Ipod Object Scam

Anyone dumb enough to click yes on this or any other gadget from total strangers without knowing anything about it deserve to get ripped off for being stupid.

I already read another post where the person clicked yes and had all her money taken from her. Her reasoning was "..curiosity." Curiosity? More like stupidity.

C'mon, you have to know better, this is just like rl except it's a game but still you need to use common sense as well as savvy.

I posted this in the other script as well:

Beware!

Your script (it will be your script when you accept the object it is in) has the ability to take your money forever after you give it permission once.

It could have a timer in it that repeatedly retries a money transfer in case you receive some more money.

You have no way of revoking that permission.

You must delete and then purge that script.

Update for all watchign this thread. Other Residents had expressed concern (and solutions) and seems LL is planning to fix this in the 1.8 release.

See: https://jira.secondlife.com/browse/VWR-650 for futher details.

~Jessy

Actually, I have a pretty good idea why people click 'Yes' on something like this. Firstly, if the IPod is billed as an AO-type thing, why shouldn't they rez it and click yes? They are expecting the 'blue box' for perm to make the avatar dance. They aren't going to read what they expect to happen. They are just going to click through to make it happen as fast as possible, that's all.

Don't say you haven't done it.. imagine the 2nd time you've played a RPG on your comp. Do you stop and watch those cut scenes or do you fast forward as fast a possible to get to the combat? You've seen them before, after all, and they aren't likely to change. It's this bad habit/mentality that the scammer is using to his/her own ends.

Still this is an expensive way to break a bad habit, though.

There is a bunch of files there at jira but not sure if they are currently useable it was made by a resident not a Linden.
The thing is most people don't know or use forum, or even jira lot of people who are new aren't always going to know about this. It easy to be in middle of something, tired and see pop up and just not have it register what it is. I really hope they use the patch in next update for everyone not just the people who go to jira.

So, what does this patch do? Change the color of the blue screen to another (green would be a good color, since most USD users think green = money)? If so, that would be really great in and of itself.

Because it's the very first time they used that particular AO? I could understand this argument if it's an AO I've used everyday for the past few weeks or months, but not one that I obtained from a welcome area or freebie store minutes earlier.

When I first use a scripted object I've never used before, I acquaint myself with it and read every dialog it throws at me. I'm not claiming superiority here. It's just something I do, and something I assume most cautious people would do too.
I haven't done it. Not with an object I don't use regularly anyway.

Look further down the JIRA page. Josh Linden comments on it going in with 1.8 update.

As to what all it does? No clue, but any help is helpful.

~Jessy

On one of the posts someone mentioned that an object told users that it would charge them a small one time fee. This would be enough to make people click the button even if they were reading the messages and understanding what they are clicking. There are so many legitimate micro payments in SL that most people wouldn't think there was anything unusual about agreeing to a $15L payment. Maybe the payment authorization should have a limit posted with it, or explicitly say, "Do you give this object permission to take UNLIMITED Lindens from your account?" There should be a difference between giving permission for limited payments and unlimited.

Cool, I've read the details. Here's a brief description of the changes.


== Permissions Requests for Debit ==
● If the object does NOT request debit permission, then nothing changes.

● If the object DOES request debit permissions, all requested permissions will be combined into one dialog popup. The popup will be red, larger than default popups, have a warning label, and the buttons will be labelled "Grant" or "Deny", with "Deny" being the default.

* It's unclear if we'll get the "combined" red permissions dialog only if debit permissions are actually requested by a single function, or if the script has the potential to request debit permissions. For example, if a script asks it's owner for debit permissions, but asks only for animation permission from a customer... will the customer also get the red dialog because the debit permission request exists within the script.

*My guess is that a llRequestPermissions() will be scanned, and if it includes debit, the popup will be red. So, a script could call two llRequestPermissions(), one with debit, one with all other requests. In this case, the debit would be red, and the other requests would be normal and not combined into one popup.

== Chat Messages after Accepting or Declining a Debit Permission Request ==
● Details of the permissions request will go to chat, for logging purposes.

== Automatic Denial of Debit Permission Requests ==
● A checkbox in prefs will allow folks to automatically deny all debit permission requests. It will be turned OFF by default (allowing requests). When enabled, a debit request will automatically "Deny" and since all other requested permissions are combined with debit requests, all permissions requested will be "Denied" as well. Chat will again log the denied request.

* As stated on the patch info, it's not common for people to grant debit permissions very often. When folks need to allow debit, they may uncheck the option in prefs, reset vendors and grant permissions, then re-check the option to block unexpected debit requests.

Is it just me...or would it be common sense to have a specific and clearly named forum dedicated to the circulation of information and details on scams and security issues as they arise?

Even more groundbreaking...could we not have a way (as suggested earlier on this thread) of reporting scams and security issues directly via a 'hotline'...rather than weighing up the pros and cons of throwing the matter into the black hole of abuse reporting...before likely as not being told by cynical fellow residents that there is no point anyway?

And...shock horror...the most useful facility of all...a 'live bulletin' service incorporated into the login screen and second life website that alerted all residents to dangerous objects and suspicious scripts...*before* they log on and can be tempted? Personally...I'm not all that bothered about how many residents logged on in the last week...but the items they've created that might cause problems in my SL? Yessir...I'd love to know about those!

Try the NCI SL Consumer Skills class. We spend the last half of the class going over the various scams and deceptive trade practices endemic to SL and how to recognize them. It is every Wednesday night at six pm at NCI Caledon (formerly the Caledon Academy of Virtual Wizardry).

Anyone else had bots offering them objects lately, happened a few times offers of objects or notecards from residents who appear to have blinked into the sim offering to multiple people and out again, without being seen.

I had 'someone' who apparently 'flies' around from sim to sim, spamming objects and NC's to those present. Before I confirm anything, I IM'd the owner and asked them who they are and what it is they are trying to give me. If I don't get a reply, its deleted. She did reply and said she was handing out invites to a new club. I deleted the objects and banned her from our land. Spam is Spam, doesn't matter which way you cut it.

Lol just got a random TP invite from someone I don't know, so I took it to see where it went, to some adult items store trying to get traffic by offereing $3L for ever friend you can TP in.