Welcome to the Second Life Forums Archive

These forums are CLOSED. Please visit the new forums HERE

llHTTPRequest and Security

Dave Attenborough
Registered User
Join date: 1 Feb 2007
Posts: 4
03-18-2007 13:46
hi,

am planning to do a small mp3-shop to sell my songs from sl. i want realise that with a
llHTTPRequest to a php-script on my server that copy the file just for one download in a
special folder. What i want to know is: is llHTTPRequest secure? or is it possible to read out
the parameters with an sniffer programm?

thanks for helping me with that.
Keknehv Psaltery
Hacker
Join date: 11 Apr 2005
Posts: 1,185
03-18-2007 14:10
I seem to recall hearing about someone on the teen grid doing that, and he was banned for copyright infringement. I would highly encourage you not to try and sell copyrighted works in SL.

On the other hand, if it's your own music, go ahead. As far as I know, there is no way for an outsider to "sniff" llHTTPRequests coming from the SL grid.
Dave Attenborough
Registered User
Join date: 1 Feb 2007
Posts: 4
03-18-2007 14:26
From: Keknehv Psaltery
I seem to recall hearing about someone on the teen grid doing that, and he was banned for copyright infringement. I would highly encourage you not to try and sell copyrighted works in SL.

On the other hand, if it's your own music, go ahead. As far as I know, there is no way for an outsider to "sniff" llHTTPRequests coming from the SL grid.




thanks for the answer. no i don't want to plan to put there copyrighted music. only my own stuff. can't believe that someone is stupid enough to do that here in sl.
Keknehv Psaltery
Hacker
Join date: 11 Apr 2005
Posts: 1,185
03-18-2007 14:30
And to further the stupidity, he didn't even have a php script to copy the music-- it was all in a music folder, and you could browse the directory root. There were over 2000 songs in that directory.

To be fair, it was the teen grid.
Kenn Nilsson
AeonVox
Join date: 24 May 2005
Posts: 897
03-18-2007 18:11
As far as I am aware, an llHTTPRequest essentially exits the SL metaverse as a GET or POST and therefore enters the internet with the same security benefits and flaws of a normal GET or POST.
_____________________
--AeonVox--

Computer games don't affect kids; I mean if Pac-Man affected us as kids, we'd all be running around in darkened rooms chasing ghosts, eating magic pills, and listening to repetitive, addictive, electronic music.
Sys Slade
Registered User
Join date: 15 Feb 2007
Posts: 626
03-18-2007 18:14
It goes from the server side though, so a client should never have the opportunity to see what address is being called. Unless of course there's another permissions screw up :-P
Dave Attenborough
Registered User
Join date: 1 Feb 2007
Posts: 4
03-21-2007 08:05
thanks for the answer. thats what i really needed to know.

From: Sys Slade
It goes from the server side though, so a client should never have the opportunity to see what address is being called. Unless of course there's another permissions screw up :-P