Welcome to the Second Life Forums Archive

These forums are CLOSED. Please visit the new forums HERE

Phishing Second Life Website Warning!

Aya Pelous
Registered User
Join date: 4 Sep 2007
Posts: 12
10-17-2007 05:59
Slnn.com

Has posted something I knew about for a while. It has to do with Moveablelife, a webviewer for Second Life residents.

(http://movablelife.net/login.aspxl)

It reads as the following:


"MovableLife allows Second Life users to log in to Second Life using only a web browser. MovableLife allows you to chat, IM, search, teleport, manage friends, groups, and much more. If you just want a quick and easy SecondLife experience without all the 3D graphics, then MovableLife is exactly what you are looking for."


It asks for your personal information, as in your second life name, and password.
My Warning to everyone is DON'T do it. It is your personal information at stake and this spyware web viewer will only cause exposure to Credit Card Fraud and Fraudulent Transactions that will be hard to make a case with Second Life should anything happen.


I never entered anything once I went to the website, but its a RED FLAG. Anything asking for your password that is not apart of linden lab, exposes you to risk.

If linden lab has any integrity left, they would plug this hole up. Before more lawsuits start to happen.
Aya Pelous
Registered User
Join date: 4 Sep 2007
Posts: 12
Phishing Second Life Website Warning!
10-17-2007 06:02
Slnn.com

Has posted something I knew about for a while. It has to do with Moveablelife, a webviewer for Second Life residents.

(http://movablelife.net/login.aspxl)

It reads as the following:


"MovableLife allows Second Life users to log in to Second Life using only a web browser. MovableLife allows you to chat, IM, search, teleport, manage friends, groups, and much more. If you just want a quick and easy SecondLife experience without all the 3D graphics, then MovableLife is exactly what you are looking for."


It asks for your personal information, as in your second life name, and password.
My Warning to everyone is DON'T do it. It is your personal information at stake and this spyware web viewer will only cause exposure to Credit Card Fraud and Fraudulent Transactions that will be hard to make a case with Second Life should anything happen.


I never entered anything once I went to the website, but its a RED FLAG. Anything asking for your password that is not apart of linden lab, exposes you to risk.

If linden lab has any integrity left, they would plug this hole up. Before more lawsuits start to happen.
Aya Pelous
Registered User
Join date: 4 Sep 2007
Posts: 12
Phishing Second Life Website Warning!
10-17-2007 06:03
Slnn.com

Has posted something I knew about for a while. It has to do with Moveablelife, a webviewer for Second Life residents.

(http://movablelife.net/login.aspxl)

It reads as the following:


"MovableLife allows Second Life users to log in to Second Life using only a web browser. MovableLife allows you to chat, IM, search, teleport, manage friends, groups, and much more. If you just want a quick and easy SecondLife experience without all the 3D graphics, then MovableLife is exactly what you are looking for."


It asks for your personal information, as in your second life name, and password.
My Warning to everyone is DON'T do it. It is your personal information at stake and this spyware web viewer will only cause exposure to Credit Card Fraud and Fraudulent Transactions that will be hard to make a case with Second Life should anything happen.


I never entered anything once I went to the website, but its a RED FLAG. Anything asking for your password that is not apart of linden lab, exposes you to risk.

If linden lab has any integrity left, they would plug this hole up. Before more lawsuits start to happen.
Larrie Lane
Registered User
Join date: 9 Feb 2007
Posts: 667
10-17-2007 06:52
Good post Aya

Residents should also be aware that if they use that service your referring to, it is entirely at their own risk and LL will not accept any responsibility.

In addition to your post, the paragraph below is from the TOS for SL.

"At the time your Account is opened, you must select a password. You are responsible for maintaining the confidentiality of your password and are responsible for any harm resulting from your disclosure, or authorizing the disclosure of, your password or from use by any person of your password to gain access to your Account or Account Name. At no time should you respond to an online request for a password other than in connection with the log-on process to the Service. Your disclosure of your password to any other person is entirely at your own risk."
Day Oh
Registered User
Join date: 3 Feb 2007
Posts: 1,257
10-17-2007 06:58
You've got to be kidding... What are you gonna do when Linden Lab stops making the "official" viewer? (Protip: The login process is moving to the official website soon)
_____________________
Gordon Wendt
404 - User not found
Join date: 10 May 2006
Posts: 1,024
10-18-2007 01:44
I agree with the warning that you put your info at risk whenever you use a third party viewer (and most have warnings to that effect right on the front page of their viewer) but your being overly dramatic and dare I say alarmist over something that's been possible since the code open sourcing. If you don't trust the people who make your viewer of choice (assuming it's not LL in which case you don't have a choice) then don't use it, but most people who are smart enough to use a third party viewer know the risk.
_____________________
Twitter: http://www.twitter.com/GWendt
Plurk: http://www.plurk.com/GordonWendt

GW Designs: XStreetSL

Usagi Musashi
UM ™®
Join date: 24 Oct 2004
Posts: 6,083
10-18-2007 02:01
You have to be ******** joking! we have reached level of stealing?
Usagi Musashi
UM ™®
Join date: 24 Oct 2004
Posts: 6,083
10-18-2007 02:11
That person adam seemed a little strange. If reading that post I don`t trust them period! How LLABS allowed this ****. I don`t understand. Japan yea right :rolleyes:
Lindal Kidd
Dances With Noobs
Join date: 26 Jun 2007
Posts: 8,371
10-18-2007 09:12
Nobody "allows" phishing.

As for third party viewers, reputable ones will NOT ask you for your user name and password. You can download the Nicholaz viewer, for instance, without giving his website any personal data at all. True, if you send him your crashlogs, he'll have access to private information, but he warns you about that, and you don't have to do it if you don't want to.

Another draw of the "moveablelife" viewer, as I understand it, is that that viewer is the favorite tool of griefers. Although the OP's "moveablelife" site is more likely NOT a source of the actual viewer, but simply a phishing expedition.

Finally, there is more SL phishing going on. Beware of any IMs you receive in-game which direct you to "the SL website"...it may be a phony, to trick you into revealing your username and password.
_____________________
It's still My World and My Imagination! So there.
Lindal Kidd
Malachi Petunia
Gentle Miscreant
Join date: 21 Sep 2003
Posts: 3,414
10-18-2007 09:26
From: someone
Protip: The login process is moving to the official website soon.
Is that more of a Havok 2 "soon" or a windlight "soon" or more like an IDV soon?

And doesn't the phrase "have any integrity left" presuppose that there was at some past time "integrity"? :p
Lee Ponzu
What Would Steve Do?
Join date: 28 Jun 2006
Posts: 1,770
10-18-2007 17:43
That guy next to you on the bus *might* be a murderer.

My advice is to never ride the bus.
Day Oh
Registered User
Join date: 3 Feb 2007
Posts: 1,257
10-18-2007 23:25
Hold on, why do we think it's a phishing site again?

Doesn't anybody remember AjaxLife and how Linden Lab gave the creator an award @_@
_____________________
Ordinal Malaprop
really very ordinary
Join date: 9 Sep 2005
Posts: 4,607
10-18-2007 23:55
I don't know quite what is being talked about here, but

(a) I have seen NOTHING indicating that MovableLife is a phishing website;

(b) SLNN has NOT published ANY article suggesting this.

There was a piece I read recently about its ToS regarding IP created through effectively gave almost full legal control of the company over anything you do through the site, but that was on Virtually Blind (referred to by SLI) and did not say that this was a phishing site.

http://virtuallyblind.com/2007/10/18/movable-life-grabby/

If you wish to practice absolute data security then certainly, do not use MovableLife, AJAXLife or any third-party clients. The title and first post of this thread, though, seems to imply that MovableLife is a phishing website which as far as I am aware is false.
_____________________
http://ordinalmalaprop.com/forum/ - visit Ordinal's Scripting Colloquium for scripting discussion with actual working BBCode!

http://ordinalmalaprop.com/engine/ - An Engine Fit For My Proceeding, my Aethernet Journal

http://www.flickr.com/groups/slgriefbuild/ - Second Life Griefbuild Digest, pictures of horrible ad griefing and land spam, and the naming of names
Usagi Musashi
UM ™®
Join date: 24 Oct 2004
Posts: 6,083
10-19-2007 00:23
i don`t really know if that a wise thing to say. If indeed they are doing said issues then you better staying away. as for 3rd party viewers like Ables and Nicks they are safe. As for Ajax I don`t trust that viewer at all. I do believe MovableLife is a phishing website, if people have referd to it as a possible phishing website its better safe then sorry.
Ordinal Malaprop
really very ordinary
Join date: 9 Sep 2005
Posts: 4,607
10-19-2007 00:57
Only you have no reason to call it a phishing site. Which is after all accusing the owners of criminal activity.
_____________________
http://ordinalmalaprop.com/forum/ - visit Ordinal's Scripting Colloquium for scripting discussion with actual working BBCode!

http://ordinalmalaprop.com/engine/ - An Engine Fit For My Proceeding, my Aethernet Journal

http://www.flickr.com/groups/slgriefbuild/ - Second Life Griefbuild Digest, pictures of horrible ad griefing and land spam, and the naming of names
Ee Maculate
Owner of Fourmile Castle
Join date: 11 Jan 2007
Posts: 919
10-19-2007 01:50
SLeek asks for your username and password......
Usagi Musashi
UM ™®
Join date: 24 Oct 2004
Posts: 6,083
10-19-2007 03:22
From: someone
Only you have no reason to call it a phishing site. Which is after all accusing the owners of criminal activity.


In all fairness what give you the say it isnt phishing site?
Day Oh
Registered User
Join date: 3 Feb 2007
Posts: 1,257
10-19-2007 04:15
Libel is against the law where I'm from, you wouldn't want someone to make accusations about you or your business, and now it's the only thing you see when you search the forums for "movablelife." Hopefully if someone did it to you, you'd have people trying to defend you, too. Besides, the whole reason this was posted seems to be based on the ignorant belief that "third-party" viewers aren't supposed to be allowed.
_____________________
Kornscope Komachi
Transitional human
Join date: 30 Aug 2006
Posts: 1,041
10-19-2007 04:24
I would never be the first to try a new portal viewer. Always, always do just a little research. If there is no mention with some simple searches, caution is advised.
If sites and/or forums have more info, there will be obviously more humans to announce quality. ( As seen in these forums.)
BTW..This will be more commonplace in a year or two.
Anyway, you could test first with a non linked alt.

Sorry, I drank beer.
And..Have fun people and be nice to each other.
_____________________
SCOPE Homes, Bangu
-----------------------------------------------------------------
Usagi Musashi
UM ™®
Join date: 24 Oct 2004
Posts: 6,083
10-19-2007 05:03
Thats nice
Ordinal Malaprop
really very ordinary
Join date: 9 Sep 2005
Posts: 4,607
10-19-2007 05:35
From: Usagi Musashi
In all fairness what give you the say it isnt phishing site?

Er, because it's an entire working web-based SL client, the authors of whom are a publicly-traded RL company with their RL details published?

http://biz.yahoo.com/bw/071010/20071010006437.html?.v=1
_____________________
http://ordinalmalaprop.com/forum/ - visit Ordinal's Scripting Colloquium for scripting discussion with actual working BBCode!

http://ordinalmalaprop.com/engine/ - An Engine Fit For My Proceeding, my Aethernet Journal

http://www.flickr.com/groups/slgriefbuild/ - Second Life Griefbuild Digest, pictures of horrible ad griefing and land spam, and the naming of names
Usagi Musashi
UM ™®
Join date: 24 Oct 2004
Posts: 6,083
10-19-2007 06:39
From: Ordinal Malaprop
Er, because it's an entire working web-based SL client, the authors of whom are a publicly-traded RL company with their RL details published?

http://biz.yahoo.com/bw/071010/20071010006437.html?.v=1


Nice assumption........
Aya Pelous
Registered User
Join date: 4 Sep 2007
Posts: 12
10-19-2007 09:55
Anything that asks for your SL password you will be open to anything MOVEABLELIFE wants to do with the data they receive.

But whatever, YOU participate at your sole discretion, and when you have fraudulent activity going on after providing your password to others, don't whine to Linden Labs, as they will not help you but only lock your second life account.

But hey...I am only a (dare I say?) "alarmist"....

::shrugs::


:)
Wildefire Walcott
Heartbreaking
Join date: 8 Nov 2005
Posts: 2,156
10-19-2007 10:42
From: Aya Pelous
Anything that asks for your SL password you will be open to anything MOVEABLELIFE wants to do with the data they receive.

This really doesn't sound any different from Ajax Life which naturally requires your username and password so you can log in to SL with it. No one doubts the integrity of Ajax Life (and it's been out for months with no scandals), and while I don't see the point of this Moveable Life (since Ajax Life already exists) there doesn't appear to be any evidence of Phishing.

Frankly, "phishing" doesn't even really apply. It would be phishing if they were pretending to be Linden Lab, and they obviously aren't.
_____________________
Desperation Isle Estates: Great prices, great neighbors, great service!
http://desperationisle.blogspot.com/

New Desperation Isle: The prettiest BDSM Playground and Fetish Mall in SL!
http://desperationisle.com/

Desperation Isle Productions: Skyboxes for lots (and budgets) of all sizes!
Lee Ponzu
What Would Steve Do?
Join date: 28 Jun 2006
Posts: 1,770
Are Second Life Viewers safe?????
10-19-2007 11:22
OMG, I type my password in every time I log in to SL? Does this mean that Linden Lab could use taht password to ... oh god, would they???
1 2