Macphisto Angelus

Right now OpenLife is set up where bots cannot log in. No copybot can enter. This is NOT a plug for OpenLife.. this is just a sad post that says it is VERY much something LL can do to prevent some of this theft. But, as long as those other bots are giving them the illusion of log in numbers they will let it ride.

Copybot can be stopped for joe kiddie hacker. LL just has more to lose on it's end by putting the plug in place I suppose.

__________________
If life is just a joke, why aren't we laughing?

Rebel Television

How do they prevent bots from logging in? The only method I could think of is a Punkbuster-type verification tool that checks the client executable against the current version to see if its exactly the same.

cala

Shenanigans. Link proof, or you're full of it.

Proof: I can log in to both Second Life *and* any OpenLife sim with a production LL client, any opensource-built current client, any one of the 3 bot engines I test, tweaked versions of AjaxLife (running on my machines), and most importantly, any LibSL-based client including any that might or might not have copybot features. There is no block on "channel" in OpenLife, and even if there was, that's 2 seconds of work to spoof.
There is no copybot-blocker in OpenLife, and never was.

Chalice Yao

I have to agree with the others. Wrong. You can't prevent it, sorry to say it. And if no copybot can log in, the functionality is patched into a normal client into a matter of hours, if that.

Tary Allen

I have to start looking at the posts date, for almost 2 minutes I was really alarmed , and was ready to log and start tooking things back to inventory.

__________________
"This is an important announcement. This is flight 121 to Los Angeles. If your travel plans today do not include Los Angeles, now would be a perfect time to disembark."
Douglas Adams (1952 - 2001), "So Long and Thanks For All The Fish"

WarKirby Magojiro

Mac, what the hell are you talking about? We're going to need some more clarification of these claims.

Also, Cris, what happened to that automatic 45 day thread lock? This one is 5 months old

__________________
Wounds, both physical and mental, heal in time. bones reknit, therapy and drugs make you forget. Life goes on.
But nothing cures death. Please remember this.

Macphisto Angelus

What clarification do you want, War?

As of now there is some way that they can block a port bots use. Things have to come through a viewer type connection. OLG is not the only one that can do this either.. others are.

First clue I had it was going on was when someone came to the forums mad because they could not get their libsl based bot in to use as an "NPC". It was said then this was going on and was said at least three times in meetings over the last month or so.

So, if they are doing it LL likely can to. Want specifics? sakai (@) openlifegrid.com may get time to fill it all in. He is pretty hammered right now but if he has a chance I am sure he can answer.

Part of Lilybeth Filth's Legend City spamming on our forums said they could do it too so maybe Lala over there can explain. Not my area of knowledge but when people say they can't log in with bots I have to think it is happening.


Can it be gotten around? Hell, probably but for those who don't know the ways around it stops them.

Let me know what you find out.

Macphisto Angelus

K... let me repeat. Not my area of knowledge. But the grids claiming this is possible may be able to explain. As of now.. I accept it as fact when I see people saying they can't do it.

OH, and I can ask what is happening but you all have the knowledge of what would make it possible or impossible so better for one of you coders to ask. Nothing I come back with will be considered less then shenanigans or whatever.

Also one final note: Soon OLG will only accept log ins from it's own KirstenLee made viewer as a further security measure.
So do you coders think this is possible or BS?

And don't shoot the messenger here, I am only going by what I have seen posted and heard in meetings. Thanks to Warkirby and Chalice and others who asked me to clarify respectably. Besides Cala up there you all should know by now if I am wrong I will say so and will listen to the other side with an open mind most of the time. I tend to try to stay on the level headed side of stuff.

Chalice Yao

Heeh, no problem :>

Lemme get into a little detail about how the client connects to the grid first:

Basically on each login, the client sends, among your user, pass and such, a harmless string of text that identifies the version of the client. Usually something like 'Second Life 1.21.6'.
Third party clients pretty much always have that string changed by their developers, because it's also what makes Second Life go 'NOES, thou mayeth not entereth before thou upgradethththth'. Basically it's what the servers use to determine if they keep you out til you update.
So, one way I see to keep out copybot is to block its client string. I presume that 90% of copybot users don't know how to change it, or think of the fact that it might be the cause.

But yeah, that's pretty much the only real 'protection' that is possible, unless a grid goes for things like only allowing a specific viewer.

Like that. But then again, that viewer's version string could simply be matched to get in.

Macphisto Angelus

Thanks, Chalice. It is always pleasant to get someone to explain why what I said was possibly wrong as opposed to someone out of the blue getting all snooty. I respect people like you and War more then you know and when you all say something I am more then likely going to see it as what is likely.

I dunno.. time for a break I think. Got so much going on but know that you are appreciated at least by one SLUer that is not always right, but always willing to learn.

See you all in a few days. Be nice.

Chalice Yao

Enjoy your break!

Tyche Shepherd

Is this really going to be the case - because I thought they were working with the realXtend viewer - KirstenLee's viewer is very good and I do like it but as far as I know there is no public open source code repository for this viewer (please correct me if I'm wrong) so OLG would be effectively running a closed client . The realXtend client however is a publicly open source via Sourceforge .

__________________

Chalice Yao

From the looks of the website, no, Kirsten's viewer as well as the RealXtend viewer are promoted. Judging by Kirsten's blog tho, her goal is to basically offer the Rex team her viewer as a foundation to build their features on :>

Alas, yes, I don't see a public code repository of hers.

Arilynn

Have a nice break but come back soon, Mac.

Vertigo Paris

Take it easy, Mac.

__________________
SLU Clubhouse - Open 24/7
Vist at http://slurl.com/secondlife/Tan/138/25/25

Quote:

Originally Posted by Trout Recreant Helllllooooo Verti! At last! The chance to rate one of my favorite people! Absolutely beautiful pictures. You are a strong, opinionated woman who is not at all afraid to express herself both verbally and physically. You have a strong sense of fantasy and mystery surrounding a drop dead beauty. You maintain an aloof intelligent exterior that we long to break through, but which might intimidate some men. It shows a complexity of personality that few possess. Based on these pictures, I am giving you an 8.4 on the official Trout Recreant Scale of Slutiness. You are a slut, but only in the best possible way, and any man lucky enough to see that side of you should count his blessings.

Mecha Dinosaur

Why am I not banned from SL yet?

__________________

Mecha Dinosaur

They have not in a long long time. I know of several people who have found SL economy breaking issues that where never compensated or acknowledge for their help. There was mention it would be profitable to sell possible exploits to third parties then to use them on their own or inform LL. This leaves to question if there are folks doing this right now.

Chalice Yao

The bounty still gets given to people. A friend of mine only recently received one. The thing is, it doesn't tend to be given to you unless you ask for it in the report, but then, if it's a grave security bug, it gets handed to you. He's not the only person I know who got it, either.

WarKirby Magojiro

I got paid 10,000 L$ for demonstrating a sim crash to Andrew once
Although I don't think it has, (or can) be patched