Suspensions for discussing exploits in the forums
|
|
SuezanneC Baskerville
Forums Rock!
Join date: 22 Dec 2003
Posts: 14,229
|
07-25-2006 15:31
Recently there have been two exploits discussed in the forums, one concerning the texture eyedropper tool, and one concerning the the sit-and-delete problem.
Week long suspensions have been given to some of the participants in these threads.
Take heed, if you don't want to be suspended for discussing exploits in the forums, you might need to be a bit more discreet and cautious than some people were in those threads.
_____________________
-
So long to these forums, the vBulletin forums that used to be at forums.secondlife.com. I will miss them.
I can be found on the web by searching for "SuezanneC Baskerville", or go to
http://www.google.com/profiles/suezanne
-
http://lindenlab.tribe.net/ created on 11/19/03.
Members: Ben, Catherine, Colin, Cory, Dan, Doug, Jim, Philip, Phoenix, Richard, Robin, and Ryan
-
|
|
Wrom Morrison
Validated User
Join date: 15 Apr 2006
Posts: 462
|
07-25-2006 15:34
From: SuezanneC Baskerville Recently there have been two exploits discussed in the forums, one concerning the texture eyedropper tool, and one concerning the the sit-and-delete problem.
Week long suspensions have been given to some of the participants in these threads.
Take heed, if you don't want to be suspended for discussing exploits in the forums, you might need to be a bit more discreet and cautious than some people were in those threads. It's quite possible the suspensions were given to people who were intentionally posting those exploits, which is against the ToS. I saw a few people spam post here right after the return exploit, these were not the original ppl who found the exploit, but the usual post 6/6/06 trolls. And I'm pretty sure they got suspended for it. From: someone
Date: Saturday, July 22, 2006 Violation: Terms of Service: Exploit Disclosure Region: — Description: Reposting a quote containing details of a serious exploit. Action taken: Suspended 7 days. Date: Saturday, July 22, 2006 Violation: Terms of Service: Exploit Disclosure Region: — Description: Posting details of a serious exploit. Action taken: Suspended 3 days. Date: Saturday, July 22, 2006 Violation: Terms of Service: Exploit Disclosure Region: — Description: Posting information about a serious exploit on the forums. Action taken: Suspended 3 days.
|
|
SuezanneC Baskerville
Forums Rock!
Join date: 22 Dec 2003
Posts: 14,229
|
07-25-2006 15:45
From: Wrom Morrison It's quite possible the suspensions were given to people who were intentionally posting those exploits, which is against the ToS.
I saw a few people spam post here right after the return exploit, these were not the original ppl who found the exploit, but the usual post 6/6/06 trolls. And I'm pretty sure they got suspended for it. In the case I know of, the person was suspended for posting a quote of something someone else posted in the forums. and has been an SL member for years. They introduced no new information on the exploits, and weren't able to accomplish either exploit themself using the material they quoted, but can't access SL for a week. Thus I repeat, be warned, you may get suspended for a week(or more, I only know of the week suspension) for behavior that struck you as innocent and which was only the exact same information that was shown a few inches above on the screen, and thus did no harm.
_____________________
-
So long to these forums, the vBulletin forums that used to be at forums.secondlife.com. I will miss them.
I can be found on the web by searching for "SuezanneC Baskerville", or go to
http://www.google.com/profiles/suezanne
-
http://lindenlab.tribe.net/ created on 11/19/03.
Members: Ben, Catherine, Colin, Cory, Dan, Doug, Jim, Philip, Phoenix, Richard, Robin, and Ryan
-
|
|
Soleil Mirabeau
eh?
Join date: 6 Oct 2005
Posts: 995
|
07-25-2006 15:47
This is stupid.
a) One of the persons in question didn't even explain how one could perform said exploit
b) The person is question is banned because of a Linden mistake. Are they gonna ban every person who complains about their f*ck-ups now?
Stupid, stupid, stupid.
|
|
SuezanneC Baskerville
Forums Rock!
Join date: 22 Dec 2003
Posts: 14,229
|
07-25-2006 16:03
From: Soleil Mirabeau This is stupid.
a) One of the persons in question didn't even explain how one could perform said exploit
b) The person is question is banned because of a Linden mistake. Are they gonna ban every person who complains about their f*ck-ups now?
Stupid, stupid, stupid. You know of some suspensions that resulted?
_____________________
-
So long to these forums, the vBulletin forums that used to be at forums.secondlife.com. I will miss them.
I can be found on the web by searching for "SuezanneC Baskerville", or go to
http://www.google.com/profiles/suezanne
-
http://lindenlab.tribe.net/ created on 11/19/03.
Members: Ben, Catherine, Colin, Cory, Dan, Doug, Jim, Philip, Phoenix, Richard, Robin, and Ryan
-
|
|
Baba Yamamoto
baba@slinked.net
Join date: 26 May 2003
Posts: 1,024
|
07-25-2006 16:06
I only discuss explots in IRC ;0 h4x
_____________________
Open Metaverse Foundation - http://www.openmetaverse.org
Meerkat viewer - http://meerkatviewer.org
|
|
SuezanneC Baskerville
Forums Rock!
Join date: 22 Dec 2003
Posts: 14,229
|
07-25-2006 16:08
From: Baba Yamamoto I only discuss explots in IRC ;0 h4x I will take heed of your sage advice.
_____________________
-
So long to these forums, the vBulletin forums that used to be at forums.secondlife.com. I will miss them.
I can be found on the web by searching for "SuezanneC Baskerville", or go to
http://www.google.com/profiles/suezanne
-
http://lindenlab.tribe.net/ created on 11/19/03.
Members: Ben, Catherine, Colin, Cory, Dan, Doug, Jim, Philip, Phoenix, Richard, Robin, and Ryan
-
|
|
moo Money
Notorious m.o.o.
Join date: 20 Jan 2003
Posts: 193
|
07-25-2006 16:15
From: Soleil Mirabeau This is stupid.
a) One of the persons in question didn't even explain how one could perform said exploit
b) The person is question is banned because of a Linden mistake. Are they gonna ban every person who complains about their f*ck-ups now?
Stupid, stupid, stupid. I'm really upset about his suspension. He's always been very vocal about his opinions, but this is his first suspension and it was over something REALLY stupid. He didn't even post how to do it, yet other people did. I hope they had action taken against them. Due to his warnings in the forums and in personal messages, I was able to warn several designers who then locked down their stores before anything could happen to their shops. I'm thankful that he let us know of this serious problem.
|
|
Soleil Mirabeau
eh?
Join date: 6 Oct 2005
Posts: 995
|
07-25-2006 16:16
Seriously. I'd be pissed off.
|
|
Cinthya Vavoom
**BRAT**
Join date: 11 Mar 2006
Posts: 147
|
07-25-2006 16:19
From: Baba Yamamoto I only discuss explots in IRC ;0 h4x are you sure your 18 or older? its only little kids I see use numbers for words.
|
|
Tren Neva
Registered User
Join date: 16 Oct 2004
Posts: 619
|
07-25-2006 16:23
From: Cinthya Vavoom are you sure your 18 or older?
its only little kids I see use numbers for words. i tink he was jokign LOLS Anyways, if you feel that this person was falsely banned, take it up with one of Lindens more involved with the community. Discussing it a bunch of people that don't know the whole story doesn't help at all.
|
|
Baba Yamamoto
baba@slinked.net
Join date: 26 May 2003
Posts: 1,024
|
07-25-2006 16:27
From: Cinthya Vavoom are you sure your 18 or older?
its only little kids I see use numbers for words. Yah, LL has not caught me yet!! HAHA! It's been 3 yrs! zOMG LOLZ
_____________________
Open Metaverse Foundation - http://www.openmetaverse.org
Meerkat viewer - http://meerkatviewer.org
|
|
Einsman Schlegel
Disenchanted Fool
Join date: 11 Jun 2003
Posts: 1,461
|
07-25-2006 17:11
Hmm. I wonder if we'll get banned now if we suddenly 'discover' one. Perhaps this is a case of kiss and tell no?
PS. . People are Stupid.
|
|
Travis Lambert
White dog, red collar
Join date: 3 Jun 2004
Posts: 2,819
|
07-25-2006 17:14
If I stretch a bit, I sorta follow the logic that Linden doesn't want us disclosing exploits publically in the forums.
I think a suspension over the disclosure is a bit harsh, however - I think a warning would have made more sense, without knowing all the inner details.
The Shelter got hit directly by one of these exploits; both our security system and stream changer objects appeared to be specifically targeted.
If anything, I wish Cris had known about and reported it earlier - I might have been able to better protect myself.
_____________________
------------------ The ShelterThe Shelter is a non-profit recreation center for new residents, and supporters of new residents. Our goal is to provide a positive & supportive social environment for those looking for one in our overwhelming world.
|
|
Baba Yamamoto
baba@slinked.net
Join date: 26 May 2003
Posts: 1,024
|
07-25-2006 17:19
From: Einsman Schlegel Hmm. I wonder if we'll get banned now if we suddenly 'discover' one. Perhaps this is a case of kiss and tell no?
PS. . People are Stupid. You don't get banned for finding exploits ;0 If the bug is especially bad ;0 You might get a prize for reporting it ;0
_____________________
Open Metaverse Foundation - http://www.openmetaverse.org
Meerkat viewer - http://meerkatviewer.org
|
|
Oran Ge
Registered User
Join date: 25 Jul 2006
Posts: 5
|
07-25-2006 17:20
Yet people can metatroll with all their unverified alts. LOLZ!
|
|
SuezanneC Baskerville
Forums Rock!
Join date: 22 Dec 2003
Posts: 14,229
|
07-25-2006 17:22
From: Travis Lambert If I stretch a bit, I sorta follow the logic that Linden doesn't want us disclosing exploits publically in the forums. What do feel about suspending someone for a week for quoting a post that described an exploit several posts up in the thread?
_____________________
-
So long to these forums, the vBulletin forums that used to be at forums.secondlife.com. I will miss them.
I can be found on the web by searching for "SuezanneC Baskerville", or go to
http://www.google.com/profiles/suezanne
-
http://lindenlab.tribe.net/ created on 11/19/03.
Members: Ben, Catherine, Colin, Cory, Dan, Doug, Jim, Philip, Phoenix, Richard, Robin, and Ryan
-
|
|
Tren Neva
Registered User
Join date: 16 Oct 2004
Posts: 619
|
07-25-2006 17:28
From: SuezanneC Baskerville What do feel about suspending someone for a week for quoting a post that described an exploit several posts up in the thread? Well if you know for a fact that was the reason for their banning, and you feel strongly that nothing that posted in that reply disclosed excessive details about the exploit, then I feel you should take it up directly with a linden closely involved with the community.
|
|
Gaius Goodliffe
Dreamsmith
Join date: 15 Jan 2006
Posts: 116
|
07-25-2006 17:28
From: Travis Lambert If anything, I wish Cris had known about and reported it earlier - I might have been able to better protect myself. More information generally helps people. It helps good guys as well as the bad guys. Since the good guys generally outnumber the bad guys, disclosing information almost always does more good than harm. But alas, most corporations are very short-sighted...
|
|
Cocoanut Koala
Coco's Cottages
Join date: 7 Feb 2005
Posts: 7,903
|
07-25-2006 17:43
From: SuezanneC Baskerville What do feel about suspending someone for a week for quoting a post that described an exploit several posts up in the thread? It is completely outrageous! What good does this do anyone? Seems to me like a warning might have been given to these people, but to suspend them? I read the various posts over these things and NOWHERE did I get the idea that anyone was posting maliciously. (Course they could have removed any such posts and that's why I didn't see them.) And whoever simply quoted another - why give that person a 7-day suspension? coco
|
|
Tren Neva
Registered User
Join date: 16 Oct 2004
Posts: 619
|
07-25-2006 17:45
From: Gaius Goodliffe More information generally helps people. It helps good guys as well as the bad guys. Since the good guys generally outnumber the bad guys, disclosing information almost always does more good than harm. But alas, most corporations are very short-sighted... Disclosing information that will help protect users is one thing, while disclosing information that could lead up replicating the exploit, or information on how to do the exploit itself is another.
|
|
Einsman Schlegel
Disenchanted Fool
Join date: 11 Jun 2003
Posts: 1,461
|
07-25-2006 17:55
From: Baba Yamamoto You don't get banned for finding exploits ;0 If the bug is especially bad ;0 You might get a prize for reporting it ;0 Yeah, and that prize would be a what, permaban?
|
|
Elde Eponym
Registered User
Join date: 14 Feb 2006
Posts: 159
|
07-25-2006 18:08
From: Gaius Goodliffe More information generally helps people. It helps good guys as well as the bad guys. Since the good guys generally outnumber the bad guys, disclosing information almost always does more good than harm. But alas, most corporations are very short-sighted... All very touchy feelie - but utterly incorrect. Good guys have no need to know how to perform an exploit. Therefore, posting the details of an exploit on the forums does nothing to help the good guys. Bad guys want to know how to perform exploits - thats what they do. Therefore, posting the details of an exploit on the forums helps the bad guys. Therefore - no good is produced by details on the forums. Disclosing this information *does* do harm. *Always*. it's not short sighted at all to prohibit discussion of details. It's the greatest good for the greatest number. (Posting of the *existence* of an exploit is a different matter.)
|
|
Lou Dobbs
Registered User
Join date: 25 Jul 2006
Posts: 57
|
07-25-2006 18:09
Yes and one of them that was suspended provided no details whatsoever.
|
|
Uma Bauhaus
Renascene
Join date: 18 Aug 2004
Posts: 636
|
07-25-2006 18:32
From: SuezanneC Baskerville What do feel about suspending someone for a week for quoting a post that described an exploit several posts up in the thread? It's absolutely insane.
|