Welcome to the Second Life Forums Archive

These forums are CLOSED. Please visit the new forums HERE

RiskAPI

Gordon Wendt
404 - User not found
Join date: 10 May 2006
Posts: 1,024
12-09-2007 22:09
From: Strife Onizuka
In this case yes, you violated the authors copyright and the Lindens instructions not to copy material from the LSL Wiki. The reason for the copy ban from the LSL wiki was that there is no license associated with the LSL Wiki, copying them to the SL Wiki would force onto them the CC-By 2.5 license. In the process of doing so would constitute a violation of copyright as only the owner or duly appointed representative may change the licensing.


A very valid reason so I guess I won't put it up there, though I'll ask the author to release that code under a reconcilable license so that it can be uploaded to the wiki. You wouldn't happen to have a link to where that instruction is though? I'm not doubting your honesty however I've never heard of it so I'd be interested in reading it.

Since it's still currently available in the page history I'll request that the page be deleted as soon as I can find the proper template to do so and have removed the link to the page from my userpage.
_____________________
Twitter: http://www.twitter.com/GWendt
Plurk: http://www.plurk.com/GordonWendt

GW Designs: XStreetSL

Strife Onizuka
Moonchild
Join date: 3 Mar 2004
Posts: 5,887
12-09-2007 22:13
https://wiki.secondlife.com/wiki/Talk:LSL_Portal#Please_do_not_copy_content_from_LSLwiki

Anyway if you want to post griefer scripts, put them on PN's wiki.
_____________________
Truth is a river that is always splitting up into arms that reunite. Islanded between the arms, the inhabitants argue for a lifetime as to which is the main river.
- Cyril Connolly

Without the political will to find common ground, the continual friction of tactic and counter tactic, only creates suspicion and hatred and vengeance, and perpetuates the cycle of violence.
- James Nachtwey
Gordon Wendt
404 - User not found
Join date: 10 May 2006
Posts: 1,024
12-09-2007 22:56
From: Strife Onizuka
https://wiki.secondlife.com/wiki/Talk:LSL_Portal#Please_do_not_copy_content_from_LSLwiki

Anyway if you want to post griefer scripts, put them on PN's wiki.


I take personal offense and ask that you retract that statement, and like you I've developed a fairly thick skin here and it takes a lot on these boards to cause personal offense. A) It personally attacks me by stating that I'd purposefully give tools to griefers, and B) I figured you'd be enlightened enough to see that there are no bad scripts or bad code for that matter, just code that's used for bad things... I'll admit that there's code that's so specific in it's purpose that iit's sole purpose is to do something bad but I don't think this is the case in a script that can easily be tailored for alt money transfer or other useful ends. Again, I await your retraction or your refusal to retract your statement.

I've dropped a note on Rob Here to ask him to delete the page because if anyone can do it it's him.
_____________________
Twitter: http://www.twitter.com/GWendt
Plurk: http://www.plurk.com/GordonWendt

GW Designs: XStreetSL

Gaybot Blessed
Heavenly Input Collector
Join date: 3 Oct 2007
Posts: 306
12-09-2007 23:48
Based on this part of the script...



How can anyone say this script can be used for good or bad? Technically, it could be used for either, but by the very nature of the wording, it would appear it was created solely for BAD purposes. It looks like a bad piece of code which COULD be used for good, but most likely is going to be used for bad. What good does an object do that takes someone's money? We have built in tools for transferring money to other residents. Key phrases such as Alt Pick Pocket, pure evil, key thief =, tell me this was intended to be a griefer script. Ok so it has a disclaimer and it asks permission, but I can see someone recoding it with reversed blue dialog boxes (where yes is no and no is yes) or bypassing that step all together.

If it is going to be on public websites (including the SL forums), then the Lindens should make a blog post stating the dangers of accepting items from people you do not know. They could use this script as an example.
_____________________
:) :)
Gordon Wendt
404 - User not found
Join date: 10 May 2006
Posts: 1,024
12-09-2007 23:55
they're essentially the same script with slightly different warnings attached. The alt pickpocket script does have it's uses, again though we'd have to get into the argument of whether code can be good or bad which I've expressed my views on and have no real urge to rehash.

From: Gaybot Blessed
Based on this part of the script...
If it is going to be on public websites (including the SL forums), then the Lindens should make a blog post stating the dangers of accepting items from people you do not know. They could use this script as an example.


I've been trying to pressure to do exactly that for some time since these aren't the worst things out there, they finally caved into sensibly redoing the give debit permissions dialog (which can't be switched btw, anything work lldialog could be switched but that's somewhat pointless once the object has debit) an orange glow and made it huge and impossible to miss with better warnings but it would make my day if they made a blog post or better yet pushed a client side warning (similar to the TOS style warning that they did) about this but for some reason I cannot fathom they've refused to do so.
_____________________
Twitter: http://www.twitter.com/GWendt
Plurk: http://www.plurk.com/GordonWendt

GW Designs: XStreetSL

Strife Onizuka
Moonchild
Join date: 3 Mar 2004
Posts: 5,887
12-10-2007 00:11
While I disagree with you about there being no such thing as bad code; I do concede that there is one legitimate use for that script. If you think hard enough, every griefer script has some theoretical positive use. Self replicators (good for getting something seen by everyone), grid crashes (for some critical reason a user has to reset the grid), fully automated weapon systems that require a relog (some trade secret must be kept secret).

How do we draw the line?
* Is the script by packaging supposed to do something a random user would dislike or get them in trouble?
* Is the script by default going to do something a majority of random users are going to dislike or get them in trouble?
* What is the apparent intention of the script author?

In this case, the script as named is supposed to pick the users pocket (steal money). By looking at the comments, it doesn't say anything about using the script to transfer money to an alt (that being it's only legitimate use). By default the script empties the users account of all money with no chance of undoing the action or warning the user before hand.

A good intentioned author would treat it as a security bug and bring it to the attention of LL. The documentation in that case would speak of it as a bug/exploit.

There is nothing about this script to indicate it was written with good intentions. It is intended to be unfriendly to the end user and that is made apparent in the documentation.

There is plenty of evidence to support the conclusion that it was intended to be used to cause grief. There is however no evidence to support the counter claim.

----

The comment about posting to PN's wiki will take some delicate explanation.
My reason for suggesting this is kind of twisted and not totally obvious.

Wikis are public.
People visiting PN's wiki are either griefers or people wanting to know what weapons griefers have in their arsenal.
As the OP of this thread attests, griefers are already using this script.
By posting a griefer script that is already used by griefers onto PN's wiki, it is not infact giving them any new information; what it does do is bring the script to the attention of people who aren't griefers.
Of course there is always the chance you will be educating griefers but if you publish publicly you run that risk anyway. Publishing is inherently risky.

It has always amazed me that PN has a public wiki. Griefers know how to cause grief, with them publishing their methods for the public to see just educates everyone else as to what to look out for.
_____________________
Truth is a river that is always splitting up into arms that reunite. Islanded between the arms, the inhabitants argue for a lifetime as to which is the main river.
- Cyril Connolly

Without the political will to find common ground, the continual friction of tactic and counter tactic, only creates suspicion and hatred and vengeance, and perpetuates the cycle of violence.
- James Nachtwey
Gordon Wendt
404 - User not found
Join date: 10 May 2006
Posts: 1,024
12-10-2007 01:16
Most of my references in terms of bad codes are not taking the comments into account since it's the code itself I'm looking at, which is essentially the same code in AltPickpocket which is the exact same thing just with slightly different warnings and a "better intention".


From: Strife Onizuka

It has always amazed me that PN has a public wiki. Griefers know how to cause grief, with them publishing their methods for the public to see just educates everyone else as to what to look out for.


I'm actually surprised that the members of PN know how to turn their computers on.
_____________________
Twitter: http://www.twitter.com/GWendt
Plurk: http://www.plurk.com/GordonWendt

GW Designs: XStreetSL

Strife Onizuka
Moonchild
Join date: 3 Mar 2004
Posts: 5,887
12-10-2007 02:12
It was not my intention to besmirch your character and for that I apologize.

I agree, griefers are a special class of idiot.
_____________________
Truth is a river that is always splitting up into arms that reunite. Islanded between the arms, the inhabitants argue for a lifetime as to which is the main river.
- Cyril Connolly

Without the political will to find common ground, the continual friction of tactic and counter tactic, only creates suspicion and hatred and vengeance, and perpetuates the cycle of violence.
- James Nachtwey
Bobbyb30 Zohari
SL Mentor Coach
Join date: 11 Nov 2006
Posts: 466
12-10-2007 14:50
From: JackJack Oh
Why lindens don't ever admin they have problems with RiskAPI? I'm still flagged, and i'm not alone, i'm considered as a fraudber... and anyway "6afd6cb8-c7dd-42e6-a65e-c40d0c9853a6" and her fake tip jar that steal money is still searchable....

edit: no names? ok... uuids.... "6afd6cb8-c7dd-42e6-a65e-c40d0c9853a6"


Lol...use uuid instead of name, not sure if thats legit. =D

"Fake tip jar"...it clearly states in a seperate yellow popup what your risks are when you accept.
_____________________
1 2 3