Welcome to the Second Life Forums Archive

These forums are CLOSED. Please visit the new forums HERE

Teporary(?) solution to hold copbot use while LL figure out what to do with it

TigroSpottystripes Katsu
Join date: 24 Jun 2006
Posts: 556
11-18-2006 12:46
my idea is basicly add a new flag (defaulted to on) for parcel options called "Disallow CopyBot", and release a new obligatory update for the client (and rolling update for the servers) that incase that flag is set where the avatar is, the sim would send a "qustion" that the client must answer right in order to remain conected (basicly a simple hashed Question/answer system,the way I made on an project I'm have not finished yet in lsl is to have the client and the sever know a "password" and use it to encrypt the current gmt time with md5, and use that to hash out data (the question), if the client replieswith a valid hash he is allowed)

parcels with this flags set would not allow anything other than the oficial client to stay conected inside of it

I believe there is several simple ways to hide the pasword inside the client that would make reverse engineering the binaries to get the pasword quite dificult

is there any reason this wouldn't be a good idea ? any reason why you guys shoudln't go ahead and start coding this?



ps: perhaps this woudl instead be somthing only sim owners could set, or even somthing that for the moment all sims would do without leaving the option to disable it for the moment

edit: I forgot to say that you probably should also change the password on each mandatory updates to keep any unnoficial client that managed to have the right password require to be updated with the new pasword, with this forcing most "script kiddies" with unoficial clients be disencouraged and also reducing the lifetime of unoficial clients due to the time required to crack the new password and update the code

edit2: another thign I forgot to sugest is the creation of another grid for th epurpose of allowign LibSL to play iwth stuff without bottering people on th emain grid, this woudl either have a diferent password or would not even check for unoficial clients
Kelly Linden
Linden Developer
Join date: 29 Mar 2004
Posts: 896
11-18-2006 20:36
This is more a feature suggestion than a linden answers question.

The truth is that it is very hard, if not impossible, to tell an official client from a non-official client and we are wary of entering that arms race.
_____________________
- Kelly Linden