Welcome to the Second Life Forums Archive

These forums are CLOSED. Please visit the new forums HERE

How do I delete my cc information?

Tiger Zobel
hoarder
Join date: 13 Jan 2006
Posts: 391
06-28-2006 17:24
Anyone want to point out that the only thing hacked was the forum software?


How in hell you can go from having forum software being hacked to "the account information server got hacked" is beyond me... but someone's done it...
Sean Martin
Yesnomaybe.
Join date: 13 Sep 2005
Posts: 584
06-28-2006 18:04
If you use your CC at almost any real life store then it goes on the internet.
The store itself sends the info. :rolleyes:
_____________________
Luciftias Neurocam
Ecosystem Design
Join date: 13 Oct 2005
Posts: 742
06-28-2006 19:09
From: Warda Kawabata

Just because I was complacent before, is that any reason to continue ignoring security issues now that I have been made aware of the risk?


Heavens to Betsy, no, especially when your new dilligence lets you play mini forum drama queen.


From: Tiger Zobel
Anyone want to point out that the only thing hacked was the forum software?


How in hell you can go from having forum software being hacked to "the account information server got hacked" is beyond me... but someone's done it...



Excuse me? But who asked you to bring your filthy little facts in here, huh? HUH?
Just pack up your little facts and go on home please. This is the SL forums.
SuezanneC Baskerville
Forums Rock!
Join date: 22 Dec 2003
Posts: 14,229
06-28-2006 19:27
From: Sean Martin
If you use your CC at almost any real life store then it goes on the internet.
The store itself sends the info. :rolleyes:

When people use a credit terminal, one of the little standalone things, is that going on the internet or is some other sort of protocol used?
_____________________
-

So long to these forums, the vBulletin forums that used to be at forums.secondlife.com. I will miss them.

I can be found on the web by searching for "SuezanneC Baskerville", or go to

http://www.google.com/profiles/suezanne

-

http://lindenlab.tribe.net/ created on 11/19/03.

Members: Ben, Catherine, Colin, Cory, Dan, Doug, Jim, Philip, Phoenix, Richard,
Robin, and Ryan

-
Sean Martin
Yesnomaybe.
Join date: 13 Sep 2005
Posts: 584
06-28-2006 19:45
From: SuezanneC Baskerville
When people use a credit terminal, one of the little standalone things, is that going on the internet or is some other sort of protocol used?

Hmm honestly I'm not sure about those. It probably depends on the banks network. But I think most use phoneline and that can all be tapped into.
Most gas stations near me use dial up modems. At one of them you can hear it trying it's hardest to connect. :rolleyes: Not that it makes it easier to hack the line. But the data is sent over the internet just the same. In fact your trusting someone else to do it for you on their computer.

It used to be that people would have a better chance of getting robbed at an atm by a guy with a gun. Of course that all depends on location but its starting to get where theft has become more and more high tech. Near the city where I live there have been quite a few card reading devices found attach to the card slot of ATM's.
It reads your card info as you swip it. Then they come back to pick up the device some time later. The device appears to be part of the atm and to most people they can't tell the difference.

Just like in SL you can put an invisible prim over an atm and hope someone deposits L$ without checking.
Except in real life you can't tell who put this device there. :p
Unless the idiot wrote his name on it so no other theif would take it or something about as retarded. :rolleyes:

In that way I feel SL is more secure than most real life situations.
But just like everything else. It can all be hacked.
_____________________
Odysseus Fairymeadow
Registered Explorer
Join date: 18 May 2006
Posts: 44
06-28-2006 19:47
Umm, stupid question, but does "verified" here mean that I gave them a CC number? I originally signed up with an SMS message. If LL continues to allow SMS to be used to verify accounts, that might be something that could be used to "dilute" this apparent release of information.

"Verified" could then mean "we know you are an individual person", rather than "we know your credit card number"
Seronis Zagato
Verified Resident
Join date: 30 Aug 2005
Posts: 454
06-28-2006 19:49
From: Wendel Gascoigne
You know what? You are already a target. You registered in 2005, therefore I KNOW you provided CC information. Mwahahahahahahahahaha!!!!

Oh. Darn. I registered more than a year ago. so did I.

Erm... wait... Knowing that you or I provided CC info at registration does me no good whatsoever. LL labs does not display any payment info at all. This is NOT more risky than what's out there now.

Wendel


*applauds*
_____________________
From: Johnny Mann
Just cause SL redefines what a videogame can be doesnt mean it isnt a game.
From: Ash Venkman
I beat SL. (The end guy is really hard.)
Seronis Zagato
Verified Resident
Join date: 30 Aug 2005
Posts: 454
06-28-2006 19:50
From: Warda Kawabata
...given that teh data is on the server, and the server has already been hacked once...


The server was NEVER HACKED. No account information was compromised. An exploit in the forum interface was abused and is now fixed.
_____________________
From: Johnny Mann
Just cause SL redefines what a videogame can be doesnt mean it isnt a game.
From: Ash Venkman
I beat SL. (The end guy is really hard.)
Seronis Zagato
Verified Resident
Join date: 30 Aug 2005
Posts: 454
06-28-2006 19:51
From: Wendel Gascoigne
It's more than likely a simple flag field associated to your account. It does not mean that your profile or other game functions are given access in ANY WAY your billing information. Purchase Lindens or enter a CC number at account creation and the flag gets set on the account.

It gives no info. No more access to your CC info than me knowing when you registered. No security risk. It sets a flag to one of 3 values.

Think of all the payments for tier, Lindens, ... processed by LL. Do you really think that's not already handled by a secure, isolated machine?

That being said, you might decide that you want to scale back to an unverified account. It's your prerogative as the new system supports this mode. I would ask that in the approrpiate section or customer services. There has to be a well defined way for customers who choose to do so to scale back their account.

No security risk and you have trusted LL this long with knowing your CC number. But it's your choice... or should be.

Wendel

*applauds*
_____________________
From: Johnny Mann
Just cause SL redefines what a videogame can be doesnt mean it isnt a game.
From: Ash Venkman
I beat SL. (The end guy is really hard.)
Seronis Zagato
Verified Resident
Join date: 30 Aug 2005
Posts: 454
06-28-2006 19:53
From: Wendel Gascoigne
Nice. So?

LL is NOT collecting more info than they used to have apart from a hashed number. They are not hacking into your computer. Give it a rest.

Wendel

*applauds*
_____________________
From: Johnny Mann
Just cause SL redefines what a videogame can be doesnt mean it isnt a game.
From: Ash Venkman
I beat SL. (The end guy is really hard.)
Seronis Zagato
Verified Resident
Join date: 30 Aug 2005
Posts: 454
06-28-2006 19:56
From: Warda Kawabata
... the server is known to be hackable ...

See above. False statement.
_____________________
From: Johnny Mann
Just cause SL redefines what a videogame can be doesnt mean it isnt a game.
From: Ash Venkman
I beat SL. (The end guy is really hard.)
Seronis Zagato
Verified Resident
Join date: 30 Aug 2005
Posts: 454
06-28-2006 19:58
From: Tiger Zobel
Anyone want to point out that the only thing hacked was the forum software?


How in hell you can go from having forum software being hacked to "the account information server got hacked" is beyond me... but someone's done it...

*applauds*
_____________________
From: Johnny Mann
Just cause SL redefines what a videogame can be doesnt mean it isnt a game.
From: Ash Venkman
I beat SL. (The end guy is really hard.)
Seronis Zagato
Verified Resident
Join date: 30 Aug 2005
Posts: 454
06-28-2006 19:59
From: Luciftias Neurocam
Re: intelligent factual comment about hacking being false
Excuse me? But who asked you to bring your filthy little facts in here, huh? HUH?
Just pack up your little facts and go on home please. This is the SL forums.

*snickers* nice point.
_____________________
From: Johnny Mann
Just cause SL redefines what a videogame can be doesnt mean it isnt a game.
From: Ash Venkman
I beat SL. (The end guy is really hard.)
Deviant Edge
Registered User
Join date: 28 Jun 2005
Posts: 10
06-28-2006 23:38
So sl which is made using a conglomerant of free software (just check the about second life tab) that is put together in a bad way..

That gives us lag, glitches, prefixed patches, network glitches, and is basically a coble together of other sources ideas, a server system less than stable, and a webboard system available to anyone who wants to poke around.


I for one don't trust lindens with my prims my land, my lag, so why would I have such blind faith in there uncrackable dbase of my details , if they can't even do a patch without breaking everything else why should we trust them with our details..

Oh the famous "kept encrypted" claim, well show me encrypted software and I will show you a hacker who can break it, and so no sorry I don't trust lindens ability. even the best get hacked, and linden programers are not the best.

Second life has had alot of publicity lately about funds and money and virtual currency, business week etc, and im pretty sure not all those reading up on it are respectible people.
Warda Kawabata
Amityville Horror
Join date: 4 Nov 2005
Posts: 1,300
06-29-2006 00:45
People point out it was the forum software that was hacked, and supposedly not the cc server.

I suppose that was technically true. however, given that gameworld server attacks have in the past caused the forums to go down, it is foolish to pretend the two aren't linked. And any fool knows that if you have access to the forum password for an account, you have access to every aspect of that user account.

Sorry, I buy that I'm safe because it was merely the forum that was hacked.
Warda Kawabata
Amityville Horror
Join date: 4 Nov 2005
Posts: 1,300
06-29-2006 00:56
I noticed on logging in today that they've ameneded the ToS again, this time I noted that there is a line in which they explicitly reserve teh right to publicly say whether or not tehy have payment details on file.

That's fine. they can declare whether or not I've paid. But as long as they do so, I will not let them have any valid payment details recorded on their server for more than 24 hours - I stand by my plan to cancel any credit card I use to pay LL 24 hours after paying LL.
Tren Neva
Registered User
Join date: 16 Oct 2004
Posts: 619
06-29-2006 01:00
From: Warda Kawabata
People point out it was the forum software that was hacked, and supposedly not the cc server.

I suppose that was technically true. however, given that gameworld server attacks have in the past caused the forums to go down, it is foolish to pretend the two aren't linked. And any fool knows that if you have access to the forum password for an account, you have access to every aspect of that user account.

Sorry, I buy that I'm safe because it was merely the forum that was hacked.


For one, no, they aren't related at all. Secondly, from what I remember, it was an exploit that allowed someone to use someone elses name. They didn't get user passwords or anything like that.
Fade Languish
I just build stuff...
Join date: 20 Oct 2005
Posts: 1,760
06-29-2006 01:09
From: Warda Kawabata
That's fine. they can declare whether or not I've paid. But as long as they do so, I will not let them have any valid payment details recorded on their server for more than 24 hours - I stand by my plan to cancel any credit card I use to pay LL 24 hours after paying LL.


Whatever floats your boat. Sounds like a pain in the ass for nothing though.
_____________________
Warda Kawabata
Amityville Horror
Join date: 4 Nov 2005
Posts: 1,300
06-29-2006 04:03
From: SuezanneC Baskerville
One can get Visa gift debit cards online that I think would work fine. I think you could get one for your avatar name with a made up address and it would work for an online purchase from LL, although this is just an assumption.

Can LL take any form of check or money order?


Well, I just did a search, and as nearly as I can tell, there is no way I can get such a card while giving a valid address. Given that they'd probably send the physical card to the address I give them, it'd be rather stupid to just make one up and let teh card get deleivered to jane Doe.

So suppose I lie to LL and break the ToS this way, I'm exposing myself to an even bigger security risk. So far, teh most sensibel solution still appears to be to report the card as lost/stolen right after paying LL.

Really though, I expect I'll go back to basic after my current premium expires anyway, teh way SL is going.
Marla Truss
Registered User
Join date: 15 Mar 2006
Posts: 197
06-29-2006 06:08
Recently, there have been some valid complaints over LL's policies, but I find this one to be ridiculous. So, right now there is information that says the person at the keyboard controlling Marla Truss has credit card information with LL.

SO WHAT?

Marla Truss is a second life persona, not a real life person. There is no information being released that says my real life person has credit card information with LL.

Each time I use my credit card at my gas station, I release more information than that for anyone watching, for they can not only see I used a credit card, they can see my license plate, the car I own, and take a picture of me.

Geeze, is this just complaining to complain?

If you are really concerned, get a Citi card. They have a small program that runs on your computer that generates new credit card numbers for each new Internet transaction. The number is then canceled.
_____________________
Wendel Gascoigne
Registered User
Join date: 19 May 2005
Posts: 226
06-29-2006 06:27
From: Marla Truss
Recently, there have been some valid complaints over LL's policies, but I find this one to be ridiculous. So, right now there is information that says the person at the keyboard controlling Marla Truss has credit card information with LL.

SO WHAT?

Marla Truss is a second life persona, not a real life person. There is no information being released that says my real life person has credit card information with LL.

Each time I use my credit card at my gas station, I release more information than that for anyone watching, for they can not only see I used a credit card, they can see my license plate, the car I own, and take a picture of me.

Geeze, is this just complaining to complain?

If you are really concerned, get a Citi card. They have a small program that runs on your computer that generates new credit card numbers for each new Internet transaction. The number is then canceled.


A voice of reason in this ocean of knee jerking. Thank you. :)

Wendel
Warda Kawabata
Amityville Horror
Join date: 4 Nov 2005
Posts: 1,300
06-29-2006 06:35
Fair enough you use credit cards lightly. I don't. Taken as an average over my life, I've used a credit card less than once a year, and only because cash isn't really practical over the net.

Laugh if you like. In a real sense, this LL policy is the equivalent of all those adult sites publicly posting snippets of information on people who have viewed the priviliged content on their sites.
Psyra Extraordinaire
Corra Nacunda Chieftain
Join date: 24 Jul 2004
Posts: 1,533
06-29-2006 06:56
I have logged into my account many times and there's no way to even view your OWN CC# through the site. If you bring up your billion info page, it will not show your CC#, the numbers that matter are all X'ed out.
_____________________
E-Mail Psyra at psyralbakor_at_yahoo_dot_com, Visit my Webpage at www.psyra.ca :)

Visit me in-world at the Avaria sims, in Grendel's Children! ^^
Wendel Gascoigne
Registered User
Join date: 19 May 2005
Posts: 226
06-29-2006 07:26
From: Warda Kawabata
Fair enough you use credit cards lightly. I don't. Taken as an average over my life, I've used a credit card less than once a year, and only because cash isn't really practical over the net.


As I said earlier, that's your choice. and you should be able to remove it and become unverified. And no, I don't use my credit cards lightly. I use them responsibly from vendors I trust because of the convenience they bring into transactions like net purchases.

Personally, I have trusted LL for more than a year and have paid them tier through my credit card too for most of that time. And you know what? You knowing that doesn't put me especially at risk.

Neither is knowing that your account is verified personal information that will fall under a data protection act (we happen to have one in Europe which is most stringent).

There is a valid debate relating to the types of accounts and whether this will lead to discrimination (for me, it won't. I don't base my interaction with other avatars on their profile but on their actions). But I think all the paranoia around them is unnecessary.

Wendel
Cindy Claveau
Gignowanasanafonicon
Join date: 16 May 2005
Posts: 2,008
06-29-2006 07:32
I wonder how many of the information-paranoid among you (a condition I completely empathize with though I don't agree) knew what happens when you use your debit card at a gas station in the US?

Many of the large oil companies have a standing policy that, if you are not required to enter a PIN number, they automatically put a lien on your bank account for about $75 until such time as the payment clears (usually in a day or two).

Compared to that, letting people know that you made *some* sort of payment to LL without even telling us what the nature of the payment was, is insignificant.
_____________________
1 2 3