Welcome to the Second Life Forums Archive

These forums are CLOSED. Please visit the new forums HERE

Your security question has probably been compromised

Wrom Morrison
Validated User
Join date: 15 Apr 2006
Posts: 462
09-09-2006 02:12
So why do they want us to validate using it?

From: someone

We asked people to wait until Monday because we wanted to put something in place which was a more secure way to validate accounts than the security question, which had possibly been compromised.
_____________________
Content creators, please check this feature proposal. The aim of this proposal is to end re-sale rip-offs. (Also benefits freebie makers).

Jill Caldera
Registered User
Join date: 13 Jun 2004
Posts: 39
09-09-2006 02:17
THATS just wonderful....I Went through about 70 words I could have possibly put as it because the one I remembered it as was "wrong"...

Now they will be able to break into everything..though I did leave some messages on my favorite book as...LETMEINALREADY...IDONTLIKEBOOKS....YOUPEOPLESUCK!.

SO :) They must have had some fun if they were monitoring it!
Von Tripp
Registered User
Join date: 28 Apr 2006
Posts: 6
Linden Labs Security
09-09-2006 03:13
Let me get this right. Linden Labs used public domain unvetted software on one of their web servers which had direct access to the main personal information database. They are idiots and if this happened at my company, both the IT director and the CTO would be fired on the spot. Heads must roll for such a basic IT security mistake with such major ramifications.

Any organisation storing customer information, has to compartmentalise the security systems, so that the web sites using public domain software only has access to the information that it needs, usually via a separate, one way, data feed.

LL have probably broken the law in Britain by failing to compartmentalise their security of personal data correctly. There is something called the Data Protection Act here.
Usagi Musashi
UM ™®
Join date: 24 Oct 2004
Posts: 6,083
09-09-2006 06:42
Let me get this right."the security question, which had possibly been compromised."????????? a Well designed Company is SUPPOSE to keep the "security question" on anotehr data base!!!!!!!!!!!!!!!what the fuck is shit doing onthe same data base! If LLabs was a SMALL company i say its understandable But LLAbs is no fly by night company! someone fucked up big! Somebody is going to have to answer to this!!!!!!!!!!!!!!!!!!!!!