Security hole?
|
|
Sling Trebuchet
Deleted User
Join date: 20 Jan 2007
Posts: 4,548
|
01-25-2010 15:12
From: Eternus Soulstar because there's no fun in griefing people that aren't there. Yeah - but first you mess with their land in front of them, laugh at them when they can't eject you - and then you eject them - from their own land. Let them back in, then eject them again after a while. Will the last griefer to leave please eject and ban the landowners?
_____________________
Maggie: We give our residents a lot of tools, to build, create, and manage their lands and objects. That flexibility also requires people to exercise judgment about when things should be used.
http://www.ace-exchange.com/home/story/BDVR/589
|
|
Lear Cale
wordy bugger
Join date: 22 Aug 2007
Posts: 3,569
|
01-26-2010 05:40
From: Sling Trebuchet Here's a thought:
If these people had obtained general group powers or even godlike powers, why didn't they freeze, eject, ban people? It would seem like an obvious griefy thing to do.
I just ran a test with group co-owner on group-deeded land.
We could eject each other from the land, despite being group owners with full powers. We could freeze and ban.
Being the group founder was not a protection either.
It's possible that whatever the exploit was, it didn't involve power over anything but terrain and (some) objects. That doesn't explain why the owners were unable to eject or freeze the griefers. |
|
Kitty Barnett
Registered User
Join date: 10 May 2006
Posts: 5,586
|
01-26-2010 06:05
From: Lear Cale FYI, one form of the terraforming attack is by a scripted object. If the owner rezzes it and grants permission it can terraform at will, using the owner's permission. I don't think that terraforming permissions are granted automatically on sit or wear, so I think permissions would have to be explicitly granted. Terraforming is implicit: if someone hands you a prim with a terraform script in it and you rez it then that's all that's required. Or with modify rights (or getting a running script into a group-deeded prim on group-deeded land) nothing even needs to be rezzed at all. Or a left over "flattener" with "Allow anyone to move". |
|
Sling Trebuchet
Deleted User
Join date: 20 Jan 2007
Posts: 4,548
|
01-26-2010 06:41
From: Lear Cale That doesn't explain why the owners were unable to eject or freeze the griefers. It doesn't. The terraforming object doesn't explain that either. The victims said that the names of the griefers did not appear in the security orb chat - implying that they would normally see chat from the orbs when someone is near(?). I wonder if they tried to eject them both via the security orbs (which wouldn't work if the orbs were not detecting them) - and via right-clicking the avatar. It would have been interesting to see the exact text of the messages that the object owners received when the objects came into Lost and Found. That would help to narrow things down. I once had a prim that overhung Linden land returned by a Linden. "Your object '(name)' has been returned to your inventory lost and found folder by (name) Linden from parcel '(name)' at (Region & coords) due to parcel owner return." He took ownership of the parcel temporarily - presumably via Advanced / View Admin Options / Admin / Parcel / Owner to Me. If ownership of the land changed, the Security orbs wouldn't be able to do their thing, and the 'owners' would be powerless as well. A sim owner has God powers over their PIs. The powers can be delegated.
_____________________
Maggie: We give our residents a lot of tools, to build, create, and manage their lands and objects. That flexibility also requires people to exercise judgment about when things should be used.
http://www.ace-exchange.com/home/story/BDVR/589
|
|
Rock Vacirca
riches to rags
Join date: 18 Oct 2006
Posts: 1,093
|
01-26-2010 07:03
Once you have terraformed the land to your specific requirements make sure that it is BAKED (you will need to get the owner to do this).
Then after any griefing attack the terrain can be reverted to the baked state easily.
Rock
_____________________
Chapter & Metaverse
http://rock-vacirca.blogspot.com/
|
|
Melita Magic
On my own terms.
Join date: 5 Jun 2008
Posts: 2,253
|
01-26-2010 12:52
Maybe this has already been answered - if so, pardon & ignore.  But Kit, although your land is set to your own group, isn't it also under the land owner's group? As such, couldn't someone else in that same group have rights of some type and have misused them on someone else's parcel? And just to be sure - this is SL, not Open Sim, right?
_____________________
"Every time you help a newbie, an angel gets its wings." - from some movie or other...
|
|
Lear Cale
wordy bugger
Join date: 22 Aug 2007
Posts: 3,569
|
01-26-2010 14:04
From: Sling Trebuchet It doesn't.
The terraforming object doesn't explain that either. Precisely. There's clearly more at play here. Scripts can't freeze, so they must have used the SL GUI to attempt that. |
|
Kit Banufong
Registered User
Join date: 5 Jul 2008
Posts: 8
|
01-27-2010 09:47
I emailed security and had a visit from a Linden, and they are now looking into it , thank you for all your suggestions
Just to clarify
Yes the orbs normally greet people, they were set to eject anyone coming withing a radius of the cabin with a warning first
No were weren't trying to eject them through the orbs
We tried every method we could to eject , freeze , ban or in any way get rid of them
The orbs and cabin doors were returned to Dakx BEFORE any terraforming happened
Some of the stuff was returned because it was buried and some stuff that was buried wasnt returned
Stuff that was ABOVE ground was also returned
Apparently if it happens again a ban and a restart will work
I'm just hoping it doesnt happen again
|