Re: [opensource-dev] Banning by client

2010-05-04 Thread Ricky
While I understand the issue that people are banning based solely on
viewer ID, I don't see this as being a security issue. The client is
NOT being hacked, the information is just not as easy to access as it
is for a web browser.

I see the info bring gathered as nothing more than the user agent
string that every web browser sends.  I'd go so far as to request that
the viewer name and version code (as a single string following a
convention in format, a la browser user agent strings) be accessable
from LSL.

But then, for those who think this might be a problem, we could easily
add some functions into our various viewers to change the string into
whatever we choose it to be. Again, just like browser useragents.

Ricky
Cron Stardust

On Monday, May 3, 2010, Lillian Yiyuan lillie.yiy...@gmail.com wrote:
 This is clearly a security hole that is being exploited, so it should be 
 fixed.
 ___
 Policies and (un)subscribe information available here:
 http://wiki.secondlife.com/wiki/OpenSource-Dev
 Please read the policies before posting to keep unmoderated posting privileges

___
Policies and (un)subscribe information available here:
http://wiki.secondlife.com/wiki/OpenSource-Dev
Please read the policies before posting to keep unmoderated posting privileges


Re: [opensource-dev] Banning by client

2010-05-03 Thread Argent Stonecutter
On 2010-05-02, at 17:01, Skills Hak wrote:
 The people with bad reviews are mostly copybotters who have been
 banned by the system and are coming up with crazy quicktime hack
 theories, Dekadance Mint isn't even in search any more.

You could eliminate the crazy quicktime hack theories if you wanted  
to. It's not like the scope of what you can legitimately be doing is  
particularly large.
___
Policies and (un)subscribe information available here:
http://wiki.secondlife.com/wiki/OpenSource-Dev
Please read the policies before posting to keep unmoderated posting privileges


Re: [opensource-dev] Banning by client

2010-05-03 Thread Lillian Yiyuan
This is clearly a security hole that is being exploited, so it should be fixed.
___
Policies and (un)subscribe information available here:
http://wiki.secondlife.com/wiki/OpenSource-Dev
Please read the policies before posting to keep unmoderated posting privileges


Re: [opensource-dev] Banning by client

2010-05-02 Thread Glen Canaday
My mistake. I was under the impression that anything not on the list 
wasn't supposed to be able to get on agni. I must have read it wrong.

--GC

On 05/01/2010 09:50 PM, Maya Remblai wrote:
 Glen Canaday wrote:

 [14:57] GC Continental: anything not on the TPV list as of yesterday
 can't connect to the grid at all. This one does.
  
 Just wanted to point out, that isn't true. The TPV list is merely for
 advertisement, and an unlisted viewer can still connect. Cool SL and
 Rainbow, for instance, are not listed but are TPV compliant and have no
 trouble connecting.

 Maya
 ___
 Policies and (un)subscribe information available here:
 http://wiki.secondlife.com/wiki/OpenSource-Dev
 Please read the policies before posting to keep unmoderated posting privileges


___
Policies and (un)subscribe information available here:
http://wiki.secondlife.com/wiki/OpenSource-Dev
Please read the policies before posting to keep unmoderated posting privileges


Re: [opensource-dev] Banning by client

2010-05-02 Thread Tigro Spottystripes
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

according to Skill LL knows how the system works and has not taken any
measures to prevent it, which indicates they are ok with it

On 1/5/2010 18:50, Bryon Ruxton wrote:
 Is that thing really exploiting a quicktime hack?
 I.e. Trying to protect Computer Crimes Law by violating the very same laws.
 If so, isn't that against the LL TOS and shouldn't it be taken down by LL?
 The below reviews have me raising eyebrows...
 
 https://www.xstreetsl.com/modules.php?name=Marketplacefile=itemItemID=2138
 424allReviews=1#reviews
 
 Sandrina Koolhoven on 2010-03-22
 27 of 71 members found this review helpful.
 THIS system is indeed using a hack through Quicktime that gains access to a
 persons hard drive. This system has been torn down and looked at. Scanning
 yours or my HDD is a clear violation of USA Privacy laws and only LL has a
 right to know who your alts are, not the designer of this system
 
 Dekadance Mint on 2010-03-17
 79 of 165 members found this review helpful.
 Easiest method to avoid detection by this device requires no compiling or
 programming, just add -noquicktime into the short cut, and this device
 can't detect you untill Skills finds a new method of detection. I say this
 tidbit of info because the appeal process is atrocious and horrible from my
 experience.
 
 
 On 4/30/10 10:06 PM, Tigro Spottystripes tigrospottystri...@gmail.com
 wrote:
 
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA512

 there is Skill's CDS system

 On 1/5/2010 01:45, Andromeda Quonset wrote:
 I went there.  I saw a GC Continental was on the ban list for both
 of the sims.  That was the closest I could find to you.

 I am not aware of there being any autobanners that ban by client that
 any landowner or sim owner can use.  I don't know of any way to
 detect via script or estate or land controls what client someone is even
 using.

 I do know there is maintenance going on, and regions being
 restarted.  Perhaps you were simply caught in a sim restart.

 At 09:49 PM 4/30/2010, Glen Canaday wrote:
 There are autobanners that ban by client, no? Full-sim, estate ban?

 I'm on Snowglobe 2 and just got banned from both The Loft and The Loft
 II; both are furniture store sims. Can someone TP there and test if they
 get banned? If someone is banning by presence on the TPV list, then snow
 needs to be on it rather than listed separately... (tho I could have
 sworn it WAS on it)...

 --GC
 
 
 
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.14 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEAREKAAYFAkvdyaEACgkQ8ZFfSrFHsmVc1wCfYZUiiBiyew8MkMm5jv8OvIsW
xvIAn1j/OPBoXl8BhyAZ3dm71zDKii1+
=YLlk
-END PGP SIGNATURE-
___
Policies and (un)subscribe information available here:
http://wiki.secondlife.com/wiki/OpenSource-Dev
Please read the policies before posting to keep unmoderated posting privileges


Re: [opensource-dev] Banning by client

2010-05-02 Thread Malachi
as far as i can tell the detection is done by loading a url on the client.  
the browser in the client loads the url which is a server side script that  
rips apart the header of the post and searches for a certain part which  
happens to be the name of the client. if the name of the client matches  
the preset list created by skills then the name and uuid of the avatar is  
sent back to the system inworld and triggers the banning process on that  
avatar.

this exact same method is used in various other detection systems already  
on the market. some even allow the end user to customize which clients  
they do not allow. i do believe that any system that is set up to ban or  
remove unwanted clients should be left at the users choice. personally  
there are a few clients that i do no tolerate anywhere near me. while  
others i dont mind. but im not going to give someone else the right to ban  
people from my land because they dont like the client those users are  
using. Skills is not a Linden and should not have the authority to decide  
which clients are allowed and which ones are not.

On Sun, 02 May 2010 15:56:02 -0300, Carlo Wood ca...@alinoe.com wrote:

 On Sat, May 01, 2010 at 06:53:49PM -0400, Glen Canaday wrote:
 Though WHY anyone wouldn't want to come HERE to talk about client
 detection is far beyond my grasp. That's like AVG not wanting to talk to
 Microsoft.

 Probably because it's a moronic asshole, who is only
 interested in making money with the product and doesn't
 care if 1% are false positives.  Not until LL comes
 knocking on their door anyway.

 I guess that the only reasonable response (unless LL
 wants to get involved) is to find out how the detection
 works and write a patch that makes SURE it won't be
 detected (which then can be used by everyone, but malicious
 viewers will do this anyway, whether or not we do or not).

 So, how does this thing detect the mentioned signature?



-- 
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/
___
Policies and (un)subscribe information available here:
http://wiki.secondlife.com/wiki/OpenSource-Dev
Please read the policies before posting to keep unmoderated posting privileges


Re: [opensource-dev] Banning by client

2010-05-02 Thread Rob Nelson
The only way to reliably detect a client is if the client sends an MD5
hash of the executable to the login server, and that function was
removed ages ago from the login process due to ease of spoofing.

Requiring a unique login channel requires manual intervention to change
the login channel from the official LL channel to the unique one
required by the TPV, so malicious developers don't even have to lift a
finger in order to bypass detection.  

The entire system is flawed, and I'm sure LL knows this.

On Sun, 2010-05-02 at 20:56 +0200, Carlo Wood wrote:
 On Sat, May 01, 2010 at 06:53:49PM -0400, Glen Canaday wrote:
  Though WHY anyone wouldn't want to come HERE to talk about client 
  detection is far beyond my grasp. That's like AVG not wanting to talk to 
  Microsoft.
 
 Probably because it's a moronic asshole, who is only 
 interested in making money with the product and doesn't
 care if 1% are false positives.  Not until LL comes
 knocking on their door anyway.
 
 I guess that the only reasonable response (unless LL
 wants to get involved) is to find out how the detection
 works and write a patch that makes SURE it won't be
 detected (which then can be used by everyone, but malicious
 viewers will do this anyway, whether or not we do or not).
 
 So, how does this thing detect the mentioned signature?
 


___
Policies and (un)subscribe information available here:
http://wiki.secondlife.com/wiki/OpenSource-Dev
Please read the policies before posting to keep unmoderated posting privileges


Re: [opensource-dev] Banning by client

2010-05-02 Thread Tigro Spottystripes
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

AFAIK only LL (and someone intercepting network communications) knows
what channel some client is using

On 2/5/2010 18:42, Rob Nelson wrote:
 The only way to reliably detect a client is if the client sends an MD5
 hash of the executable to the login server, and that function was
 removed ages ago from the login process due to ease of spoofing.
 
 Requiring a unique login channel requires manual intervention to change
 the login channel from the official LL channel to the unique one
 required by the TPV, so malicious developers don't even have to lift a
 finger in order to bypass detection.  
 
 The entire system is flawed, and I'm sure LL knows this.
 
 On Sun, 2010-05-02 at 20:56 +0200, Carlo Wood wrote:
 On Sat, May 01, 2010 at 06:53:49PM -0400, Glen Canaday wrote:
 Though WHY anyone wouldn't want to come HERE to talk about client 
 detection is far beyond my grasp. That's like AVG not wanting to talk to 
 Microsoft.

 Probably because it's a moronic asshole, who is only 
 interested in making money with the product and doesn't
 care if 1% are false positives.  Not until LL comes
 knocking on their door anyway.

 I guess that the only reasonable response (unless LL
 wants to get involved) is to find out how the detection
 works and write a patch that makes SURE it won't be
 detected (which then can be used by everyone, but malicious
 viewers will do this anyway, whether or not we do or not).

 So, how does this thing detect the mentioned signature?

 
 
 ___
 Policies and (un)subscribe information available here:
 http://wiki.secondlife.com/wiki/OpenSource-Dev
 Please read the policies before posting to keep unmoderated posting privileges
 
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.14 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEAREKAAYFAkvd8oIACgkQ8ZFfSrFHsmVIXQCfSTydZfbMH4c4CxpvwWmHqHcZ
YJUAn2GTGUzLWRSU+uF3FMlh84UkOxpA
=3u94
-END PGP SIGNATURE-
___
Policies and (un)subscribe information available here:
http://wiki.secondlife.com/wiki/OpenSource-Dev
Please read the policies before posting to keep unmoderated posting privileges


Re: [opensource-dev] Banning by client

2010-05-02 Thread Skills Hak
Um, please don't confuse this incident with CDS which doesn't ban clients
arbitrarily, this seems to be about a similar system of a more
unscrupulous competitor. There isn't even a copybot client with
Snowglobe 2.0.0
() (CommunityDeveloper) as base we are aware of, so not sure why
zFire Xue is banning it.

 The below reviews have me raising eyebrows...

The people with bad reviews are mostly copybotters who have been
banned by the system and are coming up with crazy quicktime hack
theories, Dekadance Mint isn't even in search any more.

On Sun, May 2, 2010 at 8:51 PM, Tigro Spottystripes
tigrospottystri...@gmail.com wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA512

 according to Skill LL knows how the system works and has not taken any
 measures to prevent it, which indicates they are ok with it

 On 1/5/2010 18:50, Bryon Ruxton wrote:
 Is that thing really exploiting a quicktime hack?
 I.e. Trying to protect Computer Crimes Law by violating the very same laws.
 If so, isn't that against the LL TOS and shouldn't it be taken down by LL?
 The below reviews have me raising eyebrows...

 https://www.xstreetsl.com/modules.php?name=Marketplacefile=itemItemID=2138
 424allReviews=1#reviews

 Sandrina Koolhoven on 2010-03-22
 27 of 71 members found this review helpful.
 THIS system is indeed using a hack through Quicktime that gains access to a
 persons hard drive. This system has been torn down and looked at. Scanning
 yours or my HDD is a clear violation of USA Privacy laws and only LL has a
 right to know who your alts are, not the designer of this system

 Dekadance Mint on 2010-03-17
 79 of 165 members found this review helpful.
 Easiest method to avoid detection by this device requires no compiling or
 programming, just add -noquicktime into the short cut, and this device
 can't detect you untill Skills finds a new method of detection. I say this
 tidbit of info because the appeal process is atrocious and horrible from my
 experience.


 On 4/30/10 10:06 PM, Tigro Spottystripes tigrospottystri...@gmail.com
 wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA512

 there is Skill's CDS system

 On 1/5/2010 01:45, Andromeda Quonset wrote:
 I went there.  I saw a GC Continental was on the ban list for both
 of the sims.  That was the closest I could find to you.

 I am not aware of there being any autobanners that ban by client that
 any landowner or sim owner can use.  I don't know of any way to
 detect via script or estate or land controls what client someone is even
 using.

 I do know there is maintenance going on, and regions being
 restarted.  Perhaps you were simply caught in a sim restart.

 At 09:49 PM 4/30/2010, Glen Canaday wrote:
 There are autobanners that ban by client, no? Full-sim, estate ban?

 I'm on Snowglobe 2 and just got banned from both The Loft and The Loft
 II; both are furniture store sims. Can someone TP there and test if they
 get banned? If someone is banning by presence on the TPV list, then snow
 needs to be on it rather than listed separately... (tho I could have
 sworn it WAS on it)...

 --GC



 -BEGIN PGP SIGNATURE-
 Version: GnuPG v2.0.14 (MingW32)
 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

 iEYEAREKAAYFAkvdyaEACgkQ8ZFfSrFHsmVc1wCfYZUiiBiyew8MkMm5jv8OvIsW
 xvIAn1j/OPBoXl8BhyAZ3dm71zDKii1+
 =YLlk
 -END PGP SIGNATURE-
 ___
 Policies and (un)subscribe information available here:
 http://wiki.secondlife.com/wiki/OpenSource-Dev
 Please read the policies before posting to keep unmoderated posting privileges

___
Policies and (un)subscribe information available here:
http://wiki.secondlife.com/wiki/OpenSource-Dev
Please read the policies before posting to keep unmoderated posting privileges


Re: [opensource-dev] Banning by client

2010-05-02 Thread Tigro Spottystripes
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

From that chat log it seems the banning system in question (not CDS)
uses heuristics, it banned that person for using a rare client, unless
i've misunderstood what was said there.

On 2/5/2010 19:01, Skills Hak wrote:
 Um, please don't confuse this incident with CDS which doesn't ban clients
 arbitrarily, this seems to be about a similar system of a more
 unscrupulous competitor. There isn't even a copybot client with
 Snowglobe 2.0.0
 () (CommunityDeveloper) as base we are aware of, so not sure why
 zFire Xue is banning it.
 
 The below reviews have me raising eyebrows...
 
 The people with bad reviews are mostly copybotters who have been
 banned by the system and are coming up with crazy quicktime hack
 theories, Dekadance Mint isn't even in search any more.
 
 On Sun, May 2, 2010 at 8:51 PM, Tigro Spottystripes
 tigrospottystri...@gmail.com wrote:
 according to Skill LL knows how the system works and has not taken any
 measures to prevent it, which indicates they are ok with it
 
 On 1/5/2010 18:50, Bryon Ruxton wrote:
 Is that thing really exploiting a quicktime hack?
 I.e. Trying to protect Computer Crimes Law by violating the very same laws.
 If so, isn't that against the LL TOS and shouldn't it be taken down by LL?
 The below reviews have me raising eyebrows...

 https://www.xstreetsl.com/modules.php?name=Marketplacefile=itemItemID=2138
 424allReviews=1#reviews

 Sandrina Koolhoven on 2010-03-22
 27 of 71 members found this review helpful.
 THIS system is indeed using a hack through Quicktime that gains access to 
 a
 persons hard drive. This system has been torn down and looked at. Scanning
 yours or my HDD is a clear violation of USA Privacy laws and only LL has a
 right to know who your alts are, not the designer of this system

 Dekadance Mint on 2010-03-17
 79 of 165 members found this review helpful.
 Easiest method to avoid detection by this device requires no compiling or
 programming, just add -noquicktime into the short cut, and this device
 can't detect you untill Skills finds a new method of detection. I say this
 tidbit of info because the appeal process is atrocious and horrible from my
 experience.


 On 4/30/10 10:06 PM, Tigro Spottystripes tigrospottystri...@gmail.com
 wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA512

 there is Skill's CDS system

 On 1/5/2010 01:45, Andromeda Quonset wrote:
 I went there.  I saw a GC Continental was on the ban list for both
 of the sims.  That was the closest I could find to you.

 I am not aware of there being any autobanners that ban by client that
 any landowner or sim owner can use.  I don't know of any way to
 detect via script or estate or land controls what client someone is even
 using.

 I do know there is maintenance going on, and regions being
 restarted.  Perhaps you were simply caught in a sim restart.

 At 09:49 PM 4/30/2010, Glen Canaday wrote:
 There are autobanners that ban by client, no? Full-sim, estate ban?

 I'm on Snowglobe 2 and just got banned from both The Loft and The Loft
 II; both are furniture store sims. Can someone TP there and test if they
 get banned? If someone is banning by presence on the TPV list, then snow
 needs to be on it rather than listed separately... (tho I could have
 sworn it WAS on it)...

 --GC



___
Policies and (un)subscribe information available here:
http://wiki.secondlife.com/wiki/OpenSource-Dev
Please read the policies before posting to keep unmoderated posting
privileges


-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.14 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEAREKAAYFAkveA+gACgkQ8ZFfSrFHsmXRLACfV5FC1HlF0WwTmblhP2HrmoR9
D6EAoIVWunwqb95vP3Kvw2aX8YWbmnxY
=Ai6r
-END PGP SIGNATURE-
___
Policies and (un)subscribe information available here:
http://wiki.secondlife.com/wiki/OpenSource-Dev
Please read the policies before posting to keep unmoderated posting privileges


Re: [opensource-dev] Banning by client

2010-05-02 Thread Armin Weatherwax
Tigro Spottystripes schrieb:
 AFAIK only LL (and someone intercepting network communications) knows
 what channel some client is using
Yes and no - it is also transmitted with the useragent of the build-in 
webbrowser. 

Armin
___
Policies and (un)subscribe information available here:
http://wiki.secondlife.com/wiki/OpenSource-Dev
Please read the policies before posting to keep unmoderated posting privileges


Re: [opensource-dev] Banning by client

2010-05-02 Thread Malachi
then what exactly does cds ban? if no clients? because as long as you only  
use emerald or second life then you wont get banned by cds. if you start  
dabbling on other clients you get banned. so what does cds ban if no  
clients?
On Sun, 02 May 2010 19:01:19 -0300, Skills Hak  
simonepep...@googlemail.com wrote:

 Um, please don't confuse this incident with CDS which doesn't ban clients
 arbitrarily, this seems to be about a similar system of a more
 unscrupulous competitor. There isn't even a copybot client with
 Snowglobe 2.0.0
 () (CommunityDeveloper) as base we are aware of, so not sure why
 zFire Xue is banning it.

 The below reviews have me raising eyebrows...

 The people with bad reviews are mostly copybotters who have been
 banned by the system and are coming up with crazy quicktime hack
 theories, Dekadance Mint isn't even in search any more.

 On Sun, May 2, 2010 at 8:51 PM, Tigro Spottystripes
 tigrospottystri...@gmail.com wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA512

 according to Skill LL knows how the system works and has not taken any
 measures to prevent it, which indicates they are ok with it

 On 1/5/2010 18:50, Bryon Ruxton wrote:
 Is that thing really exploiting a quicktime hack?
 I.e. Trying to protect Computer Crimes Law by violating the very same  
 laws.
 If so, isn't that against the LL TOS and shouldn't it be taken down by  
 LL?
 The below reviews have me raising eyebrows...

 https://www.xstreetsl.com/modules.php?name=Marketplacefile=itemItemID=2138
 424allReviews=1#reviews

 Sandrina Koolhoven on 2010-03-22
 27 of 71 members found this review helpful.
 THIS system is indeed using a hack through Quicktime that gains  
 access to a
 persons hard drive. This system has been torn down and looked at.  
 Scanning
 yours or my HDD is a clear violation of USA Privacy laws and only LL  
 has a
 right to know who your alts are, not the designer of this system

 Dekadance Mint on 2010-03-17
 79 of 165 members found this review helpful.
 Easiest method to avoid detection by this device requires no  
 compiling or
 programming, just add -noquicktime into the short cut, and this  
 device
 can't detect you untill Skills finds a new method of detection. I say  
 this
 tidbit of info because the appeal process is atrocious and horrible  
 from my
 experience.


 On 4/30/10 10:06 PM, Tigro Spottystripes  
 tigrospottystri...@gmail.com
 wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA512

 there is Skill's CDS system

 On 1/5/2010 01:45, Andromeda Quonset wrote:
 I went there.  I saw a GC Continental was on the ban list for both
 of the sims.  That was the closest I could find to you.

 I am not aware of there being any autobanners that ban by client that
 any landowner or sim owner can use.  I don't know of any way to
 detect via script or estate or land controls what client someone is  
 even
 using.

 I do know there is maintenance going on, and regions being
 restarted.  Perhaps you were simply caught in a sim restart.

 At 09:49 PM 4/30/2010, Glen Canaday wrote:
 There are autobanners that ban by client, no? Full-sim, estate ban?

 I'm on Snowglobe 2 and just got banned from both The Loft and The  
 Loft
 II; both are furniture store sims. Can someone TP there and test if  
 they
 get banned? If someone is banning by presence on the TPV list, then  
 snow
 needs to be on it rather than listed separately... (tho I could have
 sworn it WAS on it)...

 --GC



 -BEGIN PGP SIGNATURE-
 Version: GnuPG v2.0.14 (MingW32)
 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

 iEYEAREKAAYFAkvdyaEACgkQ8ZFfSrFHsmVc1wCfYZUiiBiyew8MkMm5jv8OvIsW
 xvIAn1j/OPBoXl8BhyAZ3dm71zDKii1+
 =YLlk
 -END PGP SIGNATURE-
 ___
 Policies and (un)subscribe information available here:
 http://wiki.secondlife.com/wiki/OpenSource-Dev
 Please read the policies before posting to keep unmoderated posting  
 privileges

 ___
 Policies and (un)subscribe information available here:
 http://wiki.secondlife.com/wiki/OpenSource-Dev
 Please read the policies before posting to keep unmoderated posting  
 privileges


-- 
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/
___
Policies and (un)subscribe information available here:
http://wiki.secondlife.com/wiki/OpenSource-Dev
Please read the policies before posting to keep unmoderated posting privileges


Re: [opensource-dev] Banning by client

2010-05-01 Thread Glen Canaday

That's me on the list. You go in Snowglobe V2? My partner was also there 
in Emerald and did not get banned - that's why I was asking about 
client-based ban (and hence why I even brought it up on this list, even 
though it's only on topic in a very cursory way).

--GC

On 05/01/2010 12:45 AM, Andromeda Quonset wrote:
 I went there.  I saw a GC Continental was on the ban list for both 
 of the sims.  That was the closest I could find to you.

 I am not aware of there being any autobanners that ban by client that 
 any landowner or sim owner can use.  I don't know of any way to detect 
 via script or estate or land controls what client someone is even using.

 I do know there is maintenance going on, and regions being restarted.  
 Perhaps you were simply caught in a sim restart.

 At 09:49 PM 4/30/2010, Glen Canaday wrote:
 There are autobanners that ban by client, no? Full-sim, estate ban?

 I'm on Snowglobe 2 and just got banned from both The Loft and The Loft
 II; both are furniture store sims. Can someone TP there and test if they
 get banned? If someone is banning by presence on the TPV list, then snow
 needs to be on it rather than listed separately... (tho I could have
 sworn it WAS on it)...

 --GC


___
Policies and (un)subscribe information available here:
http://wiki.secondlife.com/wiki/OpenSource-Dev
Please read the policies before posting to keep unmoderated posting privileges


Re: [opensource-dev] Banning by client

2010-05-01 Thread Thickbrick Sleaford
I don't know if this store is (badly) detecting client versions/channels 
through the media plugins' user agent strings, or if it's just that I didn't 
move enough for their taste after teleporting. I went there with my test alt, 
using Snowglobe 2.0.0 () Apr 22 2010 00:11:09 (CommunityDeveloper) on 
linux, and was banned and ejected after a couple of minutes:

[13:14] Second Life: You have been teleported home by the object 'zF RedZone 
v3.2.3' on the parcel 'Furniture and Prefabs @ The Loft II'.
[13:14] zF RedZone v3.2.3: You have been removed for using copybot.


On Saturday 01 May 2010 22:20:26 Glen Canaday wrote:
 That's me on the list. You go in Snowglobe V2? My partner was also there
 in Emerald and did not get banned - that's why I was asking about
 client-based ban (and hence why I even brought it up on this list, even
 though it's only on topic in a very cursory way).
 
 --GC
 

-- 
Thickbrick
___
Policies and (un)subscribe information available here:
http://wiki.secondlife.com/wiki/OpenSource-Dev
Please read the policies before posting to keep unmoderated posting privileges


Re: [opensource-dev] Banning by client

2010-05-01 Thread Bryon Ruxton
Is that thing really exploiting a quicktime hack?
I.e. Trying to protect Computer Crimes Law by violating the very same laws.
If so, isn't that against the LL TOS and shouldn't it be taken down by LL?
The below reviews have me raising eyebrows...

https://www.xstreetsl.com/modules.php?name=Marketplacefile=itemItemID=2138
424allReviews=1#reviews

Sandrina Koolhoven on 2010-03-22
27 of 71 members found this review helpful.
THIS system is indeed using a hack through Quicktime that gains access to a
persons hard drive. This system has been torn down and looked at. Scanning
yours or my HDD is a clear violation of USA Privacy laws and only LL has a
right to know who your alts are, not the designer of this system

Dekadance Mint on 2010-03-17
79 of 165 members found this review helpful.
Easiest method to avoid detection by this device requires no compiling or
programming, just add -noquicktime into the short cut, and this device
can't detect you untill Skills finds a new method of detection. I say this
tidbit of info because the appeal process is atrocious and horrible from my
experience.


On 4/30/10 10:06 PM, Tigro Spottystripes tigrospottystri...@gmail.com
wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA512
 
 there is Skill's CDS system
 
 On 1/5/2010 01:45, Andromeda Quonset wrote:
 I went there.  I saw a GC Continental was on the ban list for both
 of the sims.  That was the closest I could find to you.
 
 I am not aware of there being any autobanners that ban by client that
 any landowner or sim owner can use.  I don't know of any way to
 detect via script or estate or land controls what client someone is even
 using.
 
 I do know there is maintenance going on, and regions being
 restarted.  Perhaps you were simply caught in a sim restart.
 
 At 09:49 PM 4/30/2010, Glen Canaday wrote:
 There are autobanners that ban by client, no? Full-sim, estate ban?
 
 I'm on Snowglobe 2 and just got banned from both The Loft and The Loft
 II; both are furniture store sims. Can someone TP there and test if they
 get banned? If someone is banning by presence on the TPV list, then snow
 needs to be on it rather than listed separately... (tho I could have
 sworn it WAS on it)...
 
 --GC


___
Policies and (un)subscribe information available here:
http://wiki.secondlife.com/wiki/OpenSource-Dev
Please read the policies before posting to keep unmoderated posting privileges


Re: [opensource-dev] Banning by client

2010-05-01 Thread Glen Canaday
Well OSS devs, be prepared to be banned by anyone using the redzone 
thing even when using unpatched LL svn. Sorry to spam, but this type of 
attitude is spreading, and I thought that *EVERYONE* on this list best know.

[14:54] zFire Xue: Your comming up as Community Developer
[14:55] zFire Xue: which is an open source viewer that someone has made 
into a copybot viewer.  Yours might not have been, but it reads just 
like one that is
[14:55] GC Continental: which is a false positive
[14:56] zFire Xue: It isnt snowglobe
[14:56] zFire Xue: and its a known copybot
[14:56] zFire Xue: So Im confused about the falseness part
[14:56] GC Continental: it is snowglobe. This is unpatched source.
[14:57] GC Continental: anything not on the TPV list as of yesterday 
can't connect to the grid at all. This one does.
[14:58] GC Continental: someone may have altered the sources on their 
personal viewers, but the svn of anowglobe isn't a copying viewer
[15:00] zFire Xue: Ok, I have 3 people with your same signature.
[15:00] zFire Xue: I have 2884 with snowglobe signatures
[15:01] GC Continental: 'd suggest you hop onto the opensource-dev 
mailing list... there has to be a better way of detecting.
[15:03] GC Continental: If there is, that's going to be the best place 
to has it out. There are a few people on there you'd want to be in 
contact with, such as Marine and most of the  Emerald crew.
[15:03] GC Continental: as well as meroiv, rob, and Q linden
[15:04] GC Continental: (I can't type today)
[15:04] zFire Xue: I have no interest in being in contact with any of them.
[15:05] zFire Xue: I will get a copy of Linux snowglob and test.
[15:05] GC Continental: Compile it yourself - use the svn sources
[15:05] zFire Xue: but being that I have IDed Snowglobe over 2800 times 
with the system, and then there is you, and 2 others... it doesnt look 
good that you are such a rare exception.
[15:06] GC Continental: You'll have the same viewer I have.
[15:06] zFire Xue: That explains how someone may have made a copybot out 
of it.
[15:07] GC Continental: Copybot came out before the sources were 
released. Nov 2006.
[15:08] GC Continental: I'll forward it to the dev list. Thank you for 
your time.

--GC

On 05/01/2010 04:35 PM, Thickbrick Sleaford wrote:
 I don't know if this store is (badly) detecting client versions/channels
 through the media plugins' user agent strings, or if it's just that I didn't
 move enough for their taste after teleporting. I went there with my test alt,
 using Snowglobe 2.0.0 () Apr 22 2010 00:11:09 (CommunityDeveloper) on
 linux, and was banned and ejected after a couple of minutes:

 [13:14] Second Life: You have been teleported home by the object 'zF RedZone
 v3.2.3' on the parcel 'Furniture and Prefabs @ The Loft II'.
 [13:14] zF RedZone v3.2.3: You have been removed for using copybot.


 On Saturday 01 May 2010 22:20:26 Glen Canaday wrote:

 That's me on the list. You go in Snowglobe V2? My partner was also there
 in Emerald and did not get banned - that's why I was asking about
 client-based ban (and hence why I even brought it up on this list, even
 though it's only on topic in a very cursory way).

 --GC

  


___
Policies and (un)subscribe information available here:
http://wiki.secondlife.com/wiki/OpenSource-Dev
Please read the policies before posting to keep unmoderated posting privileges


Re: [opensource-dev] Banning by client

2010-05-01 Thread Glen Canaday
Me too, but I don't think it's against TOS. A sim owner can do what a 
sim owner wants, and if it's to trust client/copybot detection to an 
inworld device they didn't make themselves, that's not against the rules 
afaik. Of course, I'm completely unaware of any method that's not going 
to result in false positives.

I'm just posting this because I have the feeling that it's going to 
become far more commonplace, and this is the group of people that it's 
going to affect the most.

So it's Emerald in the main grid for me, with my own clients on OpenSim 
or the beta grid from here on out.

Though WHY anyone wouldn't want to come HERE to talk about client 
detection is far beyond my grasp. That's like AVG not wanting to talk to 
Microsoft.

--GC

On 05/01/2010 06:42 PM, Robert Martin wrote:
 On Sat, May 1, 2010 at 6:09 PM, Glen Canadaygcana...@gmail.com  wrote:

 [15:05] GC Continental: Compile it yourself - use the svn sources
 [15:05] zFire Xue: but being that I have IDed Snowglobe over 2800 times
 with the system, and then there is you, and 2 others... it doesnt look
 good that you are such a rare exception.
 [15:06] GC Continental: You'll have the same viewer I have.
 [15:06] zFire Xue: That explains how someone may have made a copybot out
 of it.
  
 and most of the reason for the rarity is that most folks can't seem to
 get a from source compile to actually work much less getting a SVN
 copy to work.
 Personally i think that any kind of ban by viewer signature device
 should be banned (outside of a Linden Lab built item).



___
Policies and (un)subscribe information available here:
http://wiki.secondlife.com/wiki/OpenSource-Dev
Please read the policies before posting to keep unmoderated posting privileges


Re: [opensource-dev] Banning by client

2010-05-01 Thread Argent Stonecutter
On 2010-05-01, at 17:53, Glen Canaday wrote:
 Me too, but I don't think it's against TOS. A sim owner can do what a
 sim owner wants, and if it's to trust client/copybot detection to an
 inworld device they didn't make themselves, that's not against the  
 rules
 afaik. Of course, I'm completely unaware of any method that's not  
 going
 to result in false positives.

Copybot detection is a complete waste of time, always has been,  
always will be.
___
Policies and (un)subscribe information available here:
http://wiki.secondlife.com/wiki/OpenSource-Dev
Please read the policies before posting to keep unmoderated posting privileges


Re: [opensource-dev] Banning by client

2010-05-01 Thread Maya Remblai
Glen Canaday wrote:
 [14:57] GC Continental: anything not on the TPV list as of yesterday 
 can't connect to the grid at all. This one does.
Just wanted to point out, that isn't true. The TPV list is merely for 
advertisement, and an unlisted viewer can still connect. Cool SL and 
Rainbow, for instance, are not listed but are TPV compliant and have no 
trouble connecting.

Maya
___
Policies and (un)subscribe information available here:
http://wiki.secondlife.com/wiki/OpenSource-Dev
Please read the policies before posting to keep unmoderated posting privileges


Re: [opensource-dev] Banning by client

2010-04-30 Thread Andromeda Quonset
I went there.  I saw a GC Continental was on the ban list for both 
of the sims.  That was the closest I could find to you.

I am not aware of there being any autobanners that ban by client that 
any landowner or sim owner can use.  I don't know of any way to 
detect via script or estate or land controls what client someone is even using.

I do know there is maintenance going on, and regions being 
restarted.  Perhaps you were simply caught in a sim restart.

At 09:49 PM 4/30/2010, Glen Canaday wrote:
There are autobanners that ban by client, no? Full-sim, estate ban?

I'm on Snowglobe 2 and just got banned from both The Loft and The Loft
II; both are furniture store sims. Can someone TP there and test if they
get banned? If someone is banning by presence on the TPV list, then snow
needs to be on it rather than listed separately... (tho I could have
sworn it WAS on it)...

--GC

___
Policies and (un)subscribe information available here:
http://wiki.secondlife.com/wiki/OpenSource-Dev
Please read the policies before posting to keep unmoderated posting privileges


Re: [opensource-dev] Banning by client

2010-04-30 Thread Tigro Spottystripes
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

there is Skill's CDS system

On 1/5/2010 01:45, Andromeda Quonset wrote:
 I went there.  I saw a GC Continental was on the ban list for both 
 of the sims.  That was the closest I could find to you.
 
 I am not aware of there being any autobanners that ban by client that 
 any landowner or sim owner can use.  I don't know of any way to 
 detect via script or estate or land controls what client someone is even 
 using.
 
 I do know there is maintenance going on, and regions being 
 restarted.  Perhaps you were simply caught in a sim restart.
 
 At 09:49 PM 4/30/2010, Glen Canaday wrote:
 There are autobanners that ban by client, no? Full-sim, estate ban?

 I'm on Snowglobe 2 and just got banned from both The Loft and The Loft
 II; both are furniture store sims. Can someone TP there and test if they
 get banned? If someone is banning by presence on the TPV list, then snow
 needs to be on it rather than listed separately... (tho I could have
 sworn it WAS on it)...

 --GC
 
 ___
 Policies and (un)subscribe information available here:
 http://wiki.secondlife.com/wiki/OpenSource-Dev
 Please read the policies before posting to keep unmoderated posting privileges
 
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.14 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEAREKAAYFAkvbtu4ACgkQ8ZFfSrFHsmWCEACfYzv5TDPepOyYWe3fAUX+r+Ie
73AAnR4IAGlIN1uhGkQvPEukZV0EMhfu
=jzH/
-END PGP SIGNATURE-
___
Policies and (un)subscribe information available here:
http://wiki.secondlife.com/wiki/OpenSource-Dev
Please read the policies before posting to keep unmoderated posting privileges