Is there a group membership exploit?

Yesterday I got an IM from someone who said that the "Performance Tester" accounts were leaving prims on their sim set to one of my closed-membership groups. I explained that the Tester accounts are Linden-only bots that test sim performance by rezzing prims, and I reckoned that they had a way of joining any land group in order to do their tests; perhaps they glitched and forgot to turn off my group when visiting this other person's sim. (They're also known to accidentally leave junk laying around, leading some people to assume they're griefers.)

Anyway "problem solved" I thought- until a few minutes ago when my business partner just reported that someone left a bunch of spam objects in our no-build store- and the objects are all set to ANOTHER one of my closed-registration groups, where the only people in the group with the ability to invite others are me and my alt.

The Performance Tester thing seems like a reasonable glitch, considering what/who those avatars are. But this? I've never heard of the person who set down the spam prims, but they were set to my group, even though she's not in it (and never has been). I do find it weird, however, that I would get two reports of people leaving junk on their land in two different closed-registration groups of mine in two days...

Any ideas?

There is a good chance that they aren't set to your group, the viewer lies. Relog and don't examine any other objects before you look at one of those, because the viewer doesn't clear that field if you looked at a set-to-group object beforehand.

There's a jira on that, will go dig up the number and add it here. ETA: or would, if JIRA wasn't down again.

Here we are! https://jira.secondlife.com/browse/VWR-3598

Ah interesting, you're right- it was the viewer bug. Also, although the store land is indeed set to no-build, an adjacent lot was not, so we figure the person was rezzing on the other lot and sliding things into the store. *sigh*

could have been weapons fire, could have been a large, "coalesced" object which they rezzed on the adjacent parcel, could have been a "rez foo" gone crazy... could have been "physical" stuff that went flying.

Could have been that SL momentarily forgot that the land was "no build" during one of it's recent failures.

I've seen the performance tester bots leave behind prims before. I think one of the tests is to try to rez stuff then delete it - if the sim or asset servers are having problems, there's probably a chance that the rez may work but the delete won't.

As for how they get around land permissions, I wouldn't doubt (but don't _know_) that anybody with a last name of Linden or Tester can choose to ignore various rules of reality, when they want to.