What the client is actually sending in the new version

Just did a login dump with the new version, the relevant changes are:

<member><name>mac</name><value><string>d36ee7b0bd7ae673992e6c90a3a14296</string></value></member>
<member><name>id0</name><value><string>1630f42712d86877996118452a91b66b</string></value></member>

The mac field used to be sent in plain-text, in the form of "00 : D0 : 4C : 39 : 0B : 51". Now an md5 hash of it is being sent instead. The id0 field is the new unique hash to identify your computer. So effectively, this release actually increases privacy during the login process by no longer sending your MAC address.

So, when are these changes going to be reflected in libsecondlife?

This is good to verify. However, I think the larger issue is the inworld dissemination of your account status.

Never, because we send a blank MAC address anyways, and the id0 field is optional.

So all someone has to do is create their own client(or a wrapper for the networking to sub in different login?) and the new feature goes out the window. lol

A proxy that sits between the client and the login server that scrubs identifiers, yes. I'm thinking the number of people who have written one is somewhere around 3, and none of us are sharing .

PC side of things: I havn't noticed anything anyone would be concerned about being sent to LL..... things look kosher

I think that number is a lot higher than 3.

A simple find/replace proxy could handle it quite well.

Beyond that, simply change/add a few things here and there to determine what goes into the ID, and you don't even need a proxy.

MAC addresses are spoofable. Here's hoping that J. Random Asshat isn't technically proficient enough to spoof a MAC.

The unique ID is more interesting. I wonder how it's computed. I wonder what is done / will be done with the unique ID? My guess would be that LL will use it to identify multiple accounts coming from the same computer.

I could probably get a proxy to do the job done quick and I'm probably not the only one.

When all they need to do is type "how to spoof mac address" into Google and follow easy, spelt out instructions? Wouldn't have much hope here, really.

So; How long will it be until we will be able to take whatever we want regardless of permissions using libsecondlife?

..why bother using libsecondlife?

August 29th 2006, at 2:14am EDT

Huh, so that -is- libsecondlife's ultimate aim? You guys are admitting that? That the ultimate goal here is to rip people off?

"The Skynet Funding Bill is passed. The system goes on-line August 4th, 1997. Human decisions are removed from strategic defense. Skynet begins to learn at a geometric rate. It becomes self-aware at 2:14 a.m. Eastern time, August 29th. In a panic, they try to pull the plug."

That was sarcasm, i believe ^^;;

Free terminators. That rocks.

Excellent Terminator reference!!!!!



"....Now, take us down to Defcon 2!"

Will I be able to get something to eat without having to pay for it? I could really use a deal like that. I have bills to pay.

I for one, would like to welcome our new libsecondlife-using terminator masters.

My personal goal as a tinkerer is a completely open-source client. That way LL can put more focus on making the server-side perfect, while the users get to decide how they want to see and interact with the world.

After all, many of the bugs that annoy the hell out of us are client-side. The poor UI that people complain about? client side. The LOD? Client side.
==Chris

<Logan watches as people immediately set up shop reselling terminators for L$1000 a pop. Camera pans in on Logan's face as a single tear wells up and drops down his cheek.>

The Open Source MetaVerse project - it displayed things, right?

Any chance of melding the OSMV code with the LibSL code and getting a non-LL client with a graphical display?

Even a partiallly implemented broken one would be interesting.


Then the terminator gets you.

Or, would it be possible to get a non-graphical client, for vision-impaired users?

neko

What do you mean by a non-graphical client? Text to Speech or voice chat or what?


A grahical client with the abilty to change font sizes would be good for some people with mild visual impairment, like me for instance.

Hmm,a form group chat muting could effectively be accomplished on the client side, maybe?