Welcome to the Second Life Forums Archive

These forums are CLOSED. Please visit the new forums HERE

JEVN Exploit!

nimrod Yaffle
Cavemen are people too...
Join date: 15 Nov 2004
Posts: 3,146
12-13-2005 20:26
From: Mulch Ennui
it is jibber jabber foo!


Dmitri Polonsky
Registered User
Join date: 26 Aug 2005
Posts: 562
Back on topic...
12-13-2005 20:27
That being the potential losses throughg theft for which Carlos is responsible for. Since there is no way to predict losses in SL, the I would say that proof of sales of the device should be submitted to esmay along with an equal amount in L's to the total amount of sales of said device. Since the system was her's to begin with give her a double share of Carlos' take from sales of said device, then the rest split equally among all JEVN merchant/users. And I make note that the issue of recompense is being totally ignored by the eprson who created said theft device. He made money off OUR hard work and esmay's. I say let him pay.
Carlos Bakalava
Registered User
Join date: 13 Sep 2005
Posts: 15
12-13-2005 20:28
Nim... this is a PUBLIC forum, hes intitled to post, if you dident want him posting, you shouldent have posted... I dont care who wins.. i just want this damn thing resolved like it was not even 6 hours ago... no debating, no arguing, i just want this whole ordial over with so i can go on with my life, yes i made a very bad and very wrong desision, but, i am sorry, i have no money, i have only group land, and im backing down to a free account in 3 days since im leaving for basic on Jan 3rd... Im sorry to all I have hurt in making this, and im sorry one bad desision lead to this, ask any of my friends, i intended this to be a normal vendor when i finished it, and it has, ive already given out on vendor written of the code of this "emulator", I dident mean to be malicous, I just stumbled onto this hole... As I stated before was esmay held it off to stop this kind of publicity, I guess all i have is an apoligy to everyone, im sorry i made a stupid mistake...
Charissa Korvin
Registered User
Join date: 15 May 2005
Posts: 138
12-13-2005 20:30
From: Alondria LeFay
Okay, just so that I have this clear in my head:
  1. JEVN is a vendor product that is used by many, many, merchants in SL, and I would assume a large quantity of $L (hence $US) worth of transactions.
  2. JEVN has no authentication, security, encryption, or anything else to protect these merchant's assets
  3. JEVN's vendor servers can be compromised by knowing the servers UUID
  4. People are not concerned with the issue, thinking they can just "hide" the vendors from view and ignore the issue. Our of sight out of mind, except for the fact you don't need to see an object to get it's UUID. (although it is easier if you can)
  5. JEVN's creator was informed that their vendor was compromised, yet did not react to patch in a fix to this system
  6. JEVN's creator did not warn her customers of this flaw so they could at least minimalize their potential losses.
  7. I don't care about the rest of the drama.

Am I missing something, or is this accurate?


Also add the fact that the individuals responsibile for the systems performance sold an exploit of said system to a third party.

I hate to ask but how could the individual who sold the EXPLOIT NOT KNOW what the purchaser's intentions were with a dollar figure of 25K L???

If I'm reading this thread correctly then every single one of you is a crook and no one in SL with any shred of decency would do business with you or utilize any of your products again for their own sake.

I know I won't.
Dmitri Polonsky
Registered User
Join date: 26 Aug 2005
Posts: 562
12-13-2005 20:33
From: Carlos Bakalava
Nim... this is a PUBLIC forum, hes intitled to post, if you dident want him posting, you shouldent have posted... I dont care who wins.. i just want this damn thing resolved like it was not even 6 hours ago... no debating, no arguing, i just want this whole ordial over with so i can go on with my life, yes i made a very bad and very wrong desision, but, i am sorry, i have no money, i have only group land, and im backing down to a free account in 3 days since im leaving for basic on Jan 3rd... Im sorry to all I have hurt in making this, and im sorry one bad desision lead to this, ask any of my friends, i intended this to be a normal vendor when i finished it, and it has, ive already given out on vendor written of the code of this "emulator", I dident mean to be malicous, I just stumbled onto this hole... As I stated before was esmay held it off to stop this kind of publicity, I guess all i have is an apoligy to everyone, im sorry i made a stupid mistake...



Sorry doesn't cut it. What about the losses to esmay and the rest of us cause by a device you sold at 25k a whack. we all put work in our items and you put work into a device designed to, and USED to steal from ppl who worked hard. It's enver been resolved as you put it. There's the potential losses to each and ever one of us by this device being sold to no one knows how many ppl. Plus the damage to esmay's good name, thanks to her putting her trust in you. Again, I say you pay up. and at that kinda change for this theft device I ain't buyin that you're broke, unless you got one heck of a gambling habit.
Travis Lambert
White dog, red collar
Join date: 3 Jun 2004
Posts: 2,819
12-13-2005 20:34
Lots of drama in this thread. Normally I'd be keeping a wide berth.

The Shelter hosts free vendor spots for new residents to help them get started in SL.

Just taking a quick scan, quite a few of them have JEVN vendors.

I don't care who did what, but I'm assuming these folks need to be alerted.

Ugh :(
_____________________
------------------
The Shelter

The Shelter is a non-profit recreation center for new residents, and supporters of new residents. Our goal is to provide a positive & supportive social environment for those looking for one in our overwhelming world.
Mulch Ennui
15 Minutes are Over
Join date: 22 May 2005
Posts: 2,607
12-13-2005 20:42
From: Charissa Korvin

If I'm reading this thread correctly then every single one of you is a crook and no one in SL with any shred of decency would do business with you or utilize any of your products again for their own sake.
I know I won't.


i forgot what I was gonna say
_____________________
I have of late--but wherefore I know not--lost all my mirth, that this goodly frame, the earth, seems to me a sterile promontory, this most excellent canopy, the air, look you, this brave o'erhanging firmament, this majestical roof fretted with golden fire, why, it appears no other thing to me than a foul and pestilent congregation of vapours.

http://forums.secondcitizen.com/
Moss Talamasca
Serpent & Thistle
Join date: 20 Aug 2005
Posts: 367
12-13-2005 20:44
Damn.
Hands in the cookie jar.
Dmitri Polonsky
Registered User
Join date: 26 Aug 2005
Posts: 562
Well I do note...
12-13-2005 20:52
That Carlos has no answer on the thing about providing documentation of his sales of said device and since it's preying on OUR hard work adn esmay's, making it right. Except to say he's broke after selling the gadget for a huge amount of L's and saying he's gonna pull the old cut and run on us all. So much for his honesty and trustworthiness. I wonder how many alts he has to dish the money off to so he can seem broke?
Alondria LeFay
Registered User
Join date: 2 May 2003
Posts: 725
12-13-2005 21:03
From: Charissa Korvin
Also add the fact that the individuals responsibile for the systems performance sold an exploit of said system to a third party.

I hate to ask but how could the individual who sold the EXPLOIT NOT KNOW what the purchaser's intentions were with a dollar figure of 25K L???

If I'm reading this thread correctly then every single one of you is a crook and no one in SL with any shred of decency would do business with you or utilize any of your products again for their own sake.

I know I won't.


Mulch Ennui
15 Minutes are Over
Join date: 22 May 2005
Posts: 2,607
12-13-2005 21:10


.
_____________________
I have of late--but wherefore I know not--lost all my mirth, that this goodly frame, the earth, seems to me a sterile promontory, this most excellent canopy, the air, look you, this brave o'erhanging firmament, this majestical roof fretted with golden fire, why, it appears no other thing to me than a foul and pestilent congregation of vapours.

http://forums.secondcitizen.com/
Mulch Ennui
15 Minutes are Over
Join date: 22 May 2005
Posts: 2,607
12-13-2005 21:12
_____________________
I have of late--but wherefore I know not--lost all my mirth, that this goodly frame, the earth, seems to me a sterile promontory, this most excellent canopy, the air, look you, this brave o'erhanging firmament, this majestical roof fretted with golden fire, why, it appears no other thing to me than a foul and pestilent congregation of vapours.

http://forums.secondcitizen.com/
nimrod Yaffle
Cavemen are people too...
Join date: 15 Nov 2004
Posts: 3,146
12-13-2005 21:12
*shrug*
Zodiakos Absolute
With a a dash of lemon.
Join date: 6 Jun 2005
Posts: 282
12-13-2005 21:34
From: Dmitri Polonsky
That being the potential losses throughg theft for which Carlos is responsible for. Since there is no way to predict losses in SL, the I would say that proof of sales of the device should be submitted to esmay along with an equal amount in L's to the total amount of sales of said device. Since the system was her's to begin with give her a double share of Carlos' take from sales of said device, then the rest split equally among all JEVN merchant/users. And I make note that the issue of recompense is being totally ignored by the eprson who created said theft device. He made money off OUR hard work and esmay's. I say let him pay.


Okay. First of all, I'd like to point out that it's my opinion that thinking such as this underlies much of the problem with society today - everyone seems to think someone owes them compensation for every little percieved wrong that occurs to them. We've determined from the chat conference today that YOU HAVE SOLD NOTHING, ZERO, NADA, and therefore, there were no 'potential losses', 'virtual thefts', or 'pseudo-piracy' going on. This is complete and utter lunacy. The moment that I see a big 'insured by linden labs' stamp on ANY of the vendors on SL, then maybe I won't mind some of this talk. Until then, you are using a toy, a plaything, a script created by a talented scripter using the same limited system as everyone else.

My point is this: I assume you are not a lawyer. You aren't playing in a world where there are even any laws save the EULA (and whatever a linden decides to randomly come up with at any given moment). While I'm sure esmay tried everything that she knew when she first created the JEVN 2 series of vendors to make sure that they were secure to the best of her knowledge, she's a real person too, makes mistakes, and does a pretty good job considering much of the scripting language oddities have to be 'discovered' through observation and experimentation rather than just taking a look through the wiki.

Incidentally, I had heard about the emulator incident about two weeks ago or so. esmay even commented on it. While there was no 'organized effort' to ALARM everyone that there was a potential exploit, the knowledge was there, and several people knew - it was even in the same public conference that everyone was in today in the JEVN Users group. It was also stated at that time that esmay was working on a fix for it. So some of this is bull anyways. Most of this simply seems to be a mob-mentality panic attack, a temper tantrum from someone who didn't get their way, or an attempt to try to weasle money out of the vendor creator when their objects didn't sell as well as they would like.
Dmitri Polonsky
Registered User
Join date: 26 Aug 2005
Posts: 562
12-13-2005 21:45
From: Zodiakos Absolute
Okay. First of all, I'd like to point out that it's my opinion that thinking such as this underlies much of the problem with society today - everyone seems to think someone owes them compensation for every little percieved wrong that occurs to them. We've determined from the chat conference today that YOU HAVE SOLD NOTHING, ZERO, NADA, and therefore, there were no 'potential losses', 'virtual thefts', or 'pseudo-piracy' going on. This is complete and utter lunacy. The moment that I see a big 'insured by linden labs' stamp on ANY of the vendors on SL, then maybe I won't mind some of this talk. Until then, you are using a toy, a plaything, a script created by a talented scripter using the same limited system as everyone else.

My point is this: I assume you are not a lawyer. You aren't playing in a world where there are even any laws save the EULA (and whatever a linden decides to randomly come up with at any given moment). While I'm sure esmay tried everything that she knew when she first created the JEVN 2 series of vendors to make sure that they were secure to the best of her knowledge, she's a real person too, makes mistakes, and does a pretty good job considering much of the scripting language oddities have to be 'discovered' through observation and experimentation rather than just taking a look through the wiki.

Incidentally, I had heard about the emulator incident about two weeks ago or so. esmay even commented on it. While there was no 'organized effort' to ALARM everyone that there was a potential exploit, the knowledge was there, and several people knew - it was even in the same public conference that everyone was in today in the JEVN Users group. It was also stated at that time that esmay was working on a fix for it. So some of this is bull anyways. Most of this simply seems to be a mob-mentality panic attack, a temper tantrum from someone who didn't get their way, or an attempt to try to weasle money out of the vendor creator when their objects didn't sell as well as they would like.




Nice way to justify theft. How long ago did you buy your emulator? I did NOT say Ia vhe had no sales. I did say that the system enver sends me any kind of log. I have had sales while in world and seen the transactions, and as a matter of fact I ahd a goodly number for a new merchant right up until this device became apparenly available. Again, let the pnishment fit the crime. Carlos made money from two things, our work adn esmay's good natured although badly misplaced trust. As far as Carlos being broke I highly doubt it since hew as selling God knows how many of these at 25k per copy, unless of course he did then next thing which was convert his stolen money to cash, which of course explains this cut and run tactic. OUR use of a scripted vendor does NOT justify someone the creator trusts exploiting the script for the purpose of stealing from us all. Again Carlos did it, Carlos needs to pay. Old saying " Don't do the crime if you can't do the time." And how can you erroneously determine that I had no slaes when I did BTW> Again I DID sell items, from the vendor, which was set up as per the instructions adn except for not e-mailing sales logs it has worked fine. So the only determination that you or anyone else can make is that I have no logs to verify things, not that I ahve not had sales.
Selene Gregoire
Eyes of the Wolf
Join date: 14 Sep 2005
Posts: 681
12-13-2005 21:47
From: Zodiakos Absolute
Okay. First of all, I'd like to point out that it's my opinion that thinking such as this underlies much of the problem with society today - everyone seems to think someone owes them compensation for every little percieved wrong that occurs to them. We've determined from the chat conference today that YOU HAVE SOLD NOTHING, ZERO, NADA, and therefore, there were no 'potential losses', 'virtual thefts', or 'pseudo-piracy' going on. This is complete and utter lunacy. The moment that I see a big 'insured by linden labs' stamp on ANY of the vendors on SL, then maybe I won't mind some of this talk. Until then, you are using a toy, a plaything, a script created by a talented scripter using the same limited system as everyone else.

My point is this: I assume you are not a lawyer. You aren't playing in a world where there are even any laws save the EULA (and whatever a linden decides to randomly come up with at any given moment). While I'm sure esmay tried everything that she knew when she first created the JEVN 2 series of vendors to make sure that they were secure to the best of her knowledge, she's a real person too, makes mistakes, and does a pretty good job considering much of the scripting language oddities have to be 'discovered' through observation and experimentation rather than just taking a look through the wiki.

Incidentally, I had heard about the emulator incident about two weeks ago or so. esmay even commented on it. While there was no 'organized effort' to ALARM everyone that there was a potential exploit, the knowledge was there, and several people knew - it was even in the same public conference that everyone was in today in the JEVN Users group. It was also stated at that time that esmay was working on a fix for it. So some of this is bull anyways. Most of this simply seems to be a mob-mentality panic attack, a temper tantrum from someone who didn't get their way, or an attempt to try to weasle money out of the vendor creator when their objects didn't sell as well as they would like.





You are way off the mark with your comments. I know Dmitri RL and he is nothing like what you are attempting to paint him as.

And as for the exploit being "common knowledge" if it had been then why didn't everyone, including myself, know about it until tonight? Do not the users of Esmay system do not have the right to know these things?

No one has ragged on Esmay in this thread so trying to make it look as if that was what Dmitri was doing is wrong on your part. He stated an opinion and he has as much right to do so as you or I do. If he watns to repeat it that is his right also. Your attack on him is not only uncalled for but childish behavior as well. You have accused him of behaving childishly yet you do the same thing with your post.

SL may not be the real world but everyone in SL sure tries very hard to make it as much like the real world as they possibly can. Just take a good look around... cars, airplanes, houses, money, jobs, stores....and yet we are not allowed recourse? Methinks something stinks in SL.
Dmitri Polonsky
Registered User
Join date: 26 Aug 2005
Posts: 562
12-13-2005 21:52
From: Selene Gregoire
You are way off the mark with your comments. I know Dmitri RL and he is nothing like what you are attempting to paint him as.

And as for the exploit being "common knowledge" if it had been then why didn't everyone, including myself, know about it until tonight? Do not the users of Esmay system do not have the right to know these things?

No one has ragged on Esmay in this thread so trying to make it look as if that was what Dmitri was doing is wrong on your part. He stated an opinion and he has as much right to do so as you or I do. If he watns to repeat it that is his right also. Your attack on him is not only uncalled for but childish behavior as well. You have accused him of behaving childishly yet you do the same thing with your post.

SL may not be the real world but everyone in SL sure tries very hard to make it as much like the real world as they possibly can. Just take a good look around... cars, airplanes, houses, money, jobs, stores....and yet we are not allowed recourse? Methinks something stinks in SL.


Besides as should be noted I said esmay should get a dbl share of the take ofr the losses SHE will suffer over this. Her only crime was being too kind and trusting to Carlos.
Eboni Khan
Misanthrope
Join date: 17 Mar 2004
Posts: 2,133
12-13-2005 21:57
I have saved the good parts of this thread to a notecard, to preserve them before this thread is edited to all hell and locked.


I am also going to rate it 5 stars, for drama, broken friendships, theft, deceit, and why SL sucks for business.


*golf clap*
Annah Zamboni
Banannah Annah
Join date: 2 Jun 2004
Posts: 1,022
12-13-2005 22:12
lol so true!
Cristiano Midnight
Evil Snapshot Baron
Join date: 17 May 2003
Posts: 8,616
12-13-2005 22:13
* hugs his old school Francis Chung animation vendors tightly *

I definitely concur, my god this is high drama at its, well, lowest. Talk about no honor among thieves. I have read the whole thing and I all I have to say is FREE NIMROD YAFFLE, and of course, that I am blown away by this thread in its entirety.
_____________________
Cristiano


ANOmations - huge selection of high quality, low priced animations all $100L or less.

~SLUniverse.com~ SL's oldest and largest community site, featuring Snapzilla image sharing, forums, and much more.

Mulch Ennui
15 Minutes are Over
Join date: 22 May 2005
Posts: 2,607
12-13-2005 22:15
From: Cristiano Midnight

I definitely concur, my god this is high drama at its, well, lowest. Talk about no honor among thieves. I have read the whole thing and I all I have to say is FREE NIMROD YAFFLE, and of course, that I am blown away by this thread in its entirety.


seriously, if I was jeska I wouldn't know where to move this thing

notices and well wishes i guess?
_____________________
I have of late--but wherefore I know not--lost all my mirth, that this goodly frame, the earth, seems to me a sterile promontory, this most excellent canopy, the air, look you, this brave o'erhanging firmament, this majestical roof fretted with golden fire, why, it appears no other thing to me than a foul and pestilent congregation of vapours.

http://forums.secondcitizen.com/
Selene Gregoire
Eyes of the Wolf
Join date: 14 Sep 2005
Posts: 681
12-13-2005 22:18
Hopefully they will leave it alone so that people will see that while Esmay made a costly mistake and is working to correct it, the one who carries the most guilt is getting off scot free. Not to mention the fact that his buddies who may also have this emulator.... umm.. nevermind. I think you get the picture.
Eboni Khan
Misanthrope
Join date: 17 Mar 2004
Posts: 2,133
12-13-2005 22:24
From: Selene Gregoire
Hopefully they will leave it alone so that people will see that while Esmay made a costly mistake and is working to correct it, the one who carries the most guilt is getting off scot free. Not to mention the fact that his buddies who may also have this emulator.... umm.. nevermind. I think you get the picture.



In the real world people sue people like Esmay, and bankrupt them. Luckily people like Esmay usually have all their money in off shore accounts and after a short jail sentence in a Federal prison, live a life of comfort and uxury.


Esmay shoulders 100% of the blame from the moment Esmay was told about this explot and did nothing.
Cristiano Midnight
Evil Snapshot Baron
Join date: 17 May 2003
Posts: 8,616
12-13-2005 22:25
From: Mulch Ennui
seriously, if I was jeska I wouldn't know where to move this thing

notices and well wishes i guess?


I would move it to the SA Forums.
_____________________
Cristiano


ANOmations - huge selection of high quality, low priced animations all $100L or less.

~SLUniverse.com~ SL's oldest and largest community site, featuring Snapzilla image sharing, forums, and much more.

Selene Gregoire
Eyes of the Wolf
Join date: 14 Sep 2005
Posts: 681
12-13-2005 22:34
From: Eboni Khan
In the real world people sue people like Esmay, and bankrupt them. Luckily people like Esmay usually have all their money in off shore accounts and after a short jail sentence in a Federal prison, live a life of comfort and uxury.


Esmay shoulders 100% of the blame from the moment Esmay was told about this explot and did nothing.




I agree with you but as I understand it Esmay has been working on fixing the problem since she found out about it. If, at some point, I do find out that she has not made any effort to fix it since she has known about then I will stop using her system and I will want a full refund for both the systems I paid 2000L each for and will return the systems to her. If it comes down to that and I don't get any kind of refund then the non-action on her part will speak louder than words.

Oh and btw.... In the real word the Fed pen is considered to be the easiest time to do but it still is no picnic unless they send you to the Country Club down there in Fla. Even so they still route you through Oklahoma and that is one bad place. I have my ex to thank for this knowledge. :(
1 2 3 4 5 6 7 8