Exploit Statement

Thanks for the information Philip.

Ra!

Now give us the home addresses and names of the offenders so we may dispense some GTA/Hot Coffee on their asses!

5 people?! Whoa, thanks to Phil for the info! Wonder if they are going to do more than just permban them?

Yeah, I want to know about the legal consequences, especially now that it's clear that data was accessed without authorization. Makes it pretty clear that this was more than just petty tinkering.

Unless you can find an experienced lawyer in SL who's willing to comment, you'll probably get two different flavors:

1) Careful, somewhat uninformative statements by company spokespersons.

2) Speculation masked in "it must be so" and "it's common sense" rhetoric by non-lawyers who watch Court TV or Law & Order.

In response to a question I asked at a seminar a few years ago, a current Supreme Court Justice said: "The law is a hungry cat with a head cold." Which means: in reality, it can go lots of different ways, because the law ain't a science.

So I agree: I'd like to hear some informed comments by someone who is qualified.

I would even settle for knowing that the FBI and/or Interpol have been contacted and are working with Linden Lab. The long-term consequences are probably years in the future. I just want to know someone is on the case.

I know there is going to be alot of demand for legal consequenses but really people, dont hold your breath. Call your local FBI cyber crimes division and find out for yourself how narrow their view of illegal is and what constitutes solid proof that can be explained to a jury. The only thing that could possibly happen here is maybe a civil case or two. LL probably won't do that though. It would be up to the individuals who feel they have been ripped off. Just to start the process in reality will probably cost them thousands of dollars and is the loss worth that? I dunno but I doubt it.

Right On Philip!

You seem pretty enthusiastic about these jerks getting off clean.

How so?

There is a difference between being realistic about what is achievable and being enthusiastic to see someone avoid the consequences of their actions.

I think it is going to take a lot more time and money to prosecute or persecute these people than could possible be lost in world through their exploits. It may be frustrating, but it is simply sensible to accept that the FBI etc may have better things to do than to try to obtain retribution for these things.
Cali

Yeah. Like I said. Hot Coffee.

At least they managed to patch the client. I'm a little shocked something like this was manageable when other things, like [Edited: 8 pages of rants] aren't.

Very true...

The FBI computer crimes division does not, from what I understand, like to get involved in any kind of case unless the damage is above some amount (it's in the thousands somewhere.) They did put away one guy a couple years ago (there was a story on Slashdot in which he actually answered questions from /. users after his trial but before incarceration) for distributing warez. The company whose software it was, was able to show that the revenue they would have made from those downloads (had they been actual sales) were pretty high, so the FBI acted.

Linden Lab is probably the only entity that has enough knowledge, interest, and force to get a criminal case started against these individuals. Personally, I would prefer to see a civil suit that would result in financial compensation. Punitive damages and all that, plus payment of legal fees. I know it wouldn't be quite as satisfying to some people as knowing these people were going to the fudge farm, but it seems like it would be more practical. And poetic, since the perps' money would be taken and given to those who the perps stole from.