Welcome to the Second Life Forums Archive

These forums are CLOSED. Please visit the new forums HERE

Details of the earlier permission bug/exploit

Francis Chung
This sentence no verb.
Join date: 22 Sep 2003
Posts: 918
10-09-2006 18:55
Hello. There are a few of us in-world right now trying to piece together what exactly happened. Details seem to be scarce, I'm hoping that you can elaborate.

The only responses from LL I've been able to locate are here:
http://blog.secondlife.com/2006/10/09/second-life-open-outage-recap/
/139/e1/142156/1.html

Are there any more details? The following is what I've been able to piece together. Can you please correct me where I am wrong, and let me know what parts of my recap that you cannot confirm?

1) Items for sale->copy between 7:30pm Sunday and 8am Monday were sold fully permissive. Items that were in object contents retained their permissions, although you could still freely distribute copies of the entire object as well as their contents..

2) People could, and did, use this bug as an exploit to bypass permissions of items they had previously obtained. So, for instance, suppose I bought a shirt last year that was no-transfer. I could use this bug to give myself and my friends a boxed copy of said shirt.

3) Later on, LL went through and attempted to "fix" the affected items in the database. I am hearing reports that some (but not all) fully-permissive items reverted back to their "safe" state. The people that have told me they have fully permissive copies still should have filed a bug report with you.

4) Copies of items that were made using this exploit will remain.

5) You can no longer create new items using this exploit.

Is LL going to do anything more regarding this? If so, what? Or is that "it"?

Edit to add:
Suppose I used this bug/exploit to get a fully permissive copy of an object. I give that object to my 3000 closest friends. What happens to their copy? They keep it? What permissions does it retain?
_____________________
--
~If you lived here, you would be home by now~
Torley Linden
Enlightenment!
Join date: 15 Sep 2004
Posts: 16,530
10-12-2006 10:43
Hi Fran, the latest info I have on this and what LL will do is in Robin's blog entry:

http://blog.secondlife.com/2006/10/10/update-on-permissions-bug/

Unfortunately, yes, it appears like fully permissive copies will not be retroactively restricted or deleted after the fact. :\ As Robin wrote:

From: Robin Linden
If you feel that someone took advantage of this bug and is selling copies of something you made without your permission, please file an abuse report. We’ll follow up with the buyer and sort out the IP rights.
_____________________
Llauren Mandelbrot
Twenty-Four Weeks Old.
Join date: 26 Apr 2006
Posts: 665
Re: Details of the earlier permission bug/exploit
10-12-2006 12:04
Re Details of the earlier permission bug/exploit, we have been informed that the permissions have already been retroactively corrected, and that the correction has broken legitemate content.

I`m sorry that I have no current references, but I will return here and link to them as I come across them, until you reply.
  1. Item Permissions Changing
  2. How did the fix work?
    1. Please answer the question....because your last try didn't

  3. Permissions changed on attached objects
  4. Still no *specific* answer whether scripts in objects were made full-perm
  5. Permissions problems (new bug?)
  6. Permissions Problem with Inventory Items
  7. Item Permission Loss Update?
That`s it for now, but I`ll keep adding if I find more. I saw many more yesterday, but I wasn`t tracking them yesterday.
Jeska Linden
Administrator
Join date: 26 Jul 2004
Posts: 2,388
10-13-2006 14:44
Added Llauren's post as well.
_____________________
"The opportunity to participate in the creation of a new world is really a rare one, and so I hope you cherish it."
- Mitch Kapor on Second Life at the 2006 SLCC