Welcome to the Second Life Forums Archive

These forums are CLOSED. Please visit the new forums HERE

Is the god mode thing for real?

nimrod Yaffle
Cavemen are people too...
Join date: 15 Nov 2004
Posts: 3,146
06-27-2006 14:45
From: Darkside Eldrich

Okay, maybe that's a bad example... is there a "conspiracy to breach contract" law? I dunno... "accessory to breach of contract"?

There's laws for everything. :p
_____________________
"People can cry much easier than they can change."
-James Baldwin
Yumi Murakami
DoIt!AttachTheEarOfACat!
Join date: 27 Sep 2005
Posts: 6,860
06-27-2006 14:58
From: Darkside Eldrich
If I'm not mistaken, breach of contract is a civil offense. As such, a civilian involved (a party in the contract) has to raise the issue. So it's a moot point if neither party involved in the contact raises the issue of a breach of contract? IANAL, but it seems to me that if no one is "pressing charges," then the only ones that care are a lot of people who are not party to the contract between Eddy Stryker and LL.


I think it is possible, however, that if someone breaks the TOS and LL takes no action, then if LL ever later does need to sue someone else for breaching the TOS, that other person can claim selective enforcement as a defence.

(But from what I gather most lawyers nowadays always claim selective enforcement. And laches, and unclean hands, and every one of the other defences that might have a chance of working. :roll:)
Yiffy Yaffle
Purple SpiritWolf Mystic
Join date: 22 Oct 2004
Posts: 2,802
06-27-2006 16:11
I have used this tool and found it quite helpful. I can edit objects i own from anywhere in sight. No longer do i have to get within 60m of it. I can zoom in on other sims around me and see if a griefer is coming my way. I can also right click on them and open properties then map them to see where they are going. :)

But yes it's only a matter of time before they figure out a way to trick the servers into thinking your a linden. Thats what hacking is all about, finding a way through a tough barrior.
_____________________
Eddy Stryker
libsecondlife Developer
Join date: 6 Jun 2004
Posts: 353
06-27-2006 16:14
From: Yiffy Yaffle
But yes it's only a matter of time before they figure out a way to trick the servers into thinking your a linden. Thats what hacking is all about, finding a way through a tough barrior.


From what I've been told that time has already come and gone. The server does much more rigorous checking to see whether you logged in as a Linden or not before, for example, letting you walk in to a private Linden sim.
Yiffy Yaffle
Purple SpiritWolf Mystic
Join date: 22 Oct 2004
Posts: 2,802
06-27-2006 16:20
If it could let you see hidden sims that would be scary. O.o
_____________________
crucial Armitage
Clothing Designer
Join date: 30 Aug 2004
Posts: 838
06-27-2006 16:27
From: Yiffy Yaffle


But yes it's only a matter of time before they figure out a way to trick the servers into thinking your a linden. That's what hacking is all about, finding a way through a tough barrier.


I'm coming in late on this subject but the above quote is exactly why Linden Labs needs to do something and do something quick to disable this plug in.
It may add a bunch of great features to your second life experience for very Legitimate reasons but it is only a matter of time this will be come a nightmare for every single resident in SL.
someone some where will figure out how to use this to steal and destroy.
Lets face facts there are people that can and will do this sooner or later so I say plug the hole now and plug it fast.
Kane Kent
Registered User
Join date: 2 Jan 2005
Posts: 185
06-27-2006 16:27
I thought this was put in as a joke months back lol...
_____________________
Barrie, Ontario, Canada!
Check Out my Blog!
http://kanehart.com
Make Comments :)
Cory Edo
is on a 7 second delay
Join date: 26 Mar 2005
Posts: 1,851
06-27-2006 16:40
From: Yiffy Yaffle

But yes it's only a matter of time before they figure out a way to trick the servers into thinking your a linden. Thats what hacking is all about, finding a way through a tough barrior.


From: crucial Armitage

I'm coming in late on this subject but the above quote is exactly why Linden Labs needs to do something and do something quick to disable this plug in.


If someone's smart enough to hack the servers to get Linden-level access, then they wouldn't need this program to begin with.
_____________________
www.electricsheepcompany.com
crucial Armitage
Clothing Designer
Join date: 30 Aug 2004
Posts: 838
06-27-2006 16:53
From: Cory Edo
If someone's smart enough to hack the servers to get Linden-level access, then they wouldn't need this program to begin with.


I was refering to further client hacks

not server hacks

the way I see it if some one can wright a hack for the god tools, limited as they may be its just a matter of time that something much worse comes along.

you can be sure when that something worse comes a long we will not know about it till its to late.


I admit That the things the hand of god hack allow are neat and can be put to good use
I see way to many bad things coming from this then good.
and if Linden Labs wanted us to have such a client hack they would of given it to us.
Cory Edo
is on a 7 second delay
Join date: 26 Mar 2005
Posts: 1,851
06-27-2006 17:12
Any activity that would allow someone to "steal and destroy" should be only permitted via server-side permissions, not client-side. (I'm saying "should" as opposed to "are" because I'm assuming LL is smart enough to not allow such things client-side, and because after three years I think that kind of exploit if client-side related would have been found by now).


The kinds of activities you're worried about would inherently be impossible with a client-side program/add-on, because the client side doesn't allow you to perform those activities. Those permissions are set server-side, with your account.

The potential for a server hack is exactly the same as it was previous to the release of this add-on. Actually, it might be less, as the libsecondlife project is allowing more eyes on the code that makes up the SL client, thereby increasing the possibility that potential exploits that would allow server access are found before a malicious user finds them.
_____________________
www.electricsheepcompany.com
Eddy Stryker
libsecondlife Developer
Join date: 6 Jun 2004
Posts: 353
06-27-2006 17:29
From: Cory Edo
Any activity that would allow someone to "steal and destroy" should be only permitted via server-side permissions, not client-side. (I'm saying "should" as opposed to "are" because I'm assuming LL is smart enough to not allow such things client-side, and because after three years I think that kind of exploit if client-side related would have been found by now).


The kinds of activities you're worried about would inherently be impossible with a client-side program/add-on, because the client side doesn't allow you to perform those activities. Those permissions are set server-side, with your account.

The potential for a server hack is exactly the same as it was previous to the release of this add-on. Actually, it might be less, as the libsecondlife project is allowing more eyes on the code that makes up the SL client, thereby increasing the possibility that potential exploits that would allow server access are found before a malicious user finds them.


I've completely given up trying to explain client-server security models in Second Life to 20,000 people, but thank you for your enthusiasm. And to add some facts: multiple people had independently developed God Mode modifications of their own before this one, this is just the first one being released on a wide scale. Before the release the Lindens weren't aware that Show on Map was not checked server side. Whether they change that behavior or not is up in the air, but after the release of this add-on the bug report has been filed and they now know. Had the issue been something more serious like deleting objects, previously you would have had just a select few people with this power and no one would be the wiser. With widespread adoption of these lesser-tested tools bugs can be discovered and fixed, like the Show on Map example.
Baba Yamamoto
baba@slinked.net
Join date: 26 May 2003
Posts: 1,024
06-27-2006 17:35
From: Eddy Stryker
I've completely given up trying to explain client-server security models in Second Life to 20,000 people, but thank you for your enthusiasm. And to add some facts: multiple people had independently developed God Mode modifications of their own before this one, this is just the first one being released on a wide scale. Before the release the Lindens weren't aware that Show on Map was not checked server side. Whether they change that behavior or not is up in the air, but after the release of this add-on the bug report has been filed and they now know. Had the issue been something more serious like deleting objects, previously you would have had just a select few people with this power and no one would be the wiser. With widespread adoption of these lesser-tested tools bugs can be discovered and fixed, like the Show on Map example.


I thought you had given up.
_____________________
Open Metaverse Foundation - http://www.openmetaverse.org

Meerkat viewer - http://meerkatviewer.org
Eddy Stryker
libsecondlife Developer
Join date: 6 Jun 2004
Posts: 353
06-27-2006 17:44
repost oops
Eddy Stryker
libsecondlife Developer
Join date: 6 Jun 2004
Posts: 353
06-27-2006 22:07
Here's an official Linden response from a short chat excerpt with Philip Linden in the Welcome Area on 06/27/06 @ 10:00PM.

From: someone
[21:59] Mark Assia: Hey Philip, have you had a chance to look at that God Mode program they're selling on SLExchange?
[22:00] nimrod Yaffle: Mark, I'm using it right now, all the desructive features are disabled
[22:00] Philip Linden: yes mark
[22:00] Philip Linden: not nice but not in any way dangerous.
[22:00] Philip Linden: yep like nimrod said
KooKooKa Chu
Registered User
Join date: 27 Jun 2006
Posts: 14
06-28-2006 07:20
From: Elle Pollack
From what I hear from two people who work on it, libsecondlife in and of itself will be open source. Probable applications the devs are looking at include controlling NPC avatars and a telnet-like mini client that would allow a text-only (or minimal still pictures) connection into SL.


woot! nice... so I could have a MUD-like text interface for SL :D
ah, nostalgia...
Eddy Stryker
libsecondlife Developer
Join date: 6 Jun 2004
Posts: 353
06-28-2006 20:11
Another official response: /139/df/116466/1.html#post1116361
SuezanneC Baskerville
Forums Rock!
Join date: 22 Dec 2003
Posts: 14,229
06-28-2006 21:37
Is the Recorder data stored on your hard drive? Can you save the files and use them like macro files in some sneaky way, since the interface doesn't have a save recorder data and load recorder data option.


The Draw UI option works, I once again manage to turn the interface off without having taken note of the keystroke to turn it back one. heh heh

I guess I want a user's guide to the God Mode option from the Linden's point of view, and something that tells me exactly which ones work for me.
_____________________
-

So long to these forums, the vBulletin forums that used to be at forums.secondlife.com. I will miss them.

I can be found on the web by searching for "SuezanneC Baskerville", or go to

http://www.google.com/profiles/suezanne

-

http://lindenlab.tribe.net/ created on 11/19/03.

Members: Ben, Catherine, Colin, Cory, Dan, Doug, Jim, Philip, Phoenix, Richard,
Robin, and Ryan

-
Usagi Musashi
UM ™®
Join date: 24 Oct 2004
Posts: 6,083
06-28-2006 21:52
From: Steve Steed
Or you can become the CEO that will put you in to God Mode!!



Or better yet drop the whol thing and play the sims online :D
Darkside Eldrich
Registered User
Join date: 10 Feb 2006
Posts: 200
06-28-2006 22:50
From: crucial Armitage
the way I see it if some one can wright a hack for the god tools, limited as they may be its just a matter of time that something much worse comes along.

Mostly, this has already been debunked, but I just want to point out that you're using an entirely reactionary argument with no basis in reality. Just because some things exist in the client doesn't mean you can do *anything* from the client. If finding hacks was really that easy, BSD wouldn't be the secure platform it is :P

In short, I'm afraid "the way you see it" has no foundation in the technical details behind computer programming. While security vulnerabilities are inevitable, the only good solution is finding and fixing them. Taking hostile action against the people who, inadvertantly or directly, reveal these vulnerabilities is useless. libsecondlife has, through this god mode program, revealed a bug in LL's code (not checking map pos requests server-side). This means LL knows this bug exists, and can now fix it. Eddy, keep it up.
Mark Gjellerup
Too Much Gjellerup!
Join date: 20 Mar 2006
Posts: 35
These Features Should Be Unlocked Anyway
06-29-2006 01:12
Yeah, this is harmless unless LL has security holes on the server side. That said, I think LL should fix the map position request bug. Then they should unlock the rest of the features that don't need server-side validation, basically making this product worthless.

I specifically need the unlimited camera range functionality (up to drawing distance). I sell a Security Cam System and my customers always ask me about increasing the range when taking over controls of the camera. If people could have my cameras all over adjacent sims and switch between them without walking around at all, that would be great!
_____________________
Masakazu Kojima
ケロ
Join date: 23 Apr 2004
Posts: 232
06-29-2006 05:05
From: crucial Armitage
if some one can wright a hack for the god tools, limited as they may be its just a matter of time that something much worse comes along
From: Darkside Eldrich
you're using an entirely reactionary argument with no basis in reality
It's the progression last July's script viewing and oh wait they never told anyone about that part exploit followed. (The creator of that God mode hack was permabanned. Whoops.)

SL's security is a joke. This July should be at least as exciting as last.
Burnman Bedlam
Business Person
Join date: 28 Jan 2006
Posts: 1,080
06-29-2006 06:22
The issues that could potentially pop up as a result of people reverse engineering SL's viewer are a major concern. There are numerous reasons I can think of why allowing such a project to continue is irresponsible and reckless.

How many of you are aware of the llSetPayPrice exploit? If you are, imagine how much more could be done with a 3rd party viewer.

I would also like to point out the following from the ToS:

From: someone
4.2 You agree to use Second Life as provided, without unauthorized software or other means of access or use. You will not make unauthorized works from or conduct unauthorized distribution of the Linden Software.
Linden Lab has designed the Service to be experienced only as offered by Linden Lab at the Websites or partner websites. Linden Lab is not responsible for any aspect of the Service that is accessed or experienced using software or other means that are not provided by Linden Lab. You agree not to create or provide any server emulators or other software or other means that provide access to or use of the Service without the express written authorization of Linden Lab. You acknowledge that you do not have the right to create, publish, distribute, create derivative works from or use any software programs, utilities, applications, emulators or tools derived from or created for the Service, except that you may use the Linden Software to the extent expressly permitted by this Agreement. You are prohibited from taking any action that imposes an unreasonable or disproportionately large load on Linden Lab's infrastructure.

You may not charge any third party for using the Linden Software to access and/or use the Service, and you may not modify, adapt, reverse engineer (except as otherwise permitted by applicable law), decompile or attempt to discover the source code of the Linden Software, or create any derivative works of the Linden Software or the Service, or otherwise use the Linden Software except as expressly provided in this Agreement. You may not copy or distribute any of the written materials associated with the Service. Notwithstanding the foregoing, you may copy the Linden Software that Linden Lab provides to you, for backup purposes and may give copies of the Linden Software to others free of charge.


Not only is the developer of the software in violation of the TOS (and a few laws), anyone who uses the god mode hack is as well.

This needs to end. Now.
_____________________
Burnman Bedlam
http://theburnman.com


Not happy about Linden Labs purchase of XStreet (formerly SLX) and OnRez. Will this mean LL will ban resident run online shoping outlets in favor of their own?
crucial Armitage
Clothing Designer
Join date: 30 Aug 2004
Posts: 838
06-29-2006 06:39
From: Darkside Eldrich
Mostly, this has already been debunked, but I just want to point out that you're using an entirely reactionary argument with no basis in reality. Just because some things exist in the client doesn't mean you can do *anything* from the client. If finding hacks was really that easy, BSD wouldn't be the secure platform it is :P

In short, I'm afraid "the way you see it" has no foundation in the technical details behind computer programming. While security vulnerabilities are inevitable, the only good solution is finding and fixing them. Taking hostile action against the people who, inadvertently or directly, reveal these vulnerabilities is useless. libsecondlife has, through this god mode program, revealed a bug in LL's code (not checking map pos requests server-side). This means LL knows this bug exists, and can now fix it. Eddy, keep it up.


I highlighted a part for clarity

Who is taking hostile action against any one

All I am saying is that apparently the client is hackable. The hand of god is proof of that.
so why would not any rational human being think that other hacks are not possible.
I admit that I know nothing of programing. But I do know that it is highly likely That if
the client is Hackable for the hand of god there may be more things to worry about.
Linden Labs should disable this hack and any others that come about It is a clear violation of the terms of service as stated by many others in this thread.
Burnman Bedlam
Business Person
Join date: 28 Jan 2006
Posts: 1,080
06-29-2006 06:42
There *ARE* things to worry about with people reverse engineering the viewer. Not everyone doing it plans to make your SL experience better.

Account information could be stolen rather easily with a malicious viewer hack.

Those who are reverse engineering the viewer need to be banned, and prosecuted to the full extent of the law.

Last time I checked, computer hacking is a felony criminal offense.



From: crucial Armitage
I highlighted a part for clarity

Who is taking hostile action against any one

All I am saying is that apparently the client is hackable. The hand of god is proof of that.
so why would not any rational human being think that other hacks are not possible.
I admit that I know nothing of programing. But I do know that it is highly likely That if
the client is Hackable for the hand of god there may be more things to worry about.
Linden Labs should disable this hack and any others that come about It is a clear violation of the terms of service as stated by many others in this thread.
_____________________
Burnman Bedlam
http://theburnman.com


Not happy about Linden Labs purchase of XStreet (formerly SLX) and OnRez. Will this mean LL will ban resident run online shoping outlets in favor of their own?
Joannah Cramer
Registered User
Join date: 12 Apr 2006
Posts: 1,539
06-29-2006 07:00
From: Burnman Bedlam
Those who are reverse engineering the viewer need to be banned, and prosecuted to the full extent of the law.

Last time I checked, computer hacking is a felony criminal offense.

While hacking might be, reverse engineering isn't. Much like difference between learning how to make a knife, and using such made knife to stab someone.

http://en.wikipedia.org/wiki/Reverse_engineering
1 2 3 4 5