Welcome to the Second Life Forums Archive

These forums are CLOSED. Please visit the new forums HERE

Is an exploit driving up classifieds prices?

Wildefire Walcott
Heartbreaking
Join date: 8 Nov 2005
Posts: 2,156
07-14-2008 08:15
On another forum I made some observations regarding a L$500,001 classified I saw last night for a furniture store (which, if paid every week, would cost the advertiser nearly $100,000 USD a year). Well a couple people in that thread mentioned that there is a known exploit with Classifieds where you can basically get an infinitely-renewing classified by only paying for it one time. Apparently several people have replicated this issue, and there is now a JIRA for it.

I wonder how long this has been going on? And how many of the L$200K+ classifieds currently running are actually being paid for?

Here's the Jira for this issue. Seems like one worth voting for:
http://jira.secondlife.com/browse/SVC-2641

Please note that while I question whether the aforementioned furniture business is making enough to justify that ad, I am not accusing them of using the exploit... this is just how I learned about the problem.
_____________________
Desperation Isle Estates: Great prices, great neighbors, great service!
http://desperationisle.blogspot.com/

New Desperation Isle: The prettiest BDSM Playground and Fetish Mall in SL!
http://desperationisle.com/

Desperation Isle Productions: Skyboxes for lots (and budgets) of all sizes!
Ciaran Laval
Mostly Harmless
Join date: 11 Mar 2007
Posts: 7,951
07-14-2008 08:18
Would you risk running such an expensive ad with a known exploit? I could see it if it were L$50 and someone would pretend they didn't notice, but at that price? Surely you're risking everything.
Wildefire Walcott
Heartbreaking
Join date: 8 Nov 2005
Posts: 2,156
07-14-2008 08:25
From: Ciaran Laval
Would you risk running such an expensive ad with a known exploit? I could see it if it were L$50 and someone would pretend they didn't notice, but at that price? Surely you're risking everything.

Well if you read how the exploit works, there's really not much to lose.
_____________________
Desperation Isle Estates: Great prices, great neighbors, great service!
http://desperationisle.blogspot.com/

New Desperation Isle: The prettiest BDSM Playground and Fetish Mall in SL!
http://desperationisle.com/

Desperation Isle Productions: Skyboxes for lots (and budgets) of all sizes!
FD Spark
Prim & Texture Doodler
Join date: 30 Oct 2006
Posts: 4,697
07-14-2008 08:27
I have no clue if they are or not personally but I always wonder even after search had changed why people were paying so much and how could they possibly afford that.
If it is exploit one would think Linden Lab's would do something about it because they be losing money in long run because of it, unless they have use for it.
_____________________
Look for my alt Dagon Xanith on Youtube.com

Newest video is

Loneliness by Duo Zikr DX's Alts & SL Art Death of Avatar
Ciaran Laval
Mostly Harmless
Join date: 11 Mar 2007
Posts: 7,951
07-14-2008 08:29
It says the linden dollar balance was in the red, unless the person running the classified isn't the person running the store then it would cause a problem and surely Linden Lab would eventually match up the accounts.

I haven't noticed this issue myself, so it's not a consistent bug.
Wildefire Walcott
Heartbreaking
Join date: 8 Nov 2005
Posts: 2,156
07-14-2008 08:37
From: Ciaran Laval
It says the linden dollar balance was in the red, unless the person running the classified isn't the person running the store then it would cause a problem and surely Linden Lab would eventually match up the accounts.

If it's an unverified alt running the classified (and you posted the ad from your local Starbucks), and the one-time classified fee money came from an external source, such as SLX or an eBay seller, LL would have no way to associate the avatar with the business.

Also, I reckon that most balance-related account freezing is scripted/automatic, so it might never even be investigated by a human being until someone inquired about it.
_____________________
Desperation Isle Estates: Great prices, great neighbors, great service!
http://desperationisle.blogspot.com/

New Desperation Isle: The prettiest BDSM Playground and Fetish Mall in SL!
http://desperationisle.com/

Desperation Isle Productions: Skyboxes for lots (and budgets) of all sizes!
Cristalle Karami
Lady of the House
Join date: 4 Dec 2006
Posts: 6,222
07-14-2008 08:40
In the past, you didn't auto-renew if you didn't have the money. I'm not sure when that got broken.
_____________________
Affordable & beautiful apartments & homes starting at 150L/wk! Waterfront homes, 575L/wk & 300 prims!

House of Cristalle low prim prefabs: secondlife://Cristalle/111/60

http://cristalleproperties.info
http://careeningcristalle.blogspot.com - Careening, A SL Sailing Blog
Tegg Bode
FrootLoop Roo Overlord
Join date: 12 Jan 2007
Posts: 5,707
07-14-2008 08:45
Ahh, another great use for infinate numbers of anonymous unverified alt accounts.
Lindens know of it and are working on it apparently.
Last time I brought this up the thread got deleted, as I guess everyone and their dog would start using it if it became common knowledge.
_____________________
Level 38 Builder [Roo Clan]

Free Waterside & Roadside Vehicle Rez Platform, Desire (88, 17, 107)

Avatars & Roadside Seaview shops and vendorspace for rent, $2.00/prim/week, Desire (175,48,107)
Ciaran Laval
Mostly Harmless
Join date: 11 Mar 2007
Posts: 7,951
07-14-2008 08:46
From: Wildefire Walcott
If it's an unverified alt running the classified (and you posted the ad from your local Starbucks), and the one-time classified fee money came from an external source, such as SLX or an eBay seller, LL would have no way to associate the avatar with the business.


The guy running the particular ad that has been mentioned though, is very much part of the store the ad is being run for and has items for sale in there.
Wildefire Walcott
Heartbreaking
Join date: 8 Nov 2005
Posts: 2,156
07-14-2008 08:47
From: Ciaran Laval
The guy running the particular ad that has been mentioned though, is very much part of the store the ad is being run for and has items for sale in there.

Yes, that's why I added to my post that I'm not at all accusing that particular store of the exploit. This is just how I learned about it.
_____________________
Desperation Isle Estates: Great prices, great neighbors, great service!
http://desperationisle.blogspot.com/

New Desperation Isle: The prettiest BDSM Playground and Fetish Mall in SL!
http://desperationisle.com/

Desperation Isle Productions: Skyboxes for lots (and budgets) of all sizes!
Dante Tucker
Purple
Join date: 8 Aug 2006
Posts: 806
07-14-2008 08:50
Actualy if the reporter of that jira issue had tested this for just a bit longer he would have found his alt's account suspended.

You don't have to get your L balance that far into the negative before you get an automated account suspension.

I have seen people have it happen to them just from group liabilities putting them in the red.
Wildefire Walcott
Heartbreaking
Join date: 8 Nov 2005
Posts: 2,156
07-14-2008 08:53
From: Dante Tucker
Actualy if the reporter of that jira issue had tested this for just a bit longer he would have found his alt's account suspended.

You don't have to get your L balance that far into the negative before you get an automated account suspension.

I have seen people have it happen to them just from group liabilities putting them in the red.

Should it happen at all, though? I mean, unverified alts are expendable. Why doesn't SL just... not publish the classified if you don't have the L$ for it?
_____________________
Desperation Isle Estates: Great prices, great neighbors, great service!
http://desperationisle.blogspot.com/

New Desperation Isle: The prettiest BDSM Playground and Fetish Mall in SL!
http://desperationisle.com/

Desperation Isle Productions: Skyboxes for lots (and budgets) of all sizes!
Cristalle Karami
Lady of the House
Join date: 4 Dec 2006
Posts: 6,222
07-14-2008 08:55
From: Wildefire Walcott
Should it happen at all, though? I mean, unverified alts are expendable. Why doesn't SL just... not publish the classified if you don't have the L$ for it?

It used to be that way. When it broke is questionable.
_____________________
Affordable & beautiful apartments & homes starting at 150L/wk! Waterfront homes, 575L/wk & 300 prims!

House of Cristalle low prim prefabs: secondlife://Cristalle/111/60

http://cristalleproperties.info
http://careeningcristalle.blogspot.com - Careening, A SL Sailing Blog
Dante Tucker
Purple
Join date: 8 Aug 2006
Posts: 806
07-14-2008 08:57
From: Wildefire Walcott
Should it happen at all, though? I mean, unverified alts are expendable. Why doesn't SL just... not publish the classified if you don't have the L$ for it?


Well look at it this way. If the classified is for a small amount they may get a few weeks out of the account.

But for large pay classifieds It won't be able to renew without killing the account, so they are still going to be paying as much as if they were not trying to cheat the system.
Cherry Czervik
Came To Her Senses
Join date: 18 Feb 2006
Posts: 3,680
07-14-2008 08:57
I've always wondered how some people can afford to run such expensive Classifieds. Thanks for that Wildfire ... explains a thing or two.
_____________________
To exchange power is sublime. To steal from another ... well, what goes around comes around.
Viktoria Dovgal
Join date: 29 Jul 2007
Posts: 3,593
07-14-2008 09:00
The RL people behind that particular classified would have that kind of money to burn, but yeah, it is a little strange how many there are at those kinds of rates.
_____________________
Avion Raymaker
Palacio del Emperador!
Join date: 18 Jun 2007
Posts: 980
07-14-2008 11:10
I think the experiment in the Jira might not be giving an accurate answer, since it was for a 50L ad, and the account only went 150L negative. There are very likely time limits in conjunction with amount limits for suspending accounts that the public doesn't know about, and shouldn't know about.

Has anybody actually tried purchasing a classified for more Linden dollars than what you have in your account, and also with the $US source cut off?
Avion Raymaker
Palacio del Emperador!
Join date: 18 Jun 2007
Posts: 980
07-14-2008 11:19
From: Wildefire Walcott
On another forum I made some observations regarding a L$500,001 classified I saw last night for a furniture store (which, if paid every week, would cost the advertiser nearly $100,000 USD a year).


What I found odd and unexplainable a few weeks ago (unless I was reading the results wrong) was in a search of all classifieds, with no search terms, there was a 500,000 L ad, and the next one was a 250,000 L ad. So, the 500,000 L ad was no more prominent or useful than if it had cost 250,001 L. So why would someone utterly waste 249,999 L? Any theories?

I realize that ads get paid for and expire at all different times, so maybe there are occasional snapshots-in-time that produce bizarre results like that.
Darien Caldwell
Registered User
Join date: 12 Oct 2006
Posts: 3,127
07-14-2008 12:31
From: Wildefire Walcott
If it's an unverified alt running the classified (and you posted the ad from your local Starbucks), and the one-time classified fee money came from an external source, such as SLX or an eBay seller, LL would have no way to associate the avatar with the business.

Also, I reckon that most balance-related account freezing is scripted/automatic, so it might never even be investigated by a human being until someone inquired about it.


Well, I don't think complete strangers take out 500,000L ads for people they don't know, so I think it would be safe to assume the 'unknown alt' belonged to the person in the ad.

However like many have said, they won't get away with this for long.

What I think many people dont' realize is, just how much money some creators make in SL. And many do it to win, not to make money. I suspect some people are paying most or all of their earnings from their business into classifieds. Sounds crazy, unless you just think of SL like a game, and aren't worried about making money. (and I suppose that sounds crazy too)

I'll tell you this, there are some creators in SL who are making 6 figure and possibly 7 figure yearly sales (US Dollar) from SL. And you can take that to the bank.
_____________________
Wildefire Walcott
Heartbreaking
Join date: 8 Nov 2005
Posts: 2,156
07-14-2008 12:34
From: Avion Raymaker
What I found odd and unexplainable a few weeks ago (unless I was reading the results wrong) was in a search of all classifieds, with no search terms, there was a 500,000 L ad, and the next one was a 250,000 L ad. So, the 500,000 L ad was no more prominent or useful than if it had cost 250,001 L. So why would someone utterly waste 249,999 L? Any theories?

Assuming it's a legitimate classified, I'm guessing that many of the people with classifieds over 200K/week are wealthy outside of SL and are just pricing their ads to prevent any competition. They're rich enough in RL for the money they spend on classifieds to just be part of the game. While there may be some people in SL making that kind of money- where you can afford 100K USD in advertising with no RL funding- it's got to be low double-digits, if that.
_____________________
Desperation Isle Estates: Great prices, great neighbors, great service!
http://desperationisle.blogspot.com/

New Desperation Isle: The prettiest BDSM Playground and Fetish Mall in SL!
http://desperationisle.com/

Desperation Isle Productions: Skyboxes for lots (and budgets) of all sizes!
Wildefire Walcott
Heartbreaking
Join date: 8 Nov 2005
Posts: 2,156
07-14-2008 12:39
From: Darien Caldwell
What I think many people dont' realize is, just how much money some creators make in SL. And many do it to win, not to make money. I suspect some people are paying most or all of their earnings from their business into classifieds. Sounds crazy, unless you just think of SL like a game, and aren't worried about making money. (and I suppose that sounds crazy too)

Yep, I have the same theory there. And I do know some people are doing incredibly well in SL... but I also know there is a limit.
_____________________
Desperation Isle Estates: Great prices, great neighbors, great service!
http://desperationisle.blogspot.com/

New Desperation Isle: The prettiest BDSM Playground and Fetish Mall in SL!
http://desperationisle.com/

Desperation Isle Productions: Skyboxes for lots (and budgets) of all sizes!
Troy Vogel
Marginal Prof. of ZOMG!
Join date: 16 Aug 2004
Posts: 478
07-14-2008 13:00
From: Wildefire Walcott
On another forum I made some observations regarding a L$500,001 classified I saw last night for a furniture store (which, if paid every week, would cost the advertiser nearly $100,000 USD a year). Well a couple people in that thread mentioned that there is a known exploit with Classifieds where you can basically get an infinitely-renewing classified by only paying for it one time. Apparently several people have replicated this issue, and there is now a JIRA for it.

I wonder how long this has been going on? And how many of the L$200K+ classifieds currently running are actually being paid for?

Here's the Jira for this issue. Seems like one worth voting for:
http://jira.secondlife.com/browse/SVC-2641

Please note that while I question whether the aforementioned furniture business is making enough to justify that ad, I am not accusing them of using the exploit... this is just how I learned about the problem.



Classifieds is crazy. No one makes that kind of money from Furniture. I tell ya.

I find it weird that I make like what 5000 lindens a week and then turn around and have to spent 2K of it on classifieds.

At some point I used to advertise on classifieds for 15,000lindens but I gave up on that when I could no longer afford it.

And now this news about an exploit sucks ass.
Yumi Murakami
DoIt!AttachTheEarOfACat!
Join date: 27 Sep 2005
Posts: 6,860
07-14-2008 13:57
Ok folks..

I have just confirmed that there IS an exploit.

Using it you can place an L$99999999 ad for L$50.

Yes, I did it and I saw it right there: an ad placed at the very top of Browse for L$50. See here: http://www.bijodesign.com/classifiedexploit.png (ignore Devil's Moon - that just happens to be where my alt was). Of course I've deleted it now.

I have submitted this to the security section of JIRA.
Wildefire Walcott
Heartbreaking
Join date: 8 Nov 2005
Posts: 2,156
07-14-2008 14:28
From: Yumi Murakami
Ok folks..

I have just confirmed that there IS an exploit.

Using it you can place an L$99999999 ad for L$50.

Yes, I did it and I saw it right there: an ad placed at the very top of Browse for L$50. See here: http://www.bijodesign.com/classifiedexploit.png (ignore Devil's Moon - that just happens to be where my alt was). Of course I've deleted it now.

I have submitted this to the security section of JIRA.

That is amazing. Thanks, Yumi.

Also, are you saying there's a new JIRA for this? If so, have the link?
_____________________
Desperation Isle Estates: Great prices, great neighbors, great service!
http://desperationisle.blogspot.com/

New Desperation Isle: The prettiest BDSM Playground and Fetish Mall in SL!
http://desperationisle.com/

Desperation Isle Productions: Skyboxes for lots (and budgets) of all sizes!
Yumi Murakami
DoIt!AttachTheEarOfACat!
Join date: 27 Sep 2005
Posts: 6,860
07-14-2008 14:33
From: Wildefire Walcott
That is amazing. Thanks, Yumi.

Also, are you saying there's a new JIRA for this? If so, have the link?


It's SEC-118, but as it's a security exploit it's not viewable nor votable.
1 2 3 4 5 6