Welcome to the Second Life Forums Archive

These forums are CLOSED. Please visit the new forums HERE

Security of Second Life - Your attention REQUIRED

Einsman Schlegel
Disenchanted Fool
Join date: 11 Jun 2003
Posts: 1,461
07-06-2008 20:09
Over the past several months it has come to my attention that some users have a well known user enabled feature to enable different land settings on parcels they do not own.

http://jira.secondlife.com/browse/SEC-117

This unknown yet 'known' feature for certain users to beable to accomplish this have been repeatidly ignored from support tickets and JIRA requests. I hearby bring this attention to the user base iin hopes for future security of Second Life.
Travis Lambert
White dog, red collar
Join date: 3 Jun 2004
Posts: 2,819
07-06-2008 20:11
Thanks for the alert, Einsman! :)

I tried visiting the Jira link you posted - it returns the following:


From: Jira"
PERMISSION VIOLATION

Error
It seems that you have tried to perform an operation which you are not permitted to perform.

If you think this message is wrong, please consult your administrators about getting the necessary permissions.


Maybe Linden pulled it already?
_____________________
------------------
The Shelter

The Shelter is a non-profit recreation center for new residents, and supporters of new residents. Our goal is to provide a positive & supportive social environment for those looking for one in our overwhelming world.
Viktoria Dovgal
Join date: 29 Jul 2007
Posts: 3,593
07-06-2008 20:19
That is normal for SEC jiras, only the reporter and Lindens can see them.
_____________________
Einsman Schlegel
Disenchanted Fool
Join date: 11 Jun 2003
Posts: 1,461
07-06-2008 20:35
From: Travis Lambert
Thanks for the alert, Einsman! :)

I tried visiting the Jira link you posted - it returns the following:




Maybe Linden pulled it already?



as I have mentioned the lindens have repeatedly ignored this situation. It has been proven time and time again that users are able to change the land settings. These are land settings that users do not even own causing wide spread damage.

Update:
See Link - http://jira.secondlife.com/browse/VWR-8077
katykiwi Moonflower
Esquirette
Join date: 5 Dec 2003
Posts: 1,489
07-06-2008 21:13
From: Einsman Schlegel
as I have mentioned the lindens have repeatedly ignored this situation. It has been proven time and time again that users are able to change the land settings. These are land settings that users do not even own causing wide spread damage.
They have also ignored the permissions change exploit/bug since it was reported on JIRA one year ago.

This exploit/bug was rated as critical, but clearly fixing it is not as important as tossing us "dazzling" graphics and enhancement of the new user experience despite all the stolen content appearing all over the grid with changed permissions.
Tod69 Talamasca
The Human Tripod ;)
Join date: 20 Sep 2005
Posts: 4,107
07-06-2008 21:33
From: katykiwi Moonflower
They have also ignored the permissions change exploit/bug since it was reported on JIRA one year ago.

This exploit/bug was rated as critical, but clearly fixing it is not as important as tossing us "dazzling" graphics and enhancement of the new user experience despite all the stolen content appearing all over the grid with changed permissions.


I dont think its that easy.

I'm no programmer but I'm able to do this thing called 'research' into this stuff, and from what I understand, to fix one thing might break another.

Ask any gamer how many times they've installed a "necessary patch" to find it fixes one problem but causes another. ;)
_____________________
really pissy & mean right now and NOT happy with Life.
Rhaorth Antonelli
Registered User
Join date: 15 Apr 2006
Posts: 7,425
07-06-2008 21:37
I use the analogy of a jenga tower of blocks, remove one or two blocks to fix them and the tower may still stand, but if you move another block or a specific block, the whole tower can come tumbling down

or think of the code as a bowl of spaghetti... good lord.. that would be a mess LOL
_____________________
From: someone
Morpheus Linden: But then I change avs pretty often too, so often, I look nothing like my avatar. :)


They are taking away the forums... it could be worse, they could be taking away the forums AND Second Life...
Tod69 Talamasca
The Human Tripod ;)
Join date: 20 Sep 2005
Posts: 4,107
07-06-2008 21:47
From: Rhaorth Antonelli

or think of the code as a bowl of spaghetti... good lord.. that would be a mess LOL


Thats closer to it, I think. ;)
_____________________
really pissy & mean right now and NOT happy with Life.
Rebecca Proudhon
(TM)
Join date: 3 May 2006
Posts: 1,686
07-07-2008 02:12
SL was built wrong. The sweater they were knitting has too many dropped stitches and the whole thing will unravel if anyone touches it.


Oh no...must be the Season of the Witch.
You've got to pick up every stitch,
You've got to pick up every stitch,
You've got to pick up every stitch,
Mm, must be the season of the witch,
Must be the season of the witch, yeah,
Must be the season of the witch


EDIT: oh..I forgot the "Beatniks out to make it rich" part...
Dekka Raymaker
thinking very hard
Join date: 4 Feb 2007
Posts: 3,898
07-07-2008 05:48
From: Einsman Schlegel
as I have mentioned the lindens have repeatedly ignored this situation. It has been proven time and time again that users are able to change the land settings. These are land settings that users do not even own causing wide spread damage.

Update:
See Link - http://jira.secondlife.com/browse/VWR-8077

the solution to this problem is simple in the eyes of the Lindens, I too reported it and was told that while you can in theory change these settings, it is only seen on your viewer, it actually doesn't change anything at all. You can try this, by changing the settings, TP out, TP back re look at the settings and they have reverted back to how they were, well they haven't even reverted, they never change other than on your screen.
_____________________
Viktoria Dovgal
Join date: 29 Jul 2007
Posts: 3,593
07-07-2008 07:37
From: Dekka Raymaker
they never change other than on your screen.

Oh, so this is just the cached settings thing? That one can be confusing but it seems pretty harmless.
_____________________