object in freebie box stole my money

I picked up a box of freebies at a freebie warehouse. One of the objects inside was a Dance Ball. After I rezzed the ball it asked if I would allow Linden dollars to go to me, Abby Bloxome. Thinking that would start the dance, I clicked "yes" and it promptly drained my account. Luckily I only had $17L at the time. I inspected the object and pulled up the creator's profile. Unfortunately, he had a note in it saying someone has been using his creation to scam people. I just want to warn others, if they find this Dance machine in their freebie box, don't rez it.

You been here since October '06 and only had L$17 lol whatever next ? ROFL

If you are the jerk who stole my money, may you rot in hell.

I would'nt steal anyones money ($(L$)) .. but agree .. If You did You are a jerk ...lol

Grow up

May whoever stole Abby's money indeed rot in Hell.ROFL

..So I assume your going to post the creator of this "Dance ball" that ripped you off?


for the benefit of other jerks that mighyt read this thread.

I dont believe the creator of the dance machine is the one who created the script to drain my money. There would be no point in publishing his name and generating bad publicity for an innocent guy. I have sent a ticket to Linden Labs and I sorta hope I can hand the machine over to them and they can trace it that way..unless YOU would like to give it try it and see if really does drain YOUR money. ROFL.

Hi Abby, have you checked your transaction history on the web site? That should tell you exactly who your money was sent to.

sure .pass me a copy. and as it's from a complete stranger I would rez it and right click/more/inspect see who built it ..I certainly would'nt give it any perms including if it offered to give me L$1000.

Let this yet be another warning to "Spam" objects.

Actually, the original creator probably isn't the one who's doing this. I can take any full-perm object or script and modify it to my heart's content. I can make it do massively evil things, but my name won't be attached to it in any way that other residents can see.

I'm assuming the "steal money" script inside the item is no-mod. If you CAN mod it, then you can easily look at the script and see who the money is being sent to.

Otherwise, you need to check your transaction history. When your money is transferred to another resident, the transaction history will say who it went to.

WOW! Thanks Ava, I never thought of checking out transaction history...and the culprit was...maybe I shouldn't tip them off in case they are reading this...wow, I do feel better, thanks Ava

Eek, DON'T NAME NAMES!!!

Seriously, edit it out, or you might get your account closed.

--

Okay, you did it. Good... don't want you getting in trouble.

No go and AR them RIGHT NOW!!!

Abby .. please send me a copy of the object ( though I'm not in world right now ) I would like to examine the object and see if it's indeed possible to insert a script into something undetected.

It's not that the script is inserted undetected. It's that the script was originally created full-perm by some innocent bystander, and that script was modded to do some nefarious deed. LL may be able to tell who modded the script, but all residents can see (as far as I know) is the original creator and the owner.

Don't you hate that when you can't name names? You can go here if you want to...

http://forums.secondcitizen.com/index.php

Sorry this happened to you Abby, but praise be that you only lost L$17. Some guy here the other day lost L$60,000 to an object requesting debit permissions. The message you accepted asked if it could *take* Linden dollars from you, not *give* them to you.

Having scoured Jira after a recent discussion on this issue, it appears somebody working on the open source viewer has already submitted a patch to make the debit permissions dialog more obvious and less prone to spoofing - and it should appear in version 1.18 of the viewer. Hopefully this kind of thing will become less common.

https://jira.secondlife.com/browse/VWR-650

Edit: don't forget to delete that object from your inventory Abby. if you rez it anytime you've got money in your account you'll be at risk again.

Even rezzing it will put You in danger of losing money??.. I thought at least it would be safe to rezz but not to grant perms.

no to the first question, yes to the second. i just said rezzing it would put her "at risk". if somebody said yes to the debit permissions request once, I figure the chances are high that they'll do it again, so best to just remove the risk factor by deleting the object.

Please notify the freebie warehouse where you got this so they can remove it from thier shelf. Otherwise there will be more victims.

The object is no modify no transfer so I can't copy it to you Jax, sorry. I don't think I should delete it until Lindens look into it as they may want it as evidence. By the way it said "do you want to give Lindens to Abby Bloxome?" Which is me, so I said yes thinking it was just a scrambled message since it was a freebie. I really don't think I was all that dumb, but hey, if it makes people feel good to think THEY could never get scammed..well, that may be my mission in life, raising other's self esteem. I posted about this here to warn other people, I realize 17 Linden is not much. I'm not sure which freebie warehouse it was but I will IM the two I did visit (I was just looking for a free, damn rug for my 512 cottage, , *sob*)

What's so funny about having 17 L in your account? Should everyone always have wads of cash in their account? *scratches head confused*

Abby, nobody is calling you dumb. Just pointing out that the object *did* request debit permissions in order to take the money. Maybe you got multiple blue message boxes (a common scamming tactic) and therefore didn't see it, but acceptance of that dialog absolutely _is_ required in order for money to be taken from your account.

As ArchTX said, do inform the freebie store where you obtained this object about what happened so other people don't get scammed.

Please forgive a dumb newbie question, but how does one access one's transaction history?

https://secondlife.com/account/transactions.php

Or the long way around: My Account, at the right side "Transaction History" .

(Edited to add that Transaction History shows your L$ transactions, and Account History shows any US$ transactions)