Security of Second Life - Your attention REQUIRED
|
|
Einsman Schlegel
Disenchanted Fool
Join date: 11 Jun 2003
Posts: 1,461
|
07-06-2008 20:09
Over the past several months it has come to my attention that some users have a well known user enabled feature to enable different land settings on parcels they do not own. http://jira.secondlife.com/browse/SEC-117 This unknown yet 'known' feature for certain users to beable to accomplish this have been repeatidly ignored from support tickets and JIRA requests. I hearby bring this attention to the user base iin hopes for future security of Second Life.
|
|
Travis Lambert
White dog, red collar
Join date: 3 Jun 2004
Posts: 2,819
|
07-06-2008 20:11
Thanks for the alert, Einsman!  I tried visiting the Jira link you posted - it returns the following: From: Jira" PERMISSION VIOLATION
Error It seems that you have tried to perform an operation which you are not permitted to perform.
If you think this message is wrong, please consult your administrators about getting the necessary permissions. Maybe Linden pulled it already?
_____________________
------------------ The ShelterThe Shelter is a non-profit recreation center for new residents, and supporters of new residents. Our goal is to provide a positive & supportive social environment for those looking for one in our overwhelming world.
|
|
Viktoria Dovgal
…
Join date: 29 Jul 2007
Posts: 3,593
|
07-06-2008 20:19
That is normal for SEC jiras, only the reporter and Lindens can see them.
|
|
Einsman Schlegel
Disenchanted Fool
Join date: 11 Jun 2003
Posts: 1,461
|
07-06-2008 20:35
From: Travis Lambert Thanks for the alert, Einsman!  I tried visiting the Jira link you posted - it returns the following: Maybe Linden pulled it already? as I have mentioned the lindens have repeatedly ignored this situation. It has been proven time and time again that users are able to change the land settings. These are land settings that users do not even own causing wide spread damage. Update: See Link - http://jira.secondlife.com/browse/VWR-8077
|
|
katykiwi Moonflower
Esquirette
Join date: 5 Dec 2003
Posts: 1,489
|
07-06-2008 21:13
From: Einsman Schlegel as I have mentioned the lindens have repeatedly ignored this situation. It has been proven time and time again that users are able to change the land settings. These are land settings that users do not even own causing wide spread damage. They have also ignored the permissions change exploit/bug since it was reported on JIRA one year ago. This exploit/bug was rated as critical, but clearly fixing it is not as important as tossing us "dazzling" graphics and enhancement of the new user experience despite all the stolen content appearing all over the grid with changed permissions.
|
|
Tod69 Talamasca
The Human Tripod ;)
Join date: 20 Sep 2005
Posts: 4,107
|
07-06-2008 21:33
From: katykiwi Moonflower They have also ignored the permissions change exploit/bug since it was reported on JIRA one year ago. This exploit/bug was rated as critical, but clearly fixing it is not as important as tossing us "dazzling" graphics and enhancement of the new user experience despite all the stolen content appearing all over the grid with changed permissions. I dont think its that easy. I'm no programmer but I'm able to do this thing called 'research' into this stuff, and from what I understand, to fix one thing might break another. Ask any gamer how many times they've installed a "necessary patch" to find it fixes one problem but causes another. 
_____________________
really pissy & mean right now and NOT happy with Life.
|
|
Rhaorth Antonelli
Registered User
Join date: 15 Apr 2006
Posts: 7,425
|
07-06-2008 21:37
I use the analogy of a jenga tower of blocks, remove one or two blocks to fix them and the tower may still stand, but if you move another block or a specific block, the whole tower can come tumbling down
or think of the code as a bowl of spaghetti... good lord.. that would be a mess LOL
_____________________
From: someone Morpheus Linden: But then I change avs pretty often too, so often, I look nothing like my avatar.  They are taking away the forums... it could be worse, they could be taking away the forums AND Second Life...
|
|
Tod69 Talamasca
The Human Tripod ;)
Join date: 20 Sep 2005
Posts: 4,107
|
07-06-2008 21:47
From: Rhaorth Antonelli or think of the code as a bowl of spaghetti... good lord.. that would be a mess LOL
Thats closer to it, I think. 
_____________________
really pissy & mean right now and NOT happy with Life.
|
|
Rebecca Proudhon
(TM)
Join date: 3 May 2006
Posts: 1,686
|
07-07-2008 02:12
SL was built wrong. The sweater they were knitting has too many dropped stitches and the whole thing will unravel if anyone touches it. Oh no...must be the Season of the Witch. You've got to pick up every stitch, You've got to pick up every stitch, You've got to pick up every stitch, Mm, must be the season of the witch, Must be the season of the witch, yeah, Must be the season of the witch EDIT: oh..I forgot the "Beatniks out to make it rich" part...
|
|
Dekka Raymaker
thinking very hard
Join date: 4 Feb 2007
Posts: 3,898
|
07-07-2008 05:48
From: Einsman Schlegel as I have mentioned the lindens have repeatedly ignored this situation. It has been proven time and time again that users are able to change the land settings. These are land settings that users do not even own causing wide spread damage. Update: See Link - http://jira.secondlife.com/browse/VWR-8077the solution to this problem is simple in the eyes of the Lindens, I too reported it and was told that while you can in theory change these settings, it is only seen on your viewer, it actually doesn't change anything at all. You can try this, by changing the settings, TP out, TP back re look at the settings and they have reverted back to how they were, well they haven't even reverted, they never change other than on your screen.
|
|
Viktoria Dovgal
…
Join date: 29 Jul 2007
Posts: 3,593
|
07-07-2008 07:37
From: Dekka Raymaker they never change other than on your screen. Oh, so this is just the cached settings thing? That one can be confusing but it seems pretty harmless.
|