SLX Hacked?

The ATM at SLX headquarters is not responsive, as was just confirmed by me and another player.

They're dead Jim!

In-world terminals are not responding.

Set phasers for "kick ass".

Oh boy, this is getting good... Er, well, bad. Luckly I only had about 150 in it.

This really sucks. Good luck to Apotheus and the entire SLExchange team; I was running PHPBB on a non-SL related site that got pwned by a script kiddie and it was no fun at all.

Good luck getting things back in order.

Regards,

-Flip

God, dont you just hate it when someone kicks someone else when they are down just because they didn't get their way ?

Reminds me of the school yard actually..

Good luck to the SLX team..

Sorry to hear, but I expect this sort of thing will become increasingly common.

Hmmm, there's a lot of e-commerce out there on teh intarnet but hacks have become increasingly less common over the last decade.

Did you mean this will become more common in the SL web vendor space because few take it seriously as it remains a nickle and dime proposition? I might agree with that.

This is just sad and pathetic!!!! I'd love to find out who hacked the site and slap them with a stinky fish!

I mean, common... it's a GAME... if you have the talent to hack a site... then use your talent to make something worth a darn and sell it on that site instead and make some money for yourself!


For those of you dissing SL Exchange, that's fine, it's your opinion. I use both SL Exchange and SL Boutique. I like them both for different reason. But, even if you hate SL Exchange, you have to feel for them right now and you have to think that this attack was just pathetic.

Unreliable? I keep hearing noises to that effect. Untrustworthy? Hard to say. I haven't had anything unpleasant go down, personally, on SLX.

Still, I betcha that the case will be made (internally) to GOM online shopping as the next big push in lubricating the economy by using examples like this one here.

And, y'know, if it works out as well as Lindex did, I might not have a problem with that.

Not sure what you mean - please explain...

Do you mean a shopping site run by linden?

Btw, thats not "hacking" - thats "cracking".

(Someone had to say it)

HAY GUYS LET'S MAKE WEB-BASED TRANSACTIONS EASIER FOR RESIDENTS TO SET UP! THE CURRENT CROP IS GETTING HAXXED AND HAS DOWNTIME ISSUES. WE GOTS TO CLEAN THIS UP YO.



I mean Linden-facilitated mechanisms for web-based transactions. I'm sure they'd host a marketplace along with it, but I think the goal ought to be a standardized interface for exchanging currency for goodies, via the web, that third parties could plug into their own sites, also.

Yes - over the years there has been discussion with Phillip and others at LL re: doing this very thing - I was involved directly with such.

And seems what has been done is LL got in to the currency-coversion business - and no LL facilited mechanism to standardize web-based commerce.

Still a mystery.

I was expecting such a correction. Actually thought of using cracked in the subject but forgot since I was listening to Off The Hook while soldering a 6.5536Mhz crystal into a radio shack phone dialer and eating some Captain Crunch Cereal. Then this computer kept calling in at 1200bps wanting to play a game.

Yeah I know, it's stupid. Though I bet more black people who have gone to see that movie named Hackers if it was called Crackers.

It's back up.

SL Exchange is back up. Fortunately it was just a script kiddie and I managed to shut things down while he was in the process of tagging various areas of the site. The exploit that was used was an old one that the attacker managed to slip by our security system using a form of encoding in the URL that I haven't seen before.

Be assured that there was NO data loss whatsoever. No one lost money, and any deposits that were made at terminals during our downtime will catch up over the next couple of hours.

The extended downtime and lack of an informational message were due to extremely bad timing with my full-time job which takes precedence, and I took the time to do a full audit of everything the attacker did to report to the appropriate authorities.

Chrischun, thank you very much for the call. I didn't answer, but I did hear the phone ring and your call allowed me to stop things while they were in process. You saved the day!

Thank you Chrischun!

Virtual goods vendors. Partly bc few take it seriously. Partly bc some will take it very seriously now that $$$ are starting to permeate the mainstream.

I disagree.

The "anti-SL Exchange" stuff exists for a reason, they have a poor history and have screwed some people around in the past.

I also disagree abbout "connecting with customers" I can never find anything on SL Exchange, I find their interface confusing and clunky at best. SL Boutique has some problems with poor categorisation but at least it's a clean no nonsense interface that you can get the hang of in a second or two.

I would bet SL Exchange does better just cause its a better name with an easier to remember URL, or perhaps more aggressive marketing. As a product it's clearly second rate.

I disagree.

The "anti-SL Exchange" stuff exists for a reason, they have a poor history and have screwed some people around in the past.

I also disagree abbout "connecting with customers" I can never find anything on SL Exchange, I find their interface confusing and clunky at best. SL Boutique has some problems with poor categorisation but at least it's a clean no nonsense interface that you can get the hang of in a second or two.

I would bet SL Exchange does better just cause its a better name with an easier to remember URL, or perhaps more aggressive marketing. As a product it's clearly second rate.

Note the earlier comment by a seller about "not wanting the hassle of setting up her vendors again." SL Botuiques vendor is a one click deal and as simple and sensible as teh site itself.

I use both sites, and I don't see why people should feel like they have to make a choice. Use them both. I've never had a problem with either. I prefer the feature set I get with slexchange (and the smaller commission), but slboutique seems like a good site too. When I say slexchange connects with customers better it's only based on my limited experience that I sell far more at slexchange than slboutique.

I'm not suprised that you disagree, to be honest. However, talking frankly neither site is organised particularly well in view of what it's trying to achieve. slexchange.com has more functions but the overall organisation is messy, slboutique.com may look simple but is also simple in it's feature set. Neither comes close to the way an e-commerce site should be presented, in terms of usability or functionality. I've been authoring e-commerce systems for 7 years now, and they both miss the mark by a long shot.

That's not to say that neither are welcome, because they are, but neither really has been what it could and should have been. slexchange.com does have more traffic than slboutique.com and I suspect part of that is because it was first to market and slboutique.com really doesn't offer anything exceptional to challenge that.



Personally i didn't understand that comment. It's a matter of taking it into your inventory to remove your items from the site and putting it back out to get them re-listed. So, in fact, it's actually simpler than slboutique.com's as you don't even have to click

As for the poor history of slexchange.com, I was a very vocal supporter of the percieved injured party in that debacle at first but gradually realised that it wasn't quite as clear cut as it was being made out and that the injured party was really just playing to the crowd. As he still does, incidentally. It's something he does not appear to be able to let go of and needs to give the knife a further twist at every opportunity. So, you live and learn.

Just checked and they are back up. All looks well.