OMG Xstreet now logs you out

This used to really p*ss me off with OnRez... and now they've done it with Xstreet. I leave a tab in my browser open with my traffic pages, so all I need to do is refresh to get an update. Now it seems to log me out if left idle for 10 minutes.... this is so annoying.

Or is this just me?

I noticed that yesterday.

Very, very annoying.

-Atashi

Now that XStreet is an official part of SL I suppose we could rightfully open a Jira on this, couldn't we? May be worth a try.

After my initial hysteria it seems from the XStreet forums that it's a glitch not a "feature".. and a temporary workaround is to start with https:// rather than http://

I'm only a buyer there but this was happening to me all day yesterday. Glad I'm not alone.

No it's not a bug or a glitch. It's a PITB and here's the explanation.

http://www.xstreetsl.com/modules.php?name=Forums&file=viewtopic&p=433962#433962

The first of many unannounced, unneeded and unwelcome changes I am sure.

Well I don't know anything about the security problems being addressed. If the cookies had led to security breaches that cost people money, or it it's a time-bomb waiting to happen, it's a good move.

Now, since Linden Lab is doing it, I would bet on a good chance that they are fixing a phantom problem with no real consequences. But I don't know for sure. They do have to protect my money.

It would seem to hurt merchants. I often use XStreetSL in conjunction with SL, looking up products on XStreetSL, then looking at the products in-world by visiting shops. If it takes me more than ten minutes to look in someone's shop in-world, I'd get logged out.

There might be an assumption that if consumers really want the product, they'd put up with logging in again. I'd guess though that most SL-related purchases are impulse buys. Ten minutes gives a consumer plenty of time to lose an impulse.

It also probably makes it more important for merchants to get their products the top of the listings. Less consumers may be digging deep into the results. (Buy what I found already, rather than logging back in to look deeper on the list for other alternatives.)

Actually, you know, they're right. Leaving you logged in IS a security flaw for a site involving virtual money... I suppose they could just disable transactions and let you keep a monitor up (which is what they effectively do on the SL account page), but that's more work.

It will cut down on traffic. I know I wont be checking my traffic/sales as often if I have to log in each time. That cured my habit of checking from my cellphone since typing the log in info on those little keys is a pain.

and we're suprised that a service that LL took over starts making our security choices for us (and general service starts to go down)? didn't we learn anything LAST TIME.

(I'm the only person on my computer, WTF should I need to be logged out?)

;0 absolutely, and only coincidentally recently realized this myself! :\ so while it's a persnickety un-fun thing to patch on, i imagine that prolly the first stipulations of the buyout was 1) block to https, then 2) add on some sort of casual consumer/merchant subdomain subdivide (probably under development/coming soon, i hope).

In case of the traffic/sales stats pages, and if it really only logs you out after 10 mins IDLE, you could use firefox + reloadevery extension. That will automatically reload a page every x minutes, so the tab with the stats is always refreshed, and thus the idle timer never reaches 10 minutes.