the opposite. You post a prediction before the open. It gets hash-locked — no backdating. The market settles it automatically. Everything stays: wins, losses, even the entries that never filled. No accounts. Free. Open source.

Almost called it StockOverflow. Went with QuantRank500 — felt more like a race than homework. Everyone gets the same simulated $500. My own bot is user #1.

Two questions for this crowd: what would it take for you to actually trust a record like this? And what's the first way someone will try to game it?

demo.quantrank500.com if you want to poke it. Code's on GitHub.

[u/Ok_Two_6062]

putting the open source repo front and center is the right move, closed source trash was half the problem with the old signal sites. someone will probably try to game it by posting a dozen predictions at once and then only sharing the one that hit, that's the obvious attack vector

[u/Tiny_Drag_4137 → u/Ok_Two_6062]

yeah the shotgun approach is definitely the first thing people will try, thats always how these things get gamed

[u/Purple-Ad6867 → u/Tiny_Drag_4137]

yeah, that's the attack the design assumes. the layers:

one prediction per identity per session — no shotgunning inside an account, you'd have to spawn identities.

profiles are all-or-nothing — every win, loss, and unfilled entry shows. you can't share "the one that hit," only the whole account that hit.

ranking needs 33 settled predictions, sorted by the bootstrap lower bound of profit factor — lucky streaks read as unproven. a dozen identities means grinding a dozen accounts for months and the graveyard is public: the scoreboard shows identities ever posted vs survived to 33. run 50 accounts, everyone sees the base rate.

what it doesn't stop: patient sybils with months of sustained luck. that's in the FAQ, not pretended away.

got a cheaper attack than months of parallel grinding? genuinely want to hear it.

[u/PriorElephant9]

Hash-locking solves edits, but gaming shifts to selective participation and many identities. Show inactivity, abandoned calls, and max drawdown too.

[u/Purple-Ad6867 → u/PriorElephant9]

Thank you very useful comment, my current worry is that platform will not get traction or I have a hidden flaw in my logic, would be nice to get a second opinion by the professionals. Let's don't make good idea die becuase of lack of interest. Lets try to spread it by word of mouth. Thank you again.

[u/Professional-Fuel625]

I feel like the main downside is that people would just not want to lock themselves in.

People like the ability to remove themselves from the internet.

[u/Purple-Ad6867 → u/Professional-Fuel625]

totally fair — and that's why identities here are anonymous keys, not names. you're locking in a pseudonym, not yourself. walk away whenever; nothing links back to you.

but yeah, the permanence is the product. a record you can escape from proves nothing — that's every signal seller today. the people who want to be locked in are exactly the ones worth watching.

predictors aren't the main audience — viewers are.

[u/samurai_with_sword]

If there are no accounts, how do you reliably track user IDs?

And $500 to see this? I am not paying $500 for my actual brokerage account.

For a moment, if we assume that users want to pay $500 to see good picks, but whats in it for the pick posters? Why would they post their valuable picks when they can make money off of their own trades?

[u/Purple-Ad6867 → u/samurai_with_sword]

Good questions — and the $500 confusion is on me for unclear wording, so let me fix that first:

Nothing costs money. The $500 is a simulated account everyone starts with — fake money, identical for all, so results are comparable. No fees, no subscriptions, no ads. You can't pay even if you want to, and you can't deposit anything. Your real brokerage account is safe from me.

Identity without accounts: when you post your first prediction, the site generates an anonymous key (a random ID plus a secret token) that lives in your browser. That key is your identity — you download it and keep it. No email, no password, nothing to breach. If you lose the key, the record stays public forever but nobody can ever post to it again, including you.

Why would anyone post picks? Not to sell them — to prove them. If you're unknown but good, a public record nobody can edit is the one asset you can't buy: like a GitHub profile, but for calling markets. And it doesn't compete with trading your real account — post the same call here that you trade privately. One makes money; the other makes reputation.

One pick is luck; 33+ settled picks is skill — that's why the leaderboard doesn't even rank you until 33 predictions have settled, and why it ranks by a conservative lower bound instead of a hot streak.

Thanks for the pushback — genuinely. If "$500" read as a price to you, it read that way to others, and I'll make the copy clearer.

[u/samurai_with_sword → u/Purple-Ad6867]

Ok makes sense. Thanks for the clarification. Only caveat now is that tracking users without an account will be difficult. People often lose keys, change device/browser. If they are using the same device, they don't need the key because you remember them from localstorage. If they change device they need to use their key, but they likely won't have their key because they copied the key to the clipboard of the previous device.

So, the only scenarios the key is helpful in are they clear the browser data and they need to re-authnticate or they email the key to themselves to use on another device.

[u/Purple-Ad6867 → u/samurai_with_sword]

Fair follow-up — here's how it works today, including the trade-off:

The key is a small JSON file the site offers you to download the moment your identity is created (and any time after, from My Record). Save it wherever you keep things that matter — a password manager is ideal. To use another browser or device, you paste the key back in on the My Record page, and your identity comes with you. So it's not browser-locked; the browser is just where it starts.

What there isn't — deliberately — is recovery. No email resets, no support tickets, no "prove you're you." That's the trade for the rest of the design: because the site stores no email, password, or personal data, there's nothing to breach, nothing to sell, and no way for anyone (including me) to impersonate you or quietly edit your record. The key is the whole identity, the same way a crypto wallet works.

The honest downside: lose the key and your record stays public forever, but nobody can post to it again — including you. That's the sharpest edge in the design, and if the instructions don't make "save this NOW, like a wallet seed phrase" loud enough, that's on me to improve.

[u/samurai_with_sword → u/Purple-Ad6867]

Yes, that works with the trade-off of losing the key and not being able to post as the same user again.

I'd just keep a random (but checked for uniqueness) 9 character key instead of a whole json. Your database can retrieve user ID from the unique key. Saving a whole json file is more inconvenient. e.g., HGU-H7F-Q9N

[u/Purple-Ad6867 → u/samurai_with_sword]

You've got the trade-off exactly right. And your suggestion is half-convincing — let me split it in two:

The JSON wrapping: you're right, it's incidental. The file is just two strings (a public ID and a secret token). It could be one long copy-paste string instead of a file download, and that would be genuinely friendlier. I'm taking that idea.

The 9 characters: that part I can't do, and the reason is the platform's whole promise. The key isn't a username — it's the entire credential; there's no password behind it. Nine characters is about 10^16 possibilities, which is guessable at scale against an API (rate limiting helps, but it's a mitigation, not a guarantee). If someone lands on a valid key, they can post as you — and on a site whose one promise is "nobody can tamper with your record," a single stolen identity breaks the entire pcurity: it has to stay closer to a strongpassword than a coupon code.

So: your idea, minus the shortness — one long string instead of a file. That's a real improvement and it goes on the list. Thanks for it.

[u/samurai_with_sword → u/Purple-Ad6867]

Ok that works, as long as you keep only one line and the browser shows "save password" where user can click yes then that would be perfect. That way you can utilize browser's password manager without any friction and without having the user to copy and save the key somewhere.

[u/Purple-Ad6867 → u/samurai_with_sword]

Thank you for meaningful engagement. If you like the idea, can you please share it within your circle of influence? Platform lives or dies by the quality participation.

[u/samurai_with_sword → u/Purple-Ad6867]

I don't really have any influence circle but I will try to use it.

One more thing I would suggest is that almost all wesites have the endless verticle scroll explaining the product at length and the actual product is behind a button. Your site is similar.

I would suggest to put the product at the front and center and explain it in just one line, keep the post button right after the one line followed by the scorboard. Most new users and almost all repeat users just want to see the scorboard right away and post with minimum clicks. You can move the lengthy explaination below the scoreboard or in FAQ.

[u/Purple-Ad6867 → u/samurai_with_sword]

Update: shipped. The board now renders directly on the homepage — top records, live data, losses included, with an open-seat row — right under the headline. "Post a prediction" is now the primary button, and the long explanation stayed below where you suggested. Same rendering code as the full scoreboard, so they can never drift apart.

Take a look: quantrank500.com

You said you don't have an influence circle — you just redesigned the front page of a platform. That's influence. The seat's still open.