Kate M.

Was Vivox Chat p0wned by Emerald Developers? | The Alphaville Herald

The short version: Jaycool and Ph0x were able to gain access to the administrative workings of the Vivox voice service. This enables them to listen to any conversation, anywhere on the grid, INCLUDING private estates such as Linden owned sims.

Additionally, using a "rogue sim" exploit, the two criminals were able to gain access to any user's computer, and download any file they wished.

Here's a short snippet of skype chat, where Hazim Gazov explains the rogue sim exploit in a little more detail. Some names have been changed.

Aldbaran Galicia

This gets better and better...

__________________

Lance Corrimal

I don't care if those phr34x hacked vivox or not...

this one sentence in the article makes me want to ban the use of voice:
"Vivox has a game moderator can listen in feature"

Kate M.

Further update: Hazim says Vivox's admin dashboard fails to check credentials and is essentially "wide open". Makes you feel good about using voice, doesn't it?

Kara Spengler

New update: Emerald figured out a way to get chat.txt to rumage in your refrigerator!!!

Cincia Singh

I quit using Emerald when I found out it eats babies, kicks cats, slaps puppies and makes users do "patty cake, patty cake" with Roger Rabbit against their will.

__________________
*My concern can be measured in micro give-a-shits, and I'm working on nanotechnology!*

Sid Nagy

Didn't they rob the First National Bank yet?

__________________
The secret to creativity is knowing how to hide your sources.

Elysium Hynes

They tried and failed so it wasn´t really a robbery.

__________________
I have a blog with stuffs in it Sium

Marx Dudek

*spits Coke on work monitor*

Aldbaran Galicia

This just in: Fractured Cristal is responsible for a plot to assasinate World Leaders from heart attack...

The plan consisted of of spamming (through Esmerald) World Leaders emails with the infamous video 2 Girls 1 Cup.... Oh the Horror....


Of course this evol plot was stopped by WU Tizzers and JLU Kal Venkman on one of the most improbable duos of all time...that not even a far fetched Hollywood script could combine such elements....

Of course more of this on AlphaVille Herald....WE DONT LIE! YOU HEAR US ARABELLA?? WHERE IS YOUR MESSIAH NOW, ARABELLA??????

Cincia Singh

Seriously, we probably need to forget about Emerald. The tards will always use their favorite viewer regardless what hacks it contains and it's a totally dead viewer to anyone with an IQ higher than a "pet rock." We should stop ... yes we should ... soon ... ok maybe not quite yet ... ok as soon as the lulz stop coming in epic fashion.

Ann Otoole

there needs to be a version of SL that does not include any support for voice whatsoever. None of the code. None of the dlls.

Cindy Claveau

It would soon be called the "man pretending to be a girl version" of SL.

__________________
Drama is hard; let's go shopping.

Kate M.

Removing the slvoice.exe will fix it, I think. Without the executable it can't connect to the vivox servers.

RevMagdalen Kyrie

What about just not enabling voice? Would that help or doesn't it matter? (Sorry if that's a dumb question.)

Ann Otoole

Well deleting the exe is just part of the picture. You need to also delete:
vivoxoal.dll
vivoxplatform.dll
vivoxsdk.dll

And you must search your hard drive because you might be surprised what else you find that has been secreted onto your system.

I.e.; Don't forget to have a look in a folder called tmp on your root.

And a zillion registry references. Like those firewall permissions.

However I still say LL needs to provide a client without this sort of pants down, Vaseline jar mounted on your back, wrists handcuffed to ankles, your ass out your window for all to use horseshit.


So what does this round of horseshit make me think of people that have insisted on voice? Hopefully people will learn to tell Linden Lab to suck a dead dog dick if LL insists on using voice.

ETA: Oh yes EQII has this may as well be a bot net malware app vivox shit infestation as well.

Beezle Warburton

Me looks for that microphone I fail to own.

Oh, maybe it's with the webcam I also fail to own.

Hah!

__________________

Ann Otoole

if you have the shit on your system then a hacker can use it. Mic or no mic.

Ann Otoole

Better to be called that than to be called dumb fuck letting 17 year olds pwn them daily. As is LL now officially referred to in my book.

Kara Spengler

Well, if you actually let one of those things on your system.

Aldbaran Galicia

On Another shocking revealing News: The Devil Himself, presented the contracts that proves he OWNS all Onyx Devs soul and that he already has a special cauldron for them...However when questioned if he also owned Prokofy Neva's soul he responded: " I am not going to comment on pure media speculation...."

On Another related news, Hazim Gazov, inspired by Gandhi, decided to go on a hunger strike for the victims of JCool(Hazim himself ). "I do this because i WORRY about the Esmerald users......the real real victims here.......GO INERTIA!"


ARABELLA: I DO NOT LIE.....I just forget to say the truth!

Sid Nagy

Do you really think these things happen in SL?
OMG

Ann Otoole

So now we know how all those recordings were made. quite obviously the secret to hacking vivox is not exclusive to the emerald team.

RevMagdalen Kyrie

I am so sickened by Fractured I can't even find words for it. This privileged Western teen has EVERYTHING he could possibly want. Parents that apparently let him run completely wild, no shortage of cash to buy whatever licenses or servers he wants, and perfect freedom to surf the net, even in adult-only areas, and express himself however he likes. Teens in Iran, China, and other repressive regimes are quite literally dying for their most basic free speech rights, and I came back to Second Life to try to raise awareness about that.

Now I see how Fractured and his "friends" have used their freedom to damage everyone they encounter, out of a sense of entitlement and privilege, for the sheer thrill of seeing just how much they'd be allowed to get away with. Their similarly entitled and privileged victims for the large part think it's all a good joke, and are upset with the "drama" of people asking for these crimes to be prosecuted and for everyone to be treated equally before the law.

I hope one day very soon these criminals are forced to face the consequences of their actions, and confronted with the risk they put hundreds of thousands of people in. I hope this confrontation takes place in federal prison, in the form of hundreds of thousands of letters from people whose livelihoods, or in some cases their very lives, were put at risk by the exploits these script kiddies bragged about.

Jahar Aabye

Presumably Hazim was not using Emerald when Fractured allegedly turned off his voice via Vivox. That also implies that this was not specific to the client being used, but was some sort of serverside hack that probably did not involve the Emerald client specifically.

But I could be wrong. Also, what the fuck is a "rogue sim" exploit?