Second Life Forums Archive - The truth about stole things on SL

Aniela Szondi

Registered User

Join date: 8 Jul 2007

Posts: 43

10-28-2007 08:44

Hello there,

Forgive me if here is not the right place to post that but I think it should be very great if SL developers make a document and post it on SL site and blog, telling about the possibility of have stuff and lindens stoled from someone. If this is a myth or something like that, I think it´s time to make clear.

Since I started on Sl, I already got several warnings about links, objects and so on that could be take lindens people have in their accounts. I dont saw at any part something clearing that.

Today I received this one:

"IMPORTANT WARNING: to all the members of LA CITTADELLA we communicates that a serious fraud is in progress on Second Life: an invitation is sent with a link, if it is accepted your avatar is stolen. The people that take possession of the avatar take possession of all the powers and obviously also of the data of the credit card."

So, please, could we have an official document from SL developers saying what is possible, what is not possible, how it works, how SL residents can self-protect, etc?

I think it would be very nice from SL staff.
Thank you very much in advance!

Warm regards,
Aniela Szondi

p.s.: If someone here knows a better place to post this note, please feel free to do it.

Xplorer Cannoli

Cache Cleaner

Join date: 18 Sep 2005

Posts: 1,131

10-28-2007 09:34

links within notes, even if they are for a warning, should not be clicked. if you are ever in doubt, check the blog or the forums, but never the links provided in the warnings.

_____________________

Region Names for a Themed Shopping Experience:

New Region: Gifts

Accessories, Art, Avatars, Cars, Clothes, Clothing, Fashion, Fashions, Furnishings, Furniture, Gadgets, Games, Gifts, Hair, Jewellery, Jewelry, Mall, Men, Money, Music, Pets, Shoes, Shopping, Skin, Skins, Something, Women, X

Attractions:
Explore our new park at HOME
New Racetrack at CAR
WEAPONS Region Now Open!

Ordinal Malaprop

really very ordinary

Join date: 9 Sep 2005

Posts: 4,607

10-28-2007 09:47

Do you mean this one?

http://blog.secondlife.com/2007/09/18/second-life-url-handler-exploit/

Known exploits are all warned about in the blog - they're generally dealt with very quickly. I don't know of any URL-related exploits apart from that one, it only affects Windows with Internet Explorer as default browser, and I don't think it can be activated from within SL (though I'm not sure about that last part, best not to try with your main account).

edit: and won't affect the latest client either

_____________________

http://ordinalmalaprop.com/forum/ - visit Ordinal's Scripting Colloquium for scripting discussion with actual working BBCode!

http://ordinalmalaprop.com/engine/ - An Engine Fit For My Proceeding, my Aethernet Journal

http://www.flickr.com/groups/slgriefbuild/ - Second Life Griefbuild Digest, pictures of horrible ad griefing and land spam, and the naming of names

Sally Silvera

live music maniac

Join date: 17 Feb 2007

Posts: 2,325

10-28-2007 11:13

Actually I and several friends of mine got this IM through a few groups earlier today as well. Was wondering whether there was any truth in it.

_____________________

Ordinal Malaprop

really very ordinary

Join date: 9 Sep 2005

Posts: 4,607

10-28-2007 11:17

Anything which has such little detail I would suspect of being just the SL equivalent of an emailed "virus warning" i.e. rubbish.

_____________________

http://ordinalmalaprop.com/forum/ - visit Ordinal's Scripting Colloquium for scripting discussion with actual working BBCode!

http://ordinalmalaprop.com/engine/ - An Engine Fit For My Proceeding, my Aethernet Journal

http://www.flickr.com/groups/slgriefbuild/ - Second Life Griefbuild Digest, pictures of horrible ad griefing and land spam, and the naming of names

Raymond Figtree

Gone, avi, gone

Join date: 17 May 2006

Posts: 6,256

10-28-2007 11:27

I was a bit suspicious when this link came up: http://www.analprobeyouravatar.com.

Maybe my avatar would be happier with those folks...

_____________________

Read or listen to some Eckhart Tolle. You won't regret it.

Ordinal Malaprop

really very ordinary

Join date: 9 Sep 2005

Posts: 4,607

10-28-2007 11:32

From: Raymond Figtree

I was a bit suspicious when this link came up: http://www.analprobeyouravatar.com.

Maybe my avatar would be happier with those folks...

Sir, kindly keep your personal service advertisements to the appropriate forums.

_____________________

http://ordinalmalaprop.com/forum/ - visit Ordinal's Scripting Colloquium for scripting discussion with actual working BBCode!

http://ordinalmalaprop.com/engine/ - An Engine Fit For My Proceeding, my Aethernet Journal

http://www.flickr.com/groups/slgriefbuild/ - Second Life Griefbuild Digest, pictures of horrible ad griefing and land spam, and the naming of names

Ordinal Malaprop

really very ordinary

Join date: 9 Sep 2005

Posts: 4,607

10-28-2007 11:36

Oh, and having just seen this thread:
/327/a2/219738/1.html
I have to say "for goodness' sakes never enter your name and password anywhere that you are not 100% super-sure with cherries on top about, and certainly not into some site somewhere that someone has spammed you regarding".

_____________________

http://ordinalmalaprop.com/forum/ - visit Ordinal's Scripting Colloquium for scripting discussion with actual working BBCode!

http://ordinalmalaprop.com/engine/ - An Engine Fit For My Proceeding, my Aethernet Journal

http://www.flickr.com/groups/slgriefbuild/ - Second Life Griefbuild Digest, pictures of horrible ad griefing and land spam, and the naming of names

Alyx Sands

Mental Mentor Linguist

Join date: 17 Feb 2007

Posts: 2,432

10-28-2007 11:53

From: Ordinal Malaprop

Oh, and having just seen this thread:
/327/a2/219738/1.html
I have to say "for goodness' sakes never enter your name and password anywhere that you are not 100% super-sure with cherries on top about, and certainly not into some site somewhere that someone has spammed you regarding".

One would assume that by now, everyone knows about being careful about entering any personal info anywhere....

_____________________

~~I'm a linguist. RL sucks, but right now it's decided to be a little less nasty to me - you can still be nice to me if you want! ~~
->Potestatem obscuri lateris nescitis.<-

Aniela Szondi

Registered User

Join date: 8 Jul 2007

Posts: 43

10-28-2007 12:38

In fact, I am talking about other ways to act in bad way. I meant bad things happening FROM INSIDE SL.

I got so many warning about dont take OBJECTS being offered because when they went to inventory POOF! , all lindens were gone. Or your avatar will be taken. I dont know if this is possible.

Again, SL staff must post some official document saying what is truth and what is myth. Doing that we will know how deal. In short, is enough have terrorism in RL, dont need it on SL too. I even dont get any welcome card, nothing coming from someone I dont know.

If they are more people doing that, may you realize how bad this can become to SL business?

So, please, people and SL staff, we need to know what is truth, what is not truth.

Har Fairweather

Registered User

Join date: 24 Jan 2007

Posts: 2,320

10-28-2007 12:48

From: Aniela Szondi

In fact, I am talking about other ways to act in bad way. I meant bad things happening FROM INSIDE SL.

I got so many warning about dont take OBJECTS being offered because when they went to inventory POOF! , all lindens were gone. Or your avatar will be taken. I dont know if this is possible.

Again, SL staff must post some official document saying what is truth and what is myth. Doing that we will know how deal. In short, is enough have terrorism in RL, dont need it on SL too. I even dont get any welcome card, nothing coming from someone I dont know.

If they are more people doing that, may you realize how bad this can become to SL business?

So, please, people and SL staff, we need to know what is truth, what is not truth.

I feel your pain. The best advice I ever saw was the title of a book: Only The Paranoid Survive.

The author was Andy Grove, he who built Intel up into the world-dominating computing power it is, so he should be taken seriously. Word.

Rebecca Proudhon

(TM)

Join date: 3 May 2006

Posts: 1,686

10-28-2007 13:20

In other games such a warcraft, people get tricked to click on a web link that have Keyloggers (trojan viruses) that can log all your keystrokes and figure out what your password is because it sends all keystrokes back to the person that has that web page. Once they have your password then they can steal your account, and transfer your lindens somewhere. I would guess that the amount of these Scams will increase in SL, especially with open source and such lax, irresponsible security and wild west mentality.

I don't know if there is any truth to the scare that is going around that there are now ways to automatically steal an account with just an object or Tp requests or group join requests as some people seem to be saying, but I do know that anything that can send you to a unknown Web link is going to be risky.

Of course if you have good, up to date virus and spyware protection and a firewall and they are all updated daily then they should block trojans.

If you get a spoofed page that asks for your username and password, you deserve to lose if you are silly enough to type in that info or go to random links some stranger sends you.

The truth about stole things on SL
Aniela Szondi Registered User Join date: 8 Jul 2007 Posts: 43	10-28-2007 08:44 Hello there, Forgive me if here is not the right place to post that but I think it should be very great if SL developers make a document and post it on SL site and blog, telling about the possibility of have stuff and lindens stoled from someone. If this is a myth or something like that, I think it´s time to make clear. Since I started on Sl, I already got several warnings about links, objects and so on that could be take lindens people have in their accounts. I dont saw at any part something clearing that. Today I received this one: "IMPORTANT WARNING: to all the members of LA CITTADELLA we communicates that a serious fraud is in progress on Second Life: an invitation is sent with a link, if it is accepted your avatar is stolen. The people that take possession of the avatar take possession of all the powers and obviously also of the data of the credit card." So, please, could we have an official document from SL developers saying what is possible, what is not possible, how it works, how SL residents can self-protect, etc? I think it would be very nice from SL staff. Thank you very much in advance! Warm regards, Aniela Szondi p.s.: If someone here knows a better place to post this note, please feel free to do it.
Xplorer Cannoli Cache Cleaner Join date: 18 Sep 2005 Posts: 1,131	10-28-2007 09:34 links within notes, even if they are for a warning, should not be clicked. if you are ever in doubt, check the blog or the forums, but never the links provided in the warnings. _____________________ Region Names for a Themed Shopping Experience: New Region: Gifts Accessories, Art, Avatars, Cars, Clothes, Clothing, Fashion, Fashions, Furnishings, Furniture, Gadgets, Games, Gifts, Hair, Jewellery, Jewelry, Mall, Men, Money, Music, Pets, Shoes, Shopping, Skin, Skins, Something, Women, X Attractions: Explore our new park at HOME New Racetrack at CAR WEAPONS Region Now Open!
Ordinal Malaprop really very ordinary Join date: 9 Sep 2005 Posts: 4,607	10-28-2007 09:47 Do you mean this one? http://blog.secondlife.com/2007/09/18/second-life-url-handler-exploit/ Known exploits are all warned about in the blog - they're generally dealt with very quickly. I don't know of any URL-related exploits apart from that one, it only affects Windows with Internet Explorer as default browser, and I don't think it can be activated from within SL (though I'm not sure about that last part, best not to try with your main account). edit: and won't affect the latest client either _____________________ http://ordinalmalaprop.com/forum/ - visit Ordinal's Scripting Colloquium for scripting discussion with actual working BBCode! http://ordinalmalaprop.com/engine/ - An Engine Fit For My Proceeding, my Aethernet Journal http://www.flickr.com/groups/slgriefbuild/ - Second Life Griefbuild Digest, pictures of horrible ad griefing and land spam, and the naming of names
Sally Silvera live music maniac Join date: 17 Feb 2007 Posts: 2,325	10-28-2007 11:13 Actually I and several friends of mine got this IM through a few groups earlier today as well. Was wondering whether there was any truth in it. _____________________
Ordinal Malaprop really very ordinary Join date: 9 Sep 2005 Posts: 4,607	10-28-2007 11:17 Anything which has such little detail I would suspect of being just the SL equivalent of an emailed "virus warning" i.e. rubbish. _____________________ http://ordinalmalaprop.com/forum/ - visit Ordinal's Scripting Colloquium for scripting discussion with actual working BBCode! http://ordinalmalaprop.com/engine/ - An Engine Fit For My Proceeding, my Aethernet Journal http://www.flickr.com/groups/slgriefbuild/ - Second Life Griefbuild Digest, pictures of horrible ad griefing and land spam, and the naming of names
Raymond Figtree Gone, avi, gone Join date: 17 May 2006 Posts: 6,256	10-28-2007 11:27 I was a bit suspicious when this link came up: http://www.analprobeyouravatar.com. Maybe my avatar would be happier with those folks... _____________________ Read or listen to some Eckhart Tolle. You won't regret it.
Ordinal Malaprop really very ordinary Join date: 9 Sep 2005 Posts: 4,607	10-28-2007 11:32 From: Raymond Figtree I was a bit suspicious when this link came up: http://www.analprobeyouravatar.com. Maybe my avatar would be happier with those folks... Sir, kindly keep your personal service advertisements to the appropriate forums. _____________________ http://ordinalmalaprop.com/forum/ - visit Ordinal's Scripting Colloquium for scripting discussion with actual working BBCode! http://ordinalmalaprop.com/engine/ - An Engine Fit For My Proceeding, my Aethernet Journal http://www.flickr.com/groups/slgriefbuild/ - Second Life Griefbuild Digest, pictures of horrible ad griefing and land spam, and the naming of names
Ordinal Malaprop really very ordinary Join date: 9 Sep 2005 Posts: 4,607	10-28-2007 11:36 Oh, and having just seen this thread: /327/a2/219738/1.html I have to say "for goodness' sakes never enter your name and password anywhere that you are not 100% super-sure with cherries on top about, and certainly not into some site somewhere that someone has spammed you regarding". _____________________ http://ordinalmalaprop.com/forum/ - visit Ordinal's Scripting Colloquium for scripting discussion with actual working BBCode! http://ordinalmalaprop.com/engine/ - An Engine Fit For My Proceeding, my Aethernet Journal http://www.flickr.com/groups/slgriefbuild/ - Second Life Griefbuild Digest, pictures of horrible ad griefing and land spam, and the naming of names
Alyx Sands Mental Mentor Linguist Join date: 17 Feb 2007 Posts: 2,432	10-28-2007 11:53 From: Ordinal Malaprop Oh, and having just seen this thread: /327/a2/219738/1.html I have to say "for goodness' sakes never enter your name and password anywhere that you are not 100% super-sure with cherries on top about, and certainly not into some site somewhere that someone has spammed you regarding". One would assume that by now, everyone knows about being careful about entering any personal info anywhere.... _____________________ ~~I'm a linguist. RL sucks, but right now it's decided to be a little less nasty to me - you can still be nice to me if you want! ~~ ->Potestatem obscuri lateris nescitis.<-
Aniela Szondi Registered User Join date: 8 Jul 2007 Posts: 43	10-28-2007 12:38 In fact, I am talking about other ways to act in bad way. I meant bad things happening FROM INSIDE SL. I got so many warning about dont take OBJECTS being offered because when they went to inventory POOF! , all lindens were gone. Or your avatar will be taken. I dont know if this is possible. Again, SL staff must post some official document saying what is truth and what is myth. Doing that we will know how deal. In short, is enough have terrorism in RL, dont need it on SL too. I even dont get any welcome card, nothing coming from someone I dont know. If they are more people doing that, may you realize how bad this can become to SL business? So, please, people and SL staff, we need to know what is truth, what is not truth.
Har Fairweather Registered User Join date: 24 Jan 2007 Posts: 2,320	10-28-2007 12:48 From: Aniela Szondi In fact, I am talking about other ways to act in bad way. I meant bad things happening FROM INSIDE SL. I got so many warning about dont take OBJECTS being offered because when they went to inventory POOF! , all lindens were gone. Or your avatar will be taken. I dont know if this is possible. Again, SL staff must post some official document saying what is truth and what is myth. Doing that we will know how deal. In short, is enough have terrorism in RL, dont need it on SL too. I even dont get any welcome card, nothing coming from someone I dont know. If they are more people doing that, may you realize how bad this can become to SL business? So, please, people and SL staff, we need to know what is truth, what is not truth. I feel your pain. The best advice I ever saw was the title of a book: Only The Paranoid Survive. The author was Andy Grove, he who built Intel up into the world-dominating computing power it is, so he should be taken seriously. Word.
Rebecca Proudhon (TM) Join date: 3 May 2006 Posts: 1,686	10-28-2007 13:20 In other games such a warcraft, people get tricked to click on a web link that have Keyloggers (trojan viruses) that can log all your keystrokes and figure out what your password is because it sends all keystrokes back to the person that has that web page. Once they have your password then they can steal your account, and transfer your lindens somewhere. I would guess that the amount of these Scams will increase in SL, especially with open source and such lax, irresponsible security and wild west mentality. I don't know if there is any truth to the scare that is going around that there are now ways to automatically steal an account with just an object or Tp requests or group join requests as some people seem to be saying, but I do know that anything that can send you to a unknown Web link is going to be risky. Of course if you have good, up to date virus and spyware protection and a firewall and they are all updated daily then they should block trojans. If you get a spoofed page that asks for your username and password, you deserve to lose if you are silly enough to type in that info or go to random links some stranger sends you.

Welcome to the Second Life Forums Archive

The truth about stole things on SL