Welcome to the Second Life Forums Archive

These forums are CLOSED. Please visit the new forums HERE

Third Party Viewer Policy coming soon

Rene Erlanger
Scuderia Shapes & Skins G
Join date: 28 Sep 2006
Posts: 2,008
10-22-2009 06:22
From: Kitty Barnett
The lock analogy is rather useless because everyone will have the key to the lock sitting right on their own computer in the form of the official viewer.

If the official viewer can log on from your computer then any other random viewer will be able to log on and pretend to be the official viewer as well. The only thing the remote end can do is verify the output of the software running on the client, it can simply not know *what* software was used to generate it.

You finally figured it out. Except that it has nothing to do with LL; any service that accepts and acts on random remote connections has no way to verify what's running on the remote computer.



I understand your points, but one (or LL) can't sit back and do nothing!!

In RL we go about our daily lives having to abide to rules, regulations & laws.....if we choose to break them and get caught...we pay the consequences.
I think really that's the only deterrent LL can offer, knowing that not much can be done on the technical side.
There are many ways to skin a cat......and if i were developing a copybotter viewer, in the back of mind will be the thought of the possibility of one day having my Viewer ending up on the screen of a Linden Employee. In such a case LL should pursue legal action for illegal use in the SL enviroment.......likewise with suspensions for Residents that choose to use them.

I think long term, that's all that can really be done.


It's the law of averages....you break a rule a hundred times over.....and on the 101st attempt you get caught!
_____________________
Scuderia Group




Plush Enigma Shops: https://slurl.com/secondlife/Plush%20Enigma/50/63/22/
Plush Giga Shops: https://slurl.com/secondlife/Plush%20Giga/202/82/22/
Kitty Barnett
Registered User
Join date: 10 May 2006
Posts: 5,586
10-22-2009 10:00
From: Rene Erlanger
I understand your points, but one (or LL) can't sit back and do nothing!!
I don't think anyone if trying to argue that :).

But if you want to prevent non-certified viewers from connecting (which is something they have no intention of actually doing) or if you want to ban people who use a certain viewer then you're dealing with absolutes: you have to be able to identify a malicious viewer with 100% accuracy.

If there's any possible way for a viewer to masquerade as another - legitimate - viewer then you're not going to be able to either prevent it from connecting, or find who used it and you wasted a few weeks of development time getting things set up with nothing to show for it the second day it's up and running.

The "notecard exploit" was apparantly known about for the better part of a year which is really inexcusable. I'd much rather see LL act prompty on things that are less of a PR success (fixing an exploit that noone or only the reporter knows about won't get you cheers since noone will ever know) than spend time and effort on something that looks good rather than fix the actual root cause.
Meade Paravane
Hedgehog
Join date: 21 Nov 2006
Posts: 4,845
10-22-2009 10:03
From: Rene Erlanger
I understand your points, but one (or LL) can't sit back and do nothing!!!

Like Kitty says, I also don't think anybody is saying that nothing should be done.

What I'm worried about is that something painful and destructive will be done that doesn't do anything to actually help the problem.
_____________________
Tired of shouting clubs and lucky chairs? Vote for llParcelSay!!!
- Go here: http://jira.secondlife.com/browse/SVC-1224
- If you see "if you were logged in.." on the left, click it and log in
- Click the "Vote for it" link on the left
Nika Talaj
now you see her ...
Join date: 2 Jan 2007
Posts: 5,449
10-22-2009 10:48
From: Argent Stonecutter
I would rather they did it by requiring verification from everyone, and making alts just another attribute of an account.
Blondin has mentioned "alt unification" publicly, so perhaps this is a possibility. I would imagine that it would be voluntary, though, so perhaps not so very useful in controlling grid access.
From: Katheryne Helendale
Very! What in pluperfect hell does encrypted chat have to do with content theft - or anything else TOS/CS related? I don't use it; I don't see any use for it; but I don't see why LL is afraid of it either.
It may be for a reason which is not directly related to content theft - crime prevention in general. It is one thing for a business to encrypt IMs by employees (commonly done), another thing for a publicly accessible social networking site which aims to make 3D collaboration simple to do so. Specifically, the feds/CIA etc. may think it less than helpful for LL to provide an IM encryption feature.

ETA: I mean, end-to-end encryption which is not easily decrypted by LL. Encryption PROVIDED by LL for the purposes of preventing general eavesdropping, I could see.
Brenda Connolly
Un United Avatar
Join date: 10 Jan 2007
Posts: 25,000
10-22-2009 10:53
From: Tegg Bode
It's terribly naive to believe locks on your house doors and windows will stop theives, but we still do it anyway. Why do we bother with all the hoop jumping to lock and unlock things if we know it doesn't work?
Are we trying to say that LL has built a grid that they have no access control over and that to have access control is 100% impossibility?


Wow. You've managed to trot out that same tired analogy you used in the Age Verification /Adult Content discussions, dust it off, and get it going here. I AM, impressed Teggster. :p
_____________________
Don't you ever try to look behind my eyes. You don't want to know what they have seen.

http://brenda-connolly.blogspot.com
Rene Erlanger
Scuderia Shapes & Skins G
Join date: 28 Sep 2006
Posts: 2,008
10-22-2009 12:14
From: Meade Paravane
Like Kitty says, I also don't think anybody is saying that nothing should be done.

What I'm worried about is that something painful and destructive will be done that doesn't do anything to actually help the problem.



like everyone keeps saying on this thread...there are no long term technical solutions for copying.

Fair enough, then make the punishment fit the crime (breach of TOS)...so those that choose to operate in that way, when caught....are severely punished. LL should not rule out legal action for those caught developing an "infringing" viewer and being used to log into SL.
If i were LL...i would make the very 1st legal action very high profile in terms of media coverage....that at least will send out a message to all the other script kiddies out there.

Listen...you don't even have to detect these viewers in game....all you need is just 1 person to step forward with information to the Lab where to download it from. LL can test the viewer and view the code...and take it from there. How does everyone know about Cyro Life, Thug Life and Neil Life....word of mouth & Forums of course.....LL knows them too!
_____________________
Scuderia Group




Plush Enigma Shops: https://slurl.com/secondlife/Plush%20Enigma/50/63/22/
Plush Giga Shops: https://slurl.com/secondlife/Plush%20Giga/202/82/22/
Milla Janick
Empress Of The Universe
Join date: 2 Jan 2008
Posts: 3,075
10-22-2009 12:41
From: Rene Erlanger
I understand your points, but one (or LL) can't sit back and do nothing!!

Just as long as in the rush to do something, they don't make things worse.
_____________________


http://www.avatarsunited.com/avatars/milla-janick
All those moments will be lost in time... like tears in rain...
Tegg Bode
FrootLoop Roo Overlord
Join date: 12 Jan 2007
Posts: 5,707
10-22-2009 13:17
From: Kitty Barnett
The lock analogy is rather useless because everyone will have the key to the lock sitting right on their own computer in the form of the official viewer.

If the official viewer can log on from your computer then any other random viewer will be able to log on and pretend to be the official viewer as well. The only thing the remote end can do is verify the output of the software running on the client, it can simply not know *what* software was used to generate it.

You finally figured it out. Except that it has nothing to do with LL; any service that accepts and acts on random remote connections has no way to verify what's running on the remote computer.

So LL, WoW, and Online Banking shouldn't bother trying at all?
_____________________
Level 38 Builder [Roo Clan]

Free Waterside & Roadside Vehicle Rez Platform, Desire (88, 17, 107)

Avatars & Roadside Seaview shops and vendorspace for rent, $2.00/prim/week, Desire (175,48,107)
Tegg Bode
FrootLoop Roo Overlord
Join date: 12 Jan 2007
Posts: 5,707
10-22-2009 13:19
From: Kitty Barnett
I don't think anyone if trying to argue that :).

I think tthere are a lot of people arguing exactly that, they don't want LL to attempt anything at all incase it makes them jump through even one more hoop or god forbid lose any of their their god given right to 100% worldwide anomyinity.
_____________________
Level 38 Builder [Roo Clan]

Free Waterside & Roadside Vehicle Rez Platform, Desire (88, 17, 107)

Avatars & Roadside Seaview shops and vendorspace for rent, $2.00/prim/week, Desire (175,48,107)
Tegg Bode
FrootLoop Roo Overlord
Join date: 12 Jan 2007
Posts: 5,707
10-22-2009 13:24
From: Brenda Connolly
Wow. You've managed to trot out that same tired analogy you used in the Age Verification /Adult Content discussions, dust it off, and get it going here. I AM, impressed Teggster. :p


And yet again we still have no shortage of people campainging for absoutely nothing to ever be done for fear of losing som misconseption that they and theives have a god given right to remain completely anoymnous.

Passwords aren't 100% effective either so might as well remove them to, they are a waste of time too.

Drivers Licences and car registration don't stop people having accidents or driving around without them so they are a failure too, why should anyone have to identify themselves in any incident on the road when there are people out there using false plates and licences.
_____________________
Level 38 Builder [Roo Clan]

Free Waterside & Roadside Vehicle Rez Platform, Desire (88, 17, 107)

Avatars & Roadside Seaview shops and vendorspace for rent, $2.00/prim/week, Desire (175,48,107)
Meade Paravane
Hedgehog
Join date: 21 Nov 2006
Posts: 4,845
10-22-2009 13:26
From: Tegg Bode
I think tthere are a lot of people arguing exactly that, they don't want LL to attempt anything at all incase it makes them jump through even one more hoop or god forbid lose any of their their god given right to 100% worldwide anomyinity.

So they should do something, ANYTHING, even if it doesn't help the problem at all?
_____________________
Tired of shouting clubs and lucky chairs? Vote for llParcelSay!!!
- Go here: http://jira.secondlife.com/browse/SVC-1224
- If you see "if you were logged in.." on the left, click it and log in
- Click the "Vote for it" link on the left
Rene Erlanger
Scuderia Shapes & Skins G
Join date: 28 Sep 2006
Posts: 2,008
10-22-2009 14:18
From: Meade Paravane
So they should do something, ANYTHING, even if it doesn't help the problem at all?



LL don't have to come up with any technical solutions.....just make the punishment stiffer and enforce it......that and RL information of developers upon registration of 3rd party viewer.

Boy Lane also mentioned there should be some Server side work being done, now I'm not techie enough to know if those changes would help overall

From: Boy Lane


They also ignored the people screaming about content theft for years now, by not fixing server permissions, settings, protocols, you name it. There is a term for it, due dilligence, that LL, one could say after all, intentionally ignored for reasons we don't know or could ever understand.

_____________________
Scuderia Group




Plush Enigma Shops: https://slurl.com/secondlife/Plush%20Enigma/50/63/22/
Plush Giga Shops: https://slurl.com/secondlife/Plush%20Giga/202/82/22/
Milla Janick
Empress Of The Universe
Join date: 2 Jan 2008
Posts: 3,075
10-22-2009 14:32
From: Tegg Bode
And yet again we still have no shortage of people campainging for absoutely nothing to ever be done for fear of losing som misconseption that they and theives have a god given right to remain completely anoymnous.

No, I don't want to see Linden Lab do something for the sake of looking like they're doing something and they kill viewers that have functionality that the LL viewer doesn't. Nothing to do with anonymity. I don't want to lose that functionality while people running the content theft viewers continue along their merry way.
_____________________


http://www.avatarsunited.com/avatars/milla-janick
All those moments will be lost in time... like tears in rain...
Tegg Bode
FrootLoop Roo Overlord
Join date: 12 Jan 2007
Posts: 5,707
10-22-2009 14:40
From: Meade Paravane
So they should do something, ANYTHING, even if it doesn't help the problem at all?

Are you saying that verifying users would have less than 1% effectiveness in preventing or dealing with content theft?
Sure it's not 100% solution, but it sure beets the 0% "stick your head in the sand" solution being called for by many people.
Locks don't stop 100% of theives either but yet wer still jump through hoops using them.
_____________________
Level 38 Builder [Roo Clan]

Free Waterside & Roadside Vehicle Rez Platform, Desire (88, 17, 107)

Avatars & Roadside Seaview shops and vendorspace for rent, $2.00/prim/week, Desire (175,48,107)
Tegg Bode
FrootLoop Roo Overlord
Join date: 12 Jan 2007
Posts: 5,707
10-22-2009 14:41
From: Rene Erlanger
LL don't have to come up with any technical solutions.....just make the punishment stiffer and enforce it......that and RL information of developers upon registration of 3rd party viewer.

Boy Lane also mentioned there should be some Server side work being done, now I'm not techie enough to know if those changes would help overall

You can't punsh people if you allow them the right to infinte free anoymous accounts.
_____________________
Level 38 Builder [Roo Clan]

Free Waterside & Roadside Vehicle Rez Platform, Desire (88, 17, 107)

Avatars & Roadside Seaview shops and vendorspace for rent, $2.00/prim/week, Desire (175,48,107)
Kitty Barnett
Registered User
Join date: 10 May 2006
Posts: 5,586
10-22-2009 14:47
From: Tegg Bode
I think tthere are a lot of people arguing exactly that, they don't want LL to attempt anything at all incase it makes them jump through even one more hoop or god forbid lose any of their their god given right to 100% worldwide anomyinity.
Stroker must have magic powers then since he managed to track down a "no payment info" to take to court without issue. There is no anonymity online, your name and address are always just a few subpoenas away.
Tegg Bode
FrootLoop Roo Overlord
Join date: 12 Jan 2007
Posts: 5,707
10-22-2009 14:48
From: Milla Janick
No, I don't want to see Linden Lab do something for the sake of looking like they're doing something and they kill viewers that have functionality that the LL viewer doesn't. Nothing to do with anonymity. I don't want to lose that functionality while people running the content theft viewers continue along their merry way.

If viewer creators won't submiot their RL details to LL for the priviledge of connecting to their grid, I would have to suspect they have something to hide.

And it's not impossible to stop unauthorised viewers connecting to the grid, many other servers restrict access to their data pretty well, sure a top level hacker can get past anything eventually but we are talking about low skilled content theives, not decent hackers.

Currently we have about 1% protection and many people seem to believe in the 21st century we can't improve this so we shouldn't bother trying anything.
_____________________
Level 38 Builder [Roo Clan]

Free Waterside & Roadside Vehicle Rez Platform, Desire (88, 17, 107)

Avatars & Roadside Seaview shops and vendorspace for rent, $2.00/prim/week, Desire (175,48,107)
Tegg Bode
FrootLoop Roo Overlord
Join date: 12 Jan 2007
Posts: 5,707
10-22-2009 14:51
From: Kitty Barnett
Stroker must have magic powers then since he managed to track down a "no payment info" to take to court without issue. There is no anonymity online, your name and address are always just a few subpoenas away.

Stroker was lucky and willing to put serious cash into the search, you don't hear about the people who haven't been able to be tracked down, and what are you going to do if the thief is tracked down to a small village in heckoslovakia, sue them with the mighty US court system? Or get them extradited for prim piracy?
_____________________
Level 38 Builder [Roo Clan]

Free Waterside & Roadside Vehicle Rez Platform, Desire (88, 17, 107)

Avatars & Roadside Seaview shops and vendorspace for rent, $2.00/prim/week, Desire (175,48,107)
Meade Paravane
Hedgehog
Join date: 21 Nov 2006
Posts: 4,845
10-22-2009 15:01
From: Tegg Bode
Are you saying that verifying users would have less than 1% effectiveness in preventing or dealing with content theft?
Sure it's not 100% solution, but it sure beets the 0% "stick your head in the sand" solution being called for by many people.
Locks don't stop 100% of theives either but yet wer still jump through hoops using them.

So where's the threshold? If it meant alienating, say, 50% of the "good" people who work on the viewer & on bots, would you want LL to implement something that got content creators an extra 0.1% of protection?

What numbers are acceptable to you?
_____________________
Tired of shouting clubs and lucky chairs? Vote for llParcelSay!!!
- Go here: http://jira.secondlife.com/browse/SVC-1224
- If you see "if you were logged in.." on the left, click it and log in
- Click the "Vote for it" link on the left
Kitty Barnett
Registered User
Join date: 10 May 2006
Posts: 5,586
10-22-2009 15:07
From: Tegg Bode
what are you going to do if the thief is tracked down to a small village in heckoslovakia?
You keep insisting that people shouldn't be anonymous, but when it's pointed out that noone is really all that anonymous to begin with you contradict yourself by countering that it's not all that useful to have RL information..... :confused:
Tegg Bode
FrootLoop Roo Overlord
Join date: 12 Jan 2007
Posts: 5,707
10-22-2009 15:32
From: Meade Paravane
So where's the threshold? If it meant alienating, say, 50% of the "good" people who work on the viewer & on bots, would you want LL to implement something that got content creators an extra 0.1% of protection?

What numbers are acceptable to you?

People alienated by the action of simply informing LL who they are for the purposes of the privilage (it's not a god given right) connecting a viewer of their creation to their grid aren't worth trusting in my opinion
_____________________
Level 38 Builder [Roo Clan]

Free Waterside & Roadside Vehicle Rez Platform, Desire (88, 17, 107)

Avatars & Roadside Seaview shops and vendorspace for rent, $2.00/prim/week, Desire (175,48,107)
Tegg Bode
FrootLoop Roo Overlord
Join date: 12 Jan 2007
Posts: 5,707
10-22-2009 15:37
From: Kitty Barnett
You keep insisting that people shouldn't be anonymous, but when it's pointed out that noone is really all that anonymous to begin with you contradict yourself by countering that it's not all that useful to have RL information..... :confused:

Sure you can nearly track anybody down with enough effort and cash, but there always will be some you can't and even if you can you can't touch them short of paying a international hitman, I did not say nobody is capable of being anoymous, so no contradiction there.

You keep insisting that there's nothing that can be done to 100% fix the situation so we should try nothing?
_____________________
Level 38 Builder [Roo Clan]

Free Waterside & Roadside Vehicle Rez Platform, Desire (88, 17, 107)

Avatars & Roadside Seaview shops and vendorspace for rent, $2.00/prim/week, Desire (175,48,107)
Argent Stonecutter
Emergency Mustelid
Join date: 20 Sep 2005
Posts: 20,263
10-22-2009 15:56
From: Tegg Bode

You keep insisting that there's nothing that can be done to 100% fix the situation so we should try nothing?
No. Please re-read for comprehension.
_____________________
Argent Stonecutter - http://globalcausalityviolation.blogspot.com/

"And now I'm going to show you something really cool."

Skyhook Station - http://xrl.us/skyhook23
Coonspiracy Store - http://xrl.us/coonstore
Brenda Connolly
Un United Avatar
Join date: 10 Jan 2007
Posts: 25,000
10-22-2009 16:15
From: Tegg Bode
Sure you can nearly track anybody down with enough effort and cash, but there always will be some you can't and even if you can you can't touch them short of paying a international hitman, I did not say nobody is capable of being anoymous, so no contradiction there.

You keep insisting that there's nothing that can be done to 100% fix the situation so we should try nothing?


No, we should not try any cockamamie scheme LL dreams up. They have shown they can't handle it. They need to start asking for help on these things, or outsourcing SL's management to someone who can.
_____________________
Don't you ever try to look behind my eyes. You don't want to know what they have seen.

http://brenda-connolly.blogspot.com
Kitty Barnett
Registered User
Join date: 10 May 2006
Posts: 5,586
10-22-2009 16:15
From: Tegg Bode
You keep insisting that there's nothing that can be done to 100% fix the situation so we should try nothing?
There's a rather big difference between pointing out that you can't "fingerprint" *malicous* viewers with any kind of accuracy because identifying the client invariably relies on the client being honest about reporting itself which malicious viewers aren't going to do by definition and saying nothing should be done at all.

A year ago (more or less) people reported a permissions exploit to LL which subsequently ignores it until a few weeks ago a/several malicious viewers are freely available which use it to steal content (it's not *all* of the problem they present but it's one of the bigger ones compared to things like copybot) and (some) people start running around shouting that LL should ban all those naughty viewers.

If all that shouting was aimed at LL to ask why on earth they apparantly ignored those reports for the better part of a year then that might maybe be a bit more productive.

Again, it's not the whole problem with those viewers but take out the exploits and they're just a fancy copybot which has been around in various forms for 3 years now and the world hasn't ended so not that much of a big deal there.

---

The other part is being naive in thinking that if you lay down rules that people who are by definition nefarious/malicious are actually going to somehow be impressed or inclined to play by those rules.
1 2 3 4 5 6 7 8 9 10