Pay Pal

Yeah, this is totally coincidence. PayPal accts are brute forced daily. Expecially if your email is made up of dictionary words.

And I wouldn't worry about LL holding onto info, there is tons more of your more personal information in servers less secure then that. Next time your car breaks down for a fault that was the builders, I will blame you because well.. Thats what we should do right? Blame LL for a hole in the 3rd party application?

Welcome to PayPal. This is why they have such a bad name. They suspend accounts at the drop of a hat.

Oh I was speaking about how Second life doesn't wipe your paypal info from their database and your credit card info if you cancel and

Shiney, sorry but LL needs to work on issues and if we all just sit here and act like there are no problems at all, what will that solve?

Do you agree that your credit card and paypal information should remain in a database of a MMO if you cancelled your account?? Even if you cancelled years ago? Wouldn't you want that to be changed or would you just act like everything is okay on their end and it's everyone else's fault?

What about those people that canceled and no longer even pay attention to SL/LL anymore? I mean really they probably dont even have a clue this has happened, becuase IMO im almost sure LL didnt notify unactive members jst the active ones.

I was informed by PayPal that the intrusion originated in Russia as well. Since I only use this account to buy and sell lindens from a third party dealer and the only connection to LL is the same email address, I would assume it is not a coincidence, particularly with the timing of the security breach at LL. BTW, my email address, even parts of it, cannot be found in the dictionary.

I probably am not having the PayPal problems April is having only because there is no cc associated with this account and this account is not associated directly with LL.

Sorry to hear about the trouble you're having April.

I know! It's going to be even harder for them because they won't even know what hit them. If LL did contact all 600,000+ users cancelled and not, who knows if their email addresses changed too.

When I deal with Paypal Issues I call them directly...

888-221-1161

Thats the # if you are in the U.S. I'm not sure if they have an international #. And of course they arent open on the weekends The customer service people I have dealt with have all been very helpful.

LL is not to blame for the hole in the third party software. What they are to blame for is lax security that allowed a piece of Wiki software to be on the same server that had access to user account information. That is their fault - it is a bad design from a security standpoint, and this situation shows why. Any web applications that do not need access to the customer database should not be on the same web server or even network connected to a server that has access to minimize exposure.

Most businesses are required to keep the records for six years. At least thats how it is here in Canada. So I have absolutly no problem with it. I'd more worry about the users who use the same password on the SL account as they do around the web. Now that is a bigger risk then this tiny db leak was.

Well, you have to expose it to the wiki server at some point to share authenication information.

Hey April, did you have the same password between SL and PayPal?

Not true - there are all kinds of ways to achieve that without exposing the wiki server to the full customer database, including payment information. That has nothing to do with authentication.

There is a difference.

A.) If a company keeps such information on records, it usually isn't in the same online database as active accounts. It's kept around for a long time but it just isnt in the same database.

If you cancel a service, they do not keep your credit card information on the same database where all active accounts are.

B.) What records do you mean and are you referring to all businesses? I don't think that is the case in America and not all businesses are the same. It would make sense for a hospital to keep records of up to six years but not a MMO where you as a customer decides you don't want to be apart of that service anymore and they have no use for holding onto your information and puts you as a client at risk.

Sorry but just because you like Second Life alot doesn't mean that you should be as blinded by the stars in your eyes as little teens are with their pop idols.

If someone cancels their account, it should be just that. Cancelled. There is no need for an online service to keep those details stored in an online database when you as a customer want nothing to do with the game.

No two different passwords

There should be two different passwords. One to login world and one for your account information.

"Sorry but just because you like Second Life alot doesn't mean that you should be as blinded by the stars in your eyes as little teens are with their pop idols"

lol. SL pisses me off with its lag, i'm very disappointed with its performance lately. I am not a SL appologist.

"If you cancel a service, they do not keep your credit card information on the same database where all active accounts are."

Nor does LL. The credit card info is in a seperate db.

No that is what the forum states but the blog states otherwise.

There's a whole lot of cross-talk on the issue. I'd be cautious and contact my bank or cc provider and let them know whats going on.