L$10,000 Bounty for the head of a bug

If it was raining silver dollars... someone would complain that one hit them on the forehead.

Yes, I spend far too much time quoting your posts in my siggy, Siggy.

Just btw, its possible. After reading the original post, I spent a while working on a method of doing it.

Last night at like 8pm PST, i reported it to Philip Linden.

Interestingly enough, my method isnt the actual bug Philip was looking for, or at least thats what I got out of the whole thing. But, it still allows me to copy any no-copy object, and keep all creators the same.

I reported it as soon as I discovered it. I really don't care about the 10kL. Yeah, after reading the other posts I see that the solution to this bug could get alot better of a reward. but heck. I'm just glad it'll be fixed and people won't be able to copy the stuff I sell.

Anyone who IM's me asking for the method, or threatens me, will be reported to the lindens for harassment.

I think compensating those that were affected by this bug is a separate question from this one. I'm not trying to downplay the magnitude of the problem - after all, it's likely some of my own creations are floating about in the same condition - but rather that compensation is a second and addition step needed in addition to the bug bounty.



That's a bit of a fatalistic way of putting it. To say it's too late is to say we shouldn't even bother at this stage to try to fix the bug, because the damage has been done. However, the damage is ongoing, and will only continue to grow until the bug has been resolved. Perhaps this is more aptly titled 'better late than never'.

The concept of a bug bounty has been used in software circles before, with varying degrees of success. Software apps like Apache and GhostScript have both used bug bounties to great benefit, and as a result their software both have good reputations for stability. In SL's case they're experiencing the first and greatest difficulty in debugging. It's hard to know what to fix if one cannot reproduce the conditions that caused the bug. That's what's needed here - a pulling together of the SL community to search and locate the conditions triggering the bug.

To undescore that thought...I'll donate $5K of my own lindens to the bounty. If/when a Linden confirms that the bug has been found and reproduced, I'll add in my own 5K to bring the bounty up to 15K. If I can't contribute to the SL community by finding the bug myself, then I'll be more than happy to sweeten the pot a little for those that can.

I think a Linden needs to lock this thread... LOL

Where's Jeska Linden when you need her?

Quote: This has spiraled into a conversation that should be taken off the forums. Please don't use the Second Life Forums to discuss personal issues or attack each other in personal ways. There are many other more appropriate places for discussions of this type. As such, I'm closing this thread.

Too funny!

Hhaha there are two ways to take that... And one of them doesn't bode very well for the majority of forum posters

-- but that aside, I'm quite flattered

I have never been able to do this myself but I heard in a couple of different clubs people saying they did it. If its true then makes no copy pretty worthless.... I do agree with the majority of the posters that the reward needs to be much greater. I know some people here can bank 100k in less than a month.

I can't do that, but I can show you how to copy it even with the no-copy flag, found it by mistake tonight.

i know how to dub a non copyable item...

While you are at it you should fix the no transfer permission. Or at least fix the LL fuction for copying prim attributes. If you give someone a Modify / No Transfer item all they do is drop a silly script into it and the script replicates the item perfectly except with a new owner and full perms. I got burned by this and the linden reply was basically "we cant do anything because you gave them MOD perms" the whole "NO TRANSFER" seemed to be worthless because they had modify rights.

The permissions, the script function AND the damn LL policy need to be reworked. Thats when I will be back in SL building again.

Currently I have logged into SL 3 times in the last month and each time for under 5 minutes. I refuse to play because all i do is build vehicles! When my hard work becomes someone elses property to sell as they wish without any intervention from LL was when I decided FL was going to be taking my time up going forward. SL isn't worth it right now for me.

I only have one question I have been reading this and quietly observing for a change.

The question is why haven't we heard anything further on this topic recently?

Several Updates have ensued since this posting. Has the loop hole been closed if it has why was it not annotated on the update release notes?

Just merely seeking info here.

Shadow

When Philip and Hamlet started taking interest in this issue, I decided to come back and start working on Preen confident that a solution is on the way. But I haven't forgotten about this. A little lip service doesn't close this issue. We ARE expecting a follow-up and some positive change.

And THANK you Corn...I had no idea about that!!!

-aimee

Pay up!

Oh nooo. I was going to do that for the hair I've made. I thought it'd make my SLife easier. Forget it then. I'll live off my stipends.

Aimee, I understand and respect that. I guess I am slowly getting worn down about the whole permissions who has rights thing. So much of my stuff from the past keeps poping up in world that was never intended as its being done.

Things like Corn mentioned repeatedly happening.

I simply want an answer and a solid confidence that what I create today won't become tomorrows Newbie "Can I sell you some clothes" and find my newer creations in the hands of a newb with No Creator in the creation tab.

The canned answers we get in reference permissions distills lower confidence that things are being taken seriously. This thread alone by Phillip perked my attention up but slowly has wained again as we have heard no further commentary on the matter from either Haney or Phillip.

Hence my question.

Shadow

I was under the impression that the permissions bug happened to objects when they upgraded the server side software.

Don't worry, just wait and see

Thanks again to Damien Nightshade and Evil Fool for finding 2 potential permissions exploits that we fixed with today's release - version 1.5.11. They both received L$10,000 for their work, and the immeasurable fame of being in the release notes

The offer still stands, however, so please keep the bugs coming. L$10,000 for a demonstration of copying a no-copy object that we deploy a patch to fix.

Theres that pesky bug that I'm not a 'lindenairre' -- I'd really like that one fixed

Siggy.