Spy Script--destroyer Script Help

I have a question that I need help with. I know that spy scripts are alive in well in SL that record conversations and other things. My Questions is...

1) How do you find them on the land/estate and on an AV.

2) Better yet, after you find them how do you get rid of them on the land/estate and on an AV?

3) Has anyone heard of destroyers scripts or objects that will delete an AV's account? Steal their lindens? Delete builds on a sim?

Thanks!

Use a bug detector to look for chat bugs. MystiTool has one, as one of its many functions. There are plenty of others available. I suggest shopping on SL Exchange, http://www.slexchange.com.

On your av, open all your attached items with the Edit tool and look in Content. See if there are any scripts in there that look suspicious.

You get rid of them by deleting the object (if it's yours) or returning it (if it's not).

There are scripted objects that will steal your L$. They always ask for debit permissions first, and a yellow drop down menu appears giving you the option to accept or refuse. Pay attention, and you won't get hurt.

There are objects and animations that will deform your av into a grotesque shape. Detaching the object and re-logging should fix it, or there are "un-deformer" gadgets available.

I've not heard of anything that can delete your account (it's almost impossible to delete, even if you WANT to), or delete builds.

Only Lindens can delete accounts and they don't do this unless you're repeatedly causing serious trouble or if you don't pay your bills.

Scripts cannot take L$ unless you give them permission to. Period. Once you do give them permission you can't revoke it, though. Never, EVER, give a script permission to take your L$ unless you are SURE you know what you're doing.

Dunno about deleting builds.. I don't think there's really any consistant way to delete things that that the land owner has.

All scripts must be inside a prim to run.

All spy scripts are by definition listening on a channel and are thus active scripts. Any modest security tool can find all active script and report who owns the object the script is in. Pick a tool, read the docs, happy hunting. You can either just return/delete the object or possibly submit an AR. Not sure if that would do any good but if you are building a case against a stalker, the more you can document the better.

Getting rid of them on an AV? If it's not your AV you have to get rid of the offending AV. Ban and eject.

Re: destroyer scripts. I have not heard of these. For a script to take $$$ from you, you have to give it permission and it has to have permission any time you res or reset it. You will know when this permission window pops up because it does not look anything like any other window. Delete your account? Not likely. This has to be done on the SL website. Even then you have plenty of time to abort the cancelation with no loss or cost. Delete builds on a sim? I don't know why you would put this script in your builds in the first place, but I guess it's possible.

Just taking a wild guess but it sounds like an overly possisive ex is trying to scare you with a big pile of BS. Ban, Mute and move on. .... But change you password anyway. It never hurts to be safe and perodic password changes are so often overlooked.

I have one of these spy scripts, it's good for a remote sim scan but who cares what Joe Blow is talking about to Jane Doe....

...and, for Dog's sake, don't give your password out. Any non-Linden viewer that you don't absolutely trust, bots that you can buy, websites not controlled by LL, etc. Any of these things might ask for your password - always be wary of them.

If you give your password out, all bets are off - with that, somebody can do pretty much whatever they want.

It's a ToS violation to remotely monitor chat..

Most "spy detectors" work by looking for very small, scripted objects. It isn't actually possible for an object to tell if another object is listening to chat or not - it can only tell that it's scripted, and that's all. So don't assume that a "spy detector" will detect every possible spy - check for scripted objects generally.

Taking Lindens as already mentioned does require permissions to be set, the best explanation was from Yosek Okelly re the permissions box, there are some freebie vendors possible in your inventory already that require you to give these debit permissions when rezzed, you could try and rez one just so you can see the permissions box it shows you, normally about half the screen and a yellow window with warning notes.

The listener scripts also exists but is clearly stated as against the TOS, there are other scripts available that require permissions before chat can be recorded.

The Deleting build scripts, there is a script I recently came across but cannot remember where it was. If I remember rightly the purpose of this script was to sell an item that enabled the buyer to repay the total price over a period of time, if the monies were not received by the due date the original owner/seller was able to issue instructions to delete the item sold regardless of where it was on the grid.

Does anyone else know about this one?

Sounds like a nightmare, I can see someone saying they paid but an SL glitch did not allow the script to record the payment and now their entire build is gone.

That's perfectly simple to do, but you need to actually have the script inside the object - unless you can trick somebody into adding a script that you give them to their build you couldn't just use it on anyone.

All the instances of builds being deleted etc that I've ever heard of have come from (a) random SL errors, and these are very uncommon, or (b) social engineering - somebody gets an alt invited into a group which has the appropriate deleting permissions for that role, or convinces somebody else to give them mod permissions on objects, or even gets somebody's account password by some deceptive mechanism - then, well, they delete things. You can't just buy a script to do it.

Thank you for all that replied. But, more questions generated from your replies.

This was a griefing incident that has been reported by several people to LL. I was not the victim, but another person was. That person said, 9K of lindens were stolen from his LL account...I only have his word for this; however, the person doing the griefing did something and got the key code of the person's AV losing the lindens. The key code ended up printing to open chat

The guy doing the griefing said he was a griefer and a scripter in IMs to one of the women there. My assumption is...this guy was able to use the key code to access the guy's lindens? Or, is this an incorrect assumption?

Also, the griefer/scripter said he was the one that set off a script to destroy the other person's AV...and it would also destroy all the objects created in the sim. It sounded like BS, but I am not up on what griefers/hackers are able to effect when they attack other then orbit people. I am trying to educate myself and pass the information along to those effected. They were pretty freaked out by it all.

Thanks~

Griefers say alot of BS to freighten people. I knew a sim owner who was so afraid of one griefer who told her he could destroy her sim.

I had a very enjoyable time showing this griefer he was not as tough as he thought.

Nope - you absolutely cannot take L$ from somebody by having their avatar key. Really.

The _only_ ways of taking L$ are if you give a scripted object permission to take L$ from you or if somebody gets your SL password. Not your avatar UUID (the key) but your actual password you use to log in with.

It _is_ BS.

Yes, it's going to be rubbish. There are some odd things that can be done with a knowledge of libsl and the way the system works that are not normally known about, but actually deleting objects and accessing passwords are not some of them. At the very most they could perhaps be used to _trick_ people into giving away passwords and permissions, but probably not, and the people who would ever be capable of using the more complex exploits tend (in my experience) to be ethical, if sometimes a bit... playful.

There is a reason for this I would say - in order to become good at something like that you have to have enough interest in SL to put in the effort over a long period of time, and if you do have that interest, you generally don't want to see the structure of SL wrecked by idiot griefers. Even when somebody does get to a point where they have the skill to use complex exploits as well as the tendency to use them harmfully, this phase doesn't last long.

Incorrect. Avatar keys (also known as UUIDs, Universally Unique Identifiers) are just a technical way of referencing a specific avatar. They are no secret, and grants you no additional power over an avatar. Pretty much every script use them extensively to send IMs, animate poseballs, etc.

As for destroying sims and accounts... Discounting password hacks of accounts with management rights, it would require a *massive* security breach of the Linden servers. I'm not saying it cannot be done, but you can rest assured that it will not be done by any random sandbox griefer bragging about it, and certainly not by an inworld script. Just challenge him to actually do it, and hear him back-pedal about how he "doesn't feel like doing it right now".