According to
@Kyronix during the 20th party, this bug doesn't exist (and they "Tested the pancakes out of it.")
There was more said about it, but I can't repeat it due to Stratics rules.
I can see where he is coming from. A couple of thoughts...
First, I doubt the notion of it being EC exclusive on either the scammer/victim side. For the victim side, I can't see why a CC user shouldn't be a victim to this as well. From the scammer point, if the EC can do it, it is only a matter of figuring out which network packets to send and they would be able to do it with whatever their tool of choice is. Would be very glad if someone corrects me and could tell why this might not be an CC issue.
Second, it's hard to call it a bug since it has always been possible that the other party changes terms and hits accept just a millisecond before you hit accept while you don't even notice. Only that people start automating it in the EC made this potential issue surface for worse now.
It's more like a gamble of the scammer, and the fact that a computer can place his bet (They betting on hitting the small time window between you last checking the terms and then going over to hitting accept) only worsens it, but a malicious human could have pulled the same trick of manually before, likely with less probability of success due to us humans being too slow.
You can't even do much about it, since at one point you have to hit that little checkbox on your side, and whenever the counterparty sneaks a last minute (read: miliseconds) change in without your notice, you gonna accept that. A pure gamble on their side.
With that thought, I think a proper countermeasure should be to add a
grace period whenever one side changes the terms of the trade. In the grace period you can't hit accept on your side, so you are forced to think about it twice.
In EC this can be easily done by blocking your checkbox for like 3 seconds every time the terms of the trade change. The scammer can change his amount all he wants, but each time he resets the 3 second grace period on your side, so your client blocks the checkbox and puts down a little timer like "Attention, terms of trade changed, please reconsider this trade. Grace period ends in 3 seconds...". It would be fairly easy to put that together in a mod.
For CC it would still take the Devs, but maybe my assumption from my first point is wrong anyway?!
Anyway, while I see where they are coming from when they say "There is no bug", it is also way too easy to just blame this on the players. No player is a superhuman who can check the terms and hit the checkbox within the same millisecond. Yes, it takes even the youngest and fittest and most aware of us like half or quarter a second. That just needs to be accounted for IMO.