Welcome to the Second Life Forums Archive

These forums are CLOSED. Please visit the new forums HERE

Stealing Avatars? Is this a Hoax?

WindyWeather Vanalten
Registered User
Join date: 27 Nov 2006
Posts: 53
10-28-2007 12:21
From: someone
(Saved Mon Oct 29 01:45:35 2007) WARNING: it is communicated around that a serious fraud is in progress on Second Life: an invitation is sent with a link, if it is accepted your avatar is stolen. The people that take possession of the avatar take possession of all the powers and obviously also of the data of the credit card. (non confirmed info, but better pass it around)


A friend asked if I had seen this. Looks like a hoax to me. If not a hoax then it looks like a serious security hole in SL. Anybody have any data about this? Hoax or Security Hole??

- wwv
Nika Talaj
now you see her ...
Join date: 2 Jan 2007
Posts: 5,449
10-28-2007 12:24
I've seen this warning in a few shopping groups today, one of which had another para basically saying it is the same thing as this:

/327/a2/219738/1.html
Ordinal Malaprop
really very ordinary
Join date: 9 Sep 2005
Posts: 4,607
10-28-2007 12:24
Hoax, I'd say.

Unspecific about the method of exploit or what it might actually look like - check.
Does not refer to any supporting material e.g. blog posts - check.

Perhaps it is referring to a link sent around to a phishing site, but for that, you would have to enter your name and password, and nobody should ever do that if they have any sense anyway.
_____________________
http://ordinalmalaprop.com/forum/ - visit Ordinal's Scripting Colloquium for scripting discussion with actual working BBCode!

http://ordinalmalaprop.com/engine/ - An Engine Fit For My Proceeding, my Aethernet Journal

http://www.flickr.com/groups/slgriefbuild/ - Second Life Griefbuild Digest, pictures of horrible ad griefing and land spam, and the naming of names
Ordinal Malaprop
really very ordinary
Join date: 9 Sep 2005
Posts: 4,607
10-28-2007 12:25
We need some sort of SL Snopes, really.
_____________________
http://ordinalmalaprop.com/forum/ - visit Ordinal's Scripting Colloquium for scripting discussion with actual working BBCode!

http://ordinalmalaprop.com/engine/ - An Engine Fit For My Proceeding, my Aethernet Journal

http://www.flickr.com/groups/slgriefbuild/ - Second Life Griefbuild Digest, pictures of horrible ad griefing and land spam, and the naming of names
Scott Tureaud
market base?
Join date: 7 Jun 2007
Posts: 224
10-28-2007 13:00
I haven't heard any loud crying in the forums and threatening to quit.
Colette Meiji
Registered User
Join date: 25 Mar 2005
Posts: 15,556
10-28-2007 13:10
From: Scott Tureaud
I haven't heard any loud crying in the forums and threatening to quit.


of course if their avatar was really stolen how could they complain?
Rebecca Proudhon
(TM)
Join date: 3 May 2006
Posts: 1,686
10-28-2007 13:31
Anything that sends you to a web page that has a keylogger trojan horse on it could send back your keystrokes to the owner of that link and then figure out your password and steal your account and transfer your lindens to some other account to cash in. By the time it gets straightend out by LL it would be too late.

Otherwise I think most of the paranoia is hysteria.

With a Keylogger, if you are also sloppy with your Virus Scanner and Firewall etc. then you can catch the virus and it will report back all your keystrokes.

If there is some NEW way of scamming accounts then we can't hold our breath waiting for LL to fix it and we would need more info right away.

If this scare involves more then just a typical keylogger threat then we need to know immediately.
Barry Reiter
Registered User
Join date: 14 Dec 2006
Posts: 6
10-28-2007 13:42
I never get those money taking avatar stealing objects :(
Morwen Bunin
Everybody needs a hero!
Join date: 8 Dec 2005
Posts: 1,743
10-28-2007 14:03
Hoax I say...

They can steal my looks (hard enough I would say), but they cannot steal my name... and more, they cannot steal me.

Morwen
Reitsuki Kojima
Witchhunter
Join date: 27 Jan 2004
Posts: 5,328
10-28-2007 14:42
Legit, actually, although it may be fixed by now. If not, just set SL so that it doesn't remember your password, and it's blocked.

See here: http://www.gnucitizen.org/blog/ie-pwns-secondlife
_____________________
I am myself indifferent honest; but yet I could accuse me of such things that it were better my mother had not borne me: I am very proud, revengeful, ambitious, with more offenses at my beck than I have thoughts to put them in, imagination to give them shape, or time to act them in. What should such fellows as I do crawling between earth and heaven? We are arrant knaves, all; believe none of us.
Ordinal Malaprop
really very ordinary
Join date: 9 Sep 2005
Posts: 4,607
10-28-2007 14:48
From: Reitsuki Kojima
Legit, actually, although it may be fixed by now. If not, just set SL so that it doesn't remember your password, and it's blocked.

See here: http://www.gnucitizen.org/blog/ie-pwns-secondlife

It was fixed with the .3 version if I recall correctly.
_____________________
http://ordinalmalaprop.com/forum/ - visit Ordinal's Scripting Colloquium for scripting discussion with actual working BBCode!

http://ordinalmalaprop.com/engine/ - An Engine Fit For My Proceeding, my Aethernet Journal

http://www.flickr.com/groups/slgriefbuild/ - Second Life Griefbuild Digest, pictures of horrible ad griefing and land spam, and the naming of names
Daisy Rimbaud
Registered User
Join date: 12 Oct 2006
Posts: 764
10-28-2007 16:30
Also, if you get an email saying you have won the Microsoft lottery, do not open it or your PC will explode, and your cat will be kidnapped! (Or your kid will be catnapped, I don't remember which.)
Blaze Nielsen
Registered User
Join date: 24 May 2005
Posts: 276
keylogger? viruses? get a mac.
10-28-2007 17:37
I think I had a virus once about 6 years ago on my mac. Thats the downside of not running a virus protection software on Macs.
Tony Bouchard
Registered User
Join date: 7 Jul 2006
Posts: 1
10-29-2007 02:47
From: Blaze Nielsen
I think I had a virus once about 6 years ago on my mac. Thats the downside of not running a virus protection software on Macs.

then again no body specifically writes viruses for Macs because they just don't care.
Pierce Kronos
Registered User
Join date: 25 Mar 2007
Posts: 41
10-29-2007 04:26
What's a Mac and does it come with fries?
Raudf Fox
(ra-ow-th)
Join date: 25 Feb 2005
Posts: 5,119
10-29-2007 04:37
From: Blaze Nielsen
I think I had a virus once about 6 years ago on my mac. Thats the downside of not running a virus protection software on Macs.


Don't advocate this.. if you do, more people will buy Macs and then the hackers will have reasons to write viruses for them. Right now, the regular Joe doesn't use Mac's because they (the potential user) isn't programmed to. Microsoft is much better at brain washing than Apple!
_____________________
DiamonX Studios, the place of the Victorian Times series of gowns and dresses - Located at http://slurl.com/secondlife/Fushida/224/176

Want more attachment points for your avatar's wearing pleasure? Then please vote for

https://jira.secondlife.com/browse/VWR-1065?
poopmaster Oh
The Best Person On Earth
Join date: 9 Mar 2007
Posts: 917
10-29-2007 14:32
http://blog.secondlife.com/2007/09/18/second-life-url-handler-exploit/
http://blog.secondlife.com/2007/09/18/second-life-url-handler-exploit/
http://blog.secondlife.com/2007/09/18/second-life-url-handler-exploit/
http://blog.secondlife.com/2007/09/18/second-life-url-handler-exploit/
http://blog.secondlife.com/2007/09/18/second-life-url-handler-exploit/
http://blog.secondlife.com/2007/09/18/second-life-url-handler-exploit/
Ordinal Malaprop
really very ordinary
Join date: 9 Sep 2005
Posts: 4,607
10-29-2007 14:35
Known affected configuration: Second Life 1.18.2.0 and earlier on Windows.
Known affected configuration: Second Life 1.18.2.0 and earlier on Windows.
Known affected configuration: Second Life 1.18.2.0 and earlier on Windows.
Known affected configuration: Second Life 1.18.2.0 and earlier on Windows.
Known affected configuration: Second Life 1.18.2.0 and earlier on Windows.
Known affected configuration: Second Life 1.18.2.0 and earlier on Windows.
_____________________
http://ordinalmalaprop.com/forum/ - visit Ordinal's Scripting Colloquium for scripting discussion with actual working BBCode!

http://ordinalmalaprop.com/engine/ - An Engine Fit For My Proceeding, my Aethernet Journal

http://www.flickr.com/groups/slgriefbuild/ - Second Life Griefbuild Digest, pictures of horrible ad griefing and land spam, and the naming of names
Rebecca Proudhon
(TM)
Join date: 3 May 2006
Posts: 1,686
10-29-2007 14:58
From: Raudf Fox
Microsoft is much better at brain washing than Apple!




Obvious true believer. The irony.
ArchTx Edo
Mystic/Artist/Architect
Join date: 13 Feb 2005
Posts: 1,993
10-29-2007 15:10
From: Morwen Bunin
Hoax I say...

They can steal my looks (hard enough I would say), but they cannot steal my name... and more, they cannot steal me.

Morwen


Give me your password, I will show you how I can steal your avatar. I promise to give it back, honest, trust me! :)
_____________________

VRchitecture Model Homes at http://slurl.com/secondlife/Shona/60/220/30
http://www.slexchange.com/modules.php?name=Marketplace&MerchantID=2240
http://shop.onrez.com/Archtx_Edo
Dagmar Heideman
Bokko Dancer
Join date: 2 Feb 2007
Posts: 989
10-29-2007 17:55
From: Raudf Fox
Microsoft is much better at brain washing than Apple!
Clearly they don't have a monopoly on it. :p