Modifiable Notecards

Hi,

Is there a way to see who modified a full mod notecard?

what exactly do you mean by that, is it a notecard in a prim, or one that you sent out and was returned to you?

Someone got a hold of a full mod (M/C/T) notecard made by one of my friends, and rewrote it so that it looks like my friend wrote it. The owner is my friend, but my friend did not write the contents.

Unfortunately, there is no way to tell who did the modifications. Notecards default to full mod, so if you do not want the contents changed, you have to be sure and change the permissions before giving the notecard out.

this is just one (of many) unfortunate glitch(es) that can harm its members that LL hasn't yet considered.

I get this all the time from scripts that I made 4-5 years ago that were set to full-mod permissions. Someone would use my old script as a basis for their new script (which is perfectly fine), but then I get the technical support call when someone wants to know how to use the script or object that uses it.

I should think that SL should change the permissions system (though they should really overhaul it) to CHANGE the creator of a notecard or script once changes are made. That would be a simple solution that would fix the problem.

Anyone want to put in a SL JIRA feature request/bug fix to get this implemented? We should vote on it so it will get implemented.

Hank, you already have a willing person to submit it as a jira entry. Yourself. If you want to see it in the jira, put it there.

Folks, in the interest of clearer communication, please use "Full perm" when you mean C/M/T. "Full mod" means it's fully modifiable, and doesn't say anything about whether it's copiable or transferrable.

The first time I hear the term "Full mod", someone was trying to alert me to the fact that I had posted an item for sale with full perms. Well, nearly all my products are "full mod" -- the prims are modifiable as well as the contents (scripts, notecards, etc). It took some discussion before I was able to understand what this good-hearted person was trying to tell me.

I've only seen this usage a couple times, but it should be discouraged.

I'm afraid this is a damned-if-you-do, damned-if-you-don't situation. Should we do the same for objects and prims? If you make any changes to a modified prim, should it now be "created" by you? Note that the same kinds of problems apply: you could give out a simple object, and someone could easily turn it into something offensive.

How about changing the tint on clothing? Should that change Creator?

What if you change the contents of an object? Should that change the object's creator?

The root problem here is that the concept of "creator" is difficult to quantify.

We actually can't tolerate changes to objects in this regard; it would break existing content (where scripts check the object owner, Xcite Partner scripts, for example.) It's possible that there are objects that depend on the current behavior of notecard creator, though I don't know of any.

So the question is: should scripts and notecards really be treated differently from objects, and if so, why? Are there any other items types that should be treated differently?

Perhaps what we really need is an added attribute for Last Modified By. Initially, it's the same as the creator. From there, it changes with whoever modified it last.

ETA: http://jira.secondlife.com/browse/SVC-658

ETA: http://jira.secondlife.com/browse/VWR-8050

--Hugsy

I previously reported a problem I had with a scammer modifying one of the notecards my vendors give out, and using it to promote a porn scam he is running in SL, offering to sell lifetime subscriptions then never delivering the product after getting paid.

I reported this here just to make people aware of it.

I sent in numerous fraud AR's to LL regarding this thief, yet his store is still operating in SL with no changes, still giving out notecards with my name on them.

Here is another example of a thief taking advantage of the permission system to hide their identity when selling stolen goods.

http://www.sluniverse.com/php/vb/general-sl-discussion/24382-makes-me-ill.html

Well, I've been here two years and learned something new. Though I understand the permissions system, I never thought out this particular result: The first time I give a note card to someone without un-checking "Modify" on it, I have set myself up to allow anyone to forge me as the author of any document.

I know I always make the mistake of looking at the creator of a notecard and mentally making the connection that the creator is the author. I am sure that almost everyone in Second Life makes that mental connection.

Amity, just as in RL, for typical cases that's fine. But when fraud or greifing is involved, you can't make assumptions. For example, if you get an email from a friend, you can't be certain it's really from that friend unless they signed their mail using a crypto signature (e.g., PGP) -- and even in that case you have to make sure that the key distribution method was sufficiently secure.

But in most cases, you don't need to worry about your friend's email asking if you want to come over for dinner this weekend as fraudulent. Now, if they urgently demand to be wired funds, it's a different matter.

No difference in SL, really, except that it's easier for someone to send a message you can be reasonably sure is them (or someone using their account, anyway).

There is a Jira on this here

https://jira.secondlife.com/browse/VWR-8050

Voted

No. Never. I sell my artwork as modify/transfer so that people can resize the art and give it as a gift. I would NEVER want someone else's name on those prims as the creator!!!

More importantly, I believe prims, and notecards, should *default* to no modify unless set to mod intentionally by their creators.

I prefer them to default to full perms. There's no pleasing everyone in this case.

I wish they would make the perms more visible on the notecards. Even when I want the card to be no-mod, I always forget to make it so partly because I don't see it clearly on the card.