JEVN Exploit!

I agree Ron, I am guilty and I take responsibility for my actions, I have repaid/returned the items that I have taken illegaly (*NOT* the ones that I have paid for). I'm not going to point the finger because I took some items, as well as others, and I decided to step up and tell others about this exploit. I could have stayed in the sewers and let more people take items, but I did not.

i think now is a good time to fake your own death

Ok...

Ok, i admit i took L$500 linden worth of clothing from a vendor, but, i have payed her back, dont beleive me, IM the creator of "Self Expressions", now nim, If you did what you said in JEVN chat, please post how much and who we can contact to prove you have, oh wait, i dont think you can... hmm...

Im sorry for what i caused, but I have only used this exploit on one person (person listed about) and for 2 outfits that come out to L$500. Im sorry I did, but i was like any person with a new toy, and thus refunded the creator, also, as previously stated, I have not used this exploit in over 3-4 weeks, im sorry to all that i sold it, but i tried to fix everything to the best of my ability after i did, and succedded in just that, the exploit was contained and problem solved untill minrod wanted it back and I refused, and dont say you wanted it back to "show" people about it, why would i trust you after you used it as you did?

Why would I still use it even after I was ARd? That's just asking to get banned. And Carlos, we were both in the wrong, specifically me. I posted this to warn people about what was going on, and I know Esmay didn't want this to happen, but I knew people had to know.

Okay, just so that I have this clear in my head:

1. JEVN is a vendor product that is used by many, many, merchants in SL, and I would assume a large quantity of $L (hence $US) worth of transactions.
   
2. JEVN has no authentication, security, encryption, or anything else to protect these merchant's assets
   
3. JEVN's vendor servers can be compromised by knowing the servers UUID
   
4. People are not concerned with the issue, thinking they can just "hide" the vendors from view and ignore the issue. Our of sight out of mind, except for the fact you don't need to see an object to get it's UUID. (although it is easier if you can)
   
5. JEVN's creator was informed that their vendor was compromised, yet did not react to patch in a fix to this system
   
6. JEVN's creator did not warn her customers of this flaw so they could at least minimalize their potential losses.
   
7. I don't care about the rest of the drama.
   

Am I missing something, or is this accurate?

Looks all accurate to me.

Yes, JEVN was comprimised...

The reason she hasent patched it is because she wanted to have compatiablity throughout the JEVN 2 system, she is currently in the works for a new system that includes encryption and she wanted to hold off till its release to announce this because of just this reason, mass hysteria.

Nim: youve got to understand that by posting this, esmay is going to loose alot of profit and credibility, she purposly held off the announcment untill the new system was complete so that this wouldent happen. So, in turn, I think you owe esmay an appoligy for this post. Threw the past few weeks ive worked with esmay on this situation, i felt bad when i sold it, went you gave it back, i thought everything was over and esmay would be happy, but just because i wouldent give it back to you, you post this.... thats absurd, you have now not only stolen countless L$ of items from vendors, but in turn have created hundreds on L$ loss to esmay, untill you can prove you have indeed payed all of these people back and it veified threw the people, i am still accusing you of not repaying their creator.... You acted childish, i thought that this was all over the moment i got it back from you, but you had to prove you dont care about anyone including esmay, also, i know you were ARed, but you have an alt, and you have displayed your not afraid to use her...

I am stunned!

I'll give +5 bonus points to the first one who can break the posting rules thus far obeyed in this thread

"im sorry to all that i sold it,"

that was a badly worded statement, i dident mean i sold it to alot of people but ment im sorry to all the jevn users that i sold it

This coming from a person who said that only three ppl have it but that says he is being truthful. Sorry for ALL you sold it to? Again I think we need a list of all who bought this from you Carlos, adn it's obviously more than the three you stated. I feel very sorry for all the creators who wasted time making things for you to steal. and I feel sorry for all those who paid 2k for the ssytem when it was exploitable wihtout knowledge, but most of all I feel sorry for Esmay....for trutsting someone who so obviously cannot be trusted and is FAR from truthful about his crimes.

Carlos, I'd say you owe esmay and a lot of other folks a healthy chunk of L's.

Then you should say what you mean. Or was that "just" a Freudian slip? By your own words you have me wondering if I should continue using Esmay's system. I'd hand you a shovel to keep digging your hole with but I'm afraid you'd end up burying Emsay along with yourself and nimrod. *sighs* Two more people to add to the list of those I don't trust. Meaning you and nimrod.

We have no way of knowing how many you sold it to. And personally, I think the mis-statement was closer to the truth.

Would it make you all feel better if i posted the database of all my trasactions?
And if you dont think thats crediable, i give LL full permissions to post my trasactions

that could be entertaining

do that

They won't, so what's the point?

he can

i wanna see what he bought and stole

and you can post yours too nimrod

Sure, but I could just edit it to my liking without you knowing the difference. And LL sure isn't going to waste their time on this by posting one of our logs, there's no real way to tell if the logs are true or not.

Well, I'd say he doesn't owe anyone anything beyond an apology. Beyond doing something stupid, it really looks like most of the damage that either have caused has been fixed to some degree.

Are you also going to include all emails and attachments with that? Who said inside SL is the only way to sell a script or just give it away? The point is none of us has no way of knowing WITHOUT DOUBT that you are telling us the truth. You have no way to prove it either. What we can see for ourselves is YOU created something that allows Esmay's system to be hacked and YOU let others have it KNOWINGLY. Dmitri has a point about creating something like this emulator for only one purpose and that purpose being to rip people off. You created it knowing that if it got into the wrong hands what would happen. You also let at least 2 other people other than Esmay have the emulator. How could we possibly trust you knowing this? For all we know you could have sent the script for the emulator to everyone on your email list. So that would make any info coming from LL moot. Maybe I should change my mind about that shovel.

well since hes posting his, you gotta post yours. what are you hiding?

First of all, I co-own a casino and it will show what/who bet an amount, so even if I edited that out, it won't say what items there were. Plus I haven't seen his yet.

so you are editing your logs?

and you run a casino and you were robbing people?

go on...