Hypatia Callisto

Mom and Dad.



But I guess that's not as cool to say to your bros

__________________
"To begin with," said the Cat, "a dog's not mad. You grant that?"

"I suppose so," said Alice.

"Well, then," the Cat went on, "you see, a dog growls when it's angry, and wags its tail when it's pleased. Now I growl when I'm pleased, and wag my tail when I'm angry. Therefore I'm mad."

"I call it purring, not growling," said Alice.

"Call it what you like," said the Cat.

Gigs

It's not opaque to you, the owner of the CPU that is performing the encryption. You have full control to trace every instruction that your CPU performs, so you can always extract whatever data it's encrypting and uploading locally.

Unless it's pre-encrypted, in which case it can't particularly contain anything privacy-invading, since it can't incorporate any data from your computer.

It's exactly the same reason that DRM can't work. You have full control over your own hardware, therefore it's impossible to hide the unencrypted data from you, you can always intercept it after, or in this case, before, it's encrypted.

__________________
-
-
"It is the paramount duty of governments and of politicians to secure the wellbeing of the community under the case in the present, and not to run risks overmuch for the future" - JM Keynes

Gigs

I wasn't claiming it was DRM. It falls victim to "the DRM problem", that is, the untrustable client problem. The end user can always reverse engineer what it's sending because they have full control over the hardware.

Hypatia Callisto

Then don't say DRM because it clouds your explanation.

The emkdu library is just a nice sweet cherry that some morons are likely to pick, and unlikely to know what to do to change its behavior, or even bother to care. It was one of those little improvements on the LL client that other assholes were likely to pluck for their own clients.

It's not about DRM. Nobody is trying to enforce any digital rights management here. It's about ego masturbation and equally butthurt devs who use the Emerald code as a base to create their own closed source copybots for sale. None of this is about freeing the code but about shooting each other in a teenaged mafia war. And to be frank, I don't have a lot of pity for people who are dumb enough to use these underground clients.

Makoto

my question would be more, to blame Microsoft for forcing your temporary files into a user directory named after your account (linux would use /tmp)
There may be an explanation for this - like without it you cant have preview temp uploads as how does it know whether its an uploaded or temp image etc.

Just because the devs of Emerald have possibly been involved in underhanded stuff in the past, and its clear that only one dev was responsible for this as its a part of the code with a single dev license.
It doesnt steal your ipod, or iphone, it doesnt abuse your kids neither does it do anything but have a path to a local version of the file in some hidden metadata.

Why does everyone here hate emerald so much that if it even records that you are logged in it has to be stealing your gushy food...

GROW UP PEOPLE AND SMELL THE COFFEE..

Mako Mabellon

Have you actually read the discussion? Windows is the only platform not affected. Also, it's not including the name of a temporary directory, or even the name of the directory the image is in, it's including the name of the directory the viewer is installed to.

It's already been explained, by an actual Emerald developer no less. They wanted to be able to secretly track the name of the viewer being used so they could tell if anyone was using a non-Emerald viewer that included their emkdu library without a licence.

Makoto

My question is "So What!!!" Microsoft regularly sends your CPU serial number motherboard and harddrive serials to them to make sure you havent installed your windows copy on more than one machine - and i am sure that they could and do take even more information that noone knows about.
I would see this as being a data protection issue , where a folder that could contain your name could be seen,. Nothing untoward just a DP issue to be resolved...

Qie Niangao

That's true, and that would be more tractable than brute-forcing the encrypted data on the wire.

Suppose I do that, then. Don't I now know how to decrypt everybody else's data? (There's no opportunity to negotiate a key with the intended recipient, so it has to use a single cipher key, right?) So the premise must be that I wouldn't do that--a pretty safe assumption--which brings us back to my connection sending content that's in practice opaque to me. Or else the encryption of everybody else's data was futile.

But let's pop the stack: Again, what purpose does it serve me, the putative Emerald user, to be pushing encrypted metadata out my network, even if I can with great effort discover it to be innocent passages from the Kama Sutra?

It's a just fucking viewer. Why the obsessive passing around of little secrets?

Kara Spengler

Because people love a good conspiracy theory.

[Oh, as to install locations on macs, I wonder how many people use their home directory for aps anyway? I always use /, /Applications, or /Applications/utilities.]

cieraspyker

Well, it looks like this.

Kakadu Software SDK v 6.4 Non-commercial Licence

US$250.00


The license is granted to an individual where the licencee receives no commercial and/or financial benefit. This license may not be transferred to or shared with other individuals.
Product Details...

Kakadu Software SDK v 6.4 Commercial Evaluation Licence

US$500.00


The licence is granted to an entity for evaluation purposes only. The licencee must not deploy or distribute this software to receive commercial and/or financial benefit. This licence may not be transferred to or shared with other entities.
Product Details...


As soon as I recieve my quote I will be buying this item. (FULL APP COMM. LICENCE) Because I can. No loan from mom or dad lol. Not sure what to do with it all but I'll try to figure it all out.

So lets discuss item number one. The where it clearly states "receives no commercial and/or financial benefit" If this cheapo product is the level they bought then I have a feeling there is a problem.


Also, on a side note, what happen to Boy? (Rainbow viewer Boy)

Argent Stonecutter

Why is there textured vegetable protein in the Emerald viewer anyway?

__________________
Argent Stonecutter -- Skyhook Station -- Coonspiracy Store

"And now I'm going to show you something really cool."


The previous is a cybernetic datum published - in direct contravention of DoD Regulation #229RR3X3 - as being conducive to the physical, psychological and/or social well-being of the population.

Kara Spengler

Left when LL instituted the TPV policy. Even though the viewer was in compliance, originally (and maybe still?) she would have been responsible for LL's code. She decided the hassle was not worth sticking around.

Imnotgoing Sideways

Oh nice... (^_^)

Much ado about nothing. (^_^)

Now, back to having fun in SL. Does anyone remember laughter? (^_^)y

__________________
Link

Kara Spengler

Oh yes, it is that thing when I use my child avatar account, right?

Jahar Aabye

4:10 into the song:



Dunno why I remember an obscure, extemporaneous statement from a song like that, but it's been stuck in my head for a while.

Mabb Dilweg

Because the song is Epic, the band is Epic, and that line is Epic.

__________________

The Roar of the Lions' Coming Together will echo around the World.
The Glory of Their Union will Light up the Firmament;
And as the Faithful rejoice, those who did not Believe shall be stricken, and burn in the Fires of Envy.
The Book of Awesome, Revelations 7:18

Dickie Swansong

Even moar epicer:

lordgreggreg

1. open your installed emerald application with right click (or ctrl-click if you on apple laptop with one trackpad button) -> show package contents
2. navigate into the Contents/Resources folder
3. find the file name libemkdu or libemkdu.dylib and delete it. (leave this window open for later)

Masami Kuramoto

If you posted this on the Modular Systems blog, would Jcool consider it "disruptive"?

Ariadne Korda

Whoa.

Just opened ISpy and as often it was updating as I did and bouncing around, so my brain registered 'Emerald caught for (blur) opening child av centre' (two consecutive posts)

Heh.

__________________
Vent du Sud is closed. Some builds and decor available on the Marketplace

Spitfire Clay

LGG your an idiot for providing the emkdu.dll in the first place.

Also, LGG stop lying to the sl community, because you were totally behind the emkdu.dll incident along with the whole onyx team.

After it happens, you rage and tell people not to use emkdu.dll. You act like the good guy.

Newest Emkdu.dll was cracked again by hazim.

Commit 631d0ca9d2f73c303a861f3c0cf6dbfeea76e48a to HazimGazov's Inertia - GitHub

Commit d08468d0051e3286ec11159b35bcefd6fccfe549 to HazimGazov's Inertia - GitHub

Commit 13678ca85fe32652133a997dd5969b9901f8ef10 to HazimGazov's Inertia - GitHub

Commit f026ffaeca786c0fa3c358787b632e3891e6459d to HazimGazov's Inertia - GitHub

Commit 2f612dc1a262372435bc0679558af67b0dde30d5 to HazimGazov's Inertia - GitHub

If emerald decides to encrypt spyware into one of the dlls, no one will know about it till someone goes open sources it. By that time, damage is done and people cry about it.

I do not any see source on the emkdu.dll or onyxkdu.dll, why trust it.

Sredni Eel

__________________

http://avatarbizarre.wordpress.com

Satomi Ahn

/me wants to mention that emerald will try to download emkdu again if you delete it... (at least on linux version)

So, if you want to stop using it, you have to change the start-up script so that it stops trying to download it.

Other question: it seems this incident about information leakage in textures encoded by emkdu is quite old.
Now I'd like to know if the current emkdu is still doing this or something alike?

(If I understand well, I should be able to patch my viewer using files from Hazim's blog to decode this metadata?)

Spitfire Clay

So emerald continues to enforce it regardless?

Katheryne Helendale

Unless there's a clear performance benefit to using libemkdu.so over libkdu.so, I'll stick with the LL version. If commenting out a single line in the secondlife script is too much to handle, you can simply make a copy of libkdu.so, move it to /secondlife/bin and rename it as libemkdu.so. Problem solved.

__________________