Welcome to the Second Life Forums Archive

These forums are CLOSED. Please visit the new forums HERE

Is AjaxLife safe to use?

Renee Galicia
My virtual doll
Join date: 30 Jun 2008
Posts: 36
09-22-2008 22:01
I have been using AjaxLife for quite a while until my friend ask me this question.

AjaxLife is basically a web browser. You will need to key in your second life user name and password throught this web browser. And it will sent this info to some server which log u into SL?

I'm not sure, but I think there is some kind of risk involve especially if your account info is not encrypted. But it still can be decrypt and copied at the server side.

How about Sleek? Is it safe too? How about Shadow Draft viewer like Kirstens?

All these are not the official viewer of SL. I have to change my account password and stop using these viewers until I'm sure they are safe or SL release a light weight version and a one with shadow draft.
Rika Watanabe
Highly improbable
Join date: 3 Jun 2008
Posts: 245
09-23-2008 01:02
Nothing is ever completely safe, not even breathing.

But you can be reasonably sure that Sleek, Metabolt, CoolViewer, Kirsten's viewer, Nicholaz's viewer are 'safe' in that they do not contain built-in provisions to make it easier for someone to steal your passwords. If you're feeling paranoid, you are free to examine their source code and build your own version, which is why they can reasonably be termed 'safe' -- should they have contained provisions for stealing passwords, someone would have discovered it by now and there would be a court case.

Ajaxlife and other web-based client implementations are slightly different though. While Ajaxlife in particular has the source code published, and that source code is known not to contain provisions to steal your passwords, you have no way of knowing whether the code that is running on a server is actually the one that is published, and it is a matter of trust. But since you have the option of putting up your own Ajaxlife server, you can avoid trusting anyone.

Regardless of that, stealing your password is still a criminal offence, official client or not.
_____________________
If we knew what we were doing, it wouldn't be research.

Clever Things -- Scripted gadgets, MystiTool plugins.
http://slurl.com/secondlife/Takalo/248/218/144
HoneyBear Lilliehook
Owner, The Mall at Cherry
Join date: 18 Jun 2007
Posts: 4,500
09-23-2008 10:58
I've used it for months. No issues at all.

If you use it, donate to Katharine's website, please :)
_____________________
Virtual Freebies now has its own domain!
URL=http://virtualfreebiesblog.com

The Mall at Cherry Park - new vendors, new look!
dandellion Kimban
Registered User
Join date: 9 Nov 2007
Posts: 7
09-29-2008 09:27
Well, in short you are entering your username and password to a server not maintained by LL. So that's risk. And, in the case of AjaxLife it's been said so. It's a question of trust. I've been using AjaxLife with no problems. And I, for my own reasons, do trust Katherine that she doesn't store passwords.
HoneyBear Lilliehook
Owner, The Mall at Cherry
Join date: 18 Jun 2007
Posts: 4,500
09-29-2008 09:39
I've had no problems with it :)
_____________________
Virtual Freebies now has its own domain!
URL=http://virtualfreebiesblog.com

The Mall at Cherry Park - new vendors, new look!
Gabriele Graves
Always and Forever, FULL
Join date: 23 Apr 2007
Posts: 6,205
09-29-2008 17:07
I would like to point out that putting your name and password into LL's web site also carries some risks.

LL has been hacked before, peoples accounts have been hacked before - nothing on the internet is 100% safe.

AjaxLife has a good reputation, I use it a lot - there have been no incidents of people saying they used it and they got hacked to date.
Word would spread quickly and people would stop using it and change their passwords (which is a good thing to do often anyway).