secondlife / jira-archive

2 stars 0 forks source link

[BUG-232854] Privacy Volumes #10042

Closed sl-service-account closed 8 months ago

sl-service-account commented 1 year ago

How would you like the feature to work?

In Short

Parcel Owners and Estate Managers would have the ability to create a 'Privacy volume' using an invisible phantom prim, that when inside, avatars would effectively disappear from the nearby avatar list and minimap

The Technical

Primitives would have the optional parameter Privacy Volume which is disabled by default.  

Privacy would be done server-side. The simulator would keep track of the location and bounding-box dimensions of privacy volumes within the sim.

 

When the user enters a privacy volume, I suggest there are certain behaviors:-   Simulator to Viewer communication

As far as the viewer is concerned, when a user enters a privacy volume, the simulator should tell other users viewers who are not in the volume viewers the user has left the region. The viewers of users outside of the viewer should no longer be able to tell that the agent is in the region.

I propose that, for the sake of still showing the sim has people in it, that the simulator would instead report a fake user to the viewer like 'private.resident', with a location of <0,0,0> - Letting other users know there are people on the sim, but still giving the resident privacy and anonymity within their space. Compatible viewers in the future could detect the 'private.resident' username in the future to avoid drawing a cloud in the corner of the sim.

An exception would be made for estate managers and parcel owners, who should always see the true username of who is in the volume, for administrative purposes.

For users who are inside the privacy volume, they will still be able to see the location and true usernames of people who are outside the privacy volume in public space.

Minimap

The dot in the minimap would no longer show the users true location, but would move to <0,0,0>, moving a meter to the right for each resident in a privacy volume so it's easy for users to see how many there are. In future compatible viewers, this information could be displayed a different way if needed, by detecting the fake username or user UUID reported by the simulator.

image-2022-11-03-17-33-07-162.png

The dots could be made grey to distinguish them from users in 'public' areas of the sim. Keeping the dots just in the bottom left to not give away location. Hovering the dots would not reveal who they are.

Scripts

For scripts that are not owned by the parcel owner or estate manager, functions that retrieve the list of avatars in a sim/parcel like llGetAgentList , sensor etc would simply replace the agents uuid with our fake private.resident's uuid when the agent is in a privacy volume the script is not in, this would avoid breaking existing scripts that depend on knowing how many people are in the sim, and would allow scripted radars to continue to 'work' without script error.

Why a prim volume and not a parcel setting?

Please watch my very informative video that I worked very hard on :P

https://www.youtube.com/watch?v=nsUpKrouyUo

The typical thing will be that people will want to be able to sit out in their lawn and chat to neighbors, which wouldn't be possible if the whole parcel was a privacy volume.

Also, it will be very useful for multi-story apartment buildings, and living in hustle-and-bustle, up-and-coming lively towns, where everything is close together, whilst still giving residents privacy. We could get some real lively places going on with lots of people living near each other!

Letting people simply drag a cube over their home to define the space that should be private is the most flexible solution I can think of, and would solve issues like in my sim where apartments don't fit neatly into parcels due to creative non-grid land layout, sky-boxes etc.

Why is this feature important to you? How would it benefit the community?

 Understanding the Problem

 

To understand what we are trying to create a solution for, first we must think about the social function of a home. This might sound like stating the obvious, but one of the functions of a home is privacy and anonymity. We have four walls and a roof, and in general people go inside their home because they wish to switch off from the outside world - they do not currently wish to be found, or participate in the town square. This is generally a temporary affair, people just need some space to switch off or be alone with a loved one from time to time.

 

Community based sims (ie. Places people gather to socialise and participate in social activities, role-play etc) have a unique problem when it comes to renting homes to tenants - Potential tenants often prefer to rent elsewhere in far-flung parcel farms, and one of the most common stated reasons (that I have encountered) is privacy - Because they make lots of acquaintances in a community sim, and there is lots of traffic, they are more likely to find attention drawn to themselves either via the mini map or nearby avatars list. Instead such people will rent in far flung 'parcel farms' intentionally seeking out a place where they know nobody will bother them for maximum anonymity and privacy.

Is this really a problem?

 

I think so yes, please allow me to present some of the reasons why I think this is a problem worth solving and see if you agree with me:

  Missed connections lead to a rise of isolation in SecondLife

As a private sim owner of 8 years, one of the social effects I notice of people choosing to rent in far flung anonymous parcel farms is that people will often only teleport into community sims to check if people to meet are around, but will miss each other (sometimes by mere minutes) before leaving and teleporting back to their home. This creates difficulties building community.

In turn, for visitors, this creates the illusion that there is no interest in a community sim. And gives rise to the classic 'SecondLife is dieing' mindset.

You might think that by giving people the ability to disappear off the minimap, we make this situation worse, but actually I think the opposite, because if those people were in their home in the community sim, they would see when other people enter the public areas of the sim and are more likely to walk out of their home to come meet them, as opposed to if they had chose to live in a far-flung parcel farm sim, where they would never know if new people entered their preferred community space.

  The long-term economic sustainability of SecondLife depends on Community sims existing

I don't like to be a doomsday person when talking about SecondLife, because I think SecondLife is a great platform. But I do think the current trajectory we're on is not the best, there has been a definite decline in Community sims, Roleplay sims etc.

It may well be profitable in the short term for LL to rely on just land barons buying up sims and turning them into parcel farms, but in the long term, the decline of Community in SecondLife, will mean that less and less people will want to live in SecondLife to begin with. We need our community sims because it's what drives people into SecondLife - What platform would SecondLife be, if there were no hangouts or community? I'd argue - A dead one.

Shop and don't hop

It's not uncommon for community sims to have shopping areas integrated into the social space of their sim. Having residents living in community sims means they are:-

  1. More likely to shop
  2. More likely to shop within the 'local economy' and contribute to the growth of their local community as such, which in the long term will enable more smaller creators in SecondLife to make roots to grow from.

    image-2022-11-03-19-54-14-062.png

     

    Privacy volumes, whilst it might seem counter-intuitive at first, I personally think will increase the amount of socialization that occurs in SecondLife by reducing missed connections, because residents will be able to live in busy community sims without feeling like they have no privacy. It will help sustain SecondLife by making community sims more economically viable and successful and also lead to more shopping and enabling more small time creators to grow into successful businesses in SecondLife.

     

     

    Here's early plans of my town that I am building, one day this will all be mesh with GLTF PBR Shaders, actually I have already started meshing facades that use PBR

    image-2022-11-03-20-19-13-816.png

    As you can see, it's very squiggly and in no way conforms to parcels. Also it's 3000 meters high! With privacy volumes, I could conceivably rent out the eventual apartments and be able to offer privacy to residents. We might want to consider culling volumes for something like this too!

    Edelweiss Le Mont Saint-Michel is an amazing build in SecondLife for example. But you could not really let people have private residence here, because the buildings curve around. Imagine if we had privacy volumes for something like this, creators could feasibly let people have private residence in builds like these:

    image-2022-11-03-20-31-35-687.png

     

     

Attachments

Links

Related

Original Jira Fields | Field | Value | | ------------- | ------------- | | Issue | BUG-232854 | | Summary | Privacy Volumes | | Type | New Feature Request | | Priority | Unset | | Status | Closed | | Resolution | Unactionable | | Reporter | Extrude Ragu (extrude.ragu) | | Created at | 2022-11-03T10:53:05Z | | Updated at | 2023-01-04T20:17:21Z | ``` { 'Build Id': 'unset', 'Business Unit': ['Platform'], 'Date of First Response': '2022-11-03T10:29:10.349-0500', 'How would you like the feature to work?': 'Using full fat editor, return in a moment', 'ReOpened Count': 0.0, 'Severity': 'Unset', 'Target Viewer Version': 'viewer-development', 'Why is this feature important to you? How would it benefit the community?': 'a', } ```
sl-service-account commented 1 year ago

aquietrabbit commented at 2022-11-03T15:29:10Z, updated at 2022-11-03T15:39:01Z

As someone who manages a bunch of sims, I do not like this feature idea for several reasons.

  1. It doesn't matter who sets these boxes up. I have a need to know who is in the regions I manage at all times and this would make administration painful in a lot of ways.

  2. If you need absolute privacy, you should have a completely private region (or homestead). This should be a last resort, though. SecondLife is a social game and people who don't want to be social in it should be logging out, not retreating into invisiboxes.

  3. You can already do most of this by demarcating a parcel in your region as the private space and enforcing privacy at the LSL level by simply adding new visitors to the private parcel's banlist during a time people want privacy, then clearing the parcel banlist when that window ends. Parcel access tools used in tandem with a competently-managed estate level banlist do everything listed here except anonymizing the radar (which would be annoying - also, where you are in a sim isn't private info).

  4. Just make an alt if you absolutely do not want the attention. Lots of store owners and etc that I know do business on the business account and fun on the fun account because it's a lot less hassle that way.

  5. The minimap is, as far as I am aware, the authoritative data source for the radar, not the other way around. If the viewer starts lying to people by telling them x user left the region, they will begin probing more aggressively to look for other ways to get the same scan data.

  6. The number of functions affected by this at the LSL level alone basically precludes this feature from being a thing even if all these other reasons were not present. If someone can't rely on llGetAgentList they will start spinning volumedetect megaprims to scan regions again which is not something anyone wants.

  7. The entire design of this feature seems like a bandaid for people who didn't do a good job planning their sim. If you want to see privacy in rentals done correctly go look at the parcel layout for Retroville and examine the way their experience teleporters are set up.

  8. If someone is a parcel owner and doesn't know how to use the existing parcel settings to toggle privacy options on demand, giving them more tools for privacy isn't going to help them anyway. Selectable presets for privacy settings on a parcel might be a better solution to get closer to what you want.

sl-service-account commented 1 year ago

Lucia Nightfire commented at 2022-11-03T15:48:47Z

LL servers already have the ability to hide your presence in the region and the minimap via a setting in the Region Console.

They just have not yet allowed it to be changed by non-Lindens the same way they have not yet allowed non-Lindens to change chat ranges.

https://gyazo.com/043ec6a918fc32940f24bf31d0408ee8

sl-service-account commented 1 year ago

Extrude Ragu commented at 2022-11-03T16:20:29Z

There is extended discussion about this going on on the Discord

I have a need to know who is in the regions I manage at all times and this would make administration painful in a lot of ways.

FWIW I did write in my suggestion that only parcel owners/estate managers should be able to set these primitives up, and also that parcel owners/estate managers should always be able to see in for administrative purposes.

sl-service-account commented 1 year ago

Extrude Ragu commented at 2022-11-03T19:55:57Z

I added pictures and video to make it more interesting!

sl-service-account commented 1 year ago

JIRAUSER343192 commented at 2022-11-04T18:05:46Z, updated at 2022-11-04T18:06:18Z

I spend a lot of time in a large community which has had major harassment issues as of late, and it has had to consolidate its parcels to ease moderation. This feature would give us more privacy without adding extra moderation overhead, so +1.

wall of text

Last I checked, LL determines what types of use of Second Life are "correct" and are "incorrect", and the ToS says nothing whatsoever about social interaction being required. Not everyone who plays Second Life has the same priorities as you.

sl-service-account commented 1 year ago

altcake commented at 2022-11-04T18:17:04Z

I think that this is a wonderful idea, and I had to add anything I would suggest that to account for group owned land, a new group permission is given that reads something to the effect of "allow to see avatars in privacy volumes"

sl-service-account commented 1 year ago

Rathgrith027 commented at 2022-11-04T23:05:57Z, updated at 2022-11-04T23:09:37Z

I'm all for this, but people shouldn't be obfuscated from the map, and Privacy volumes should be only supported by the parcel owner and authorized parties. It also shouldn't allow certain features like being physical or being moved by a script or linked to any object.

This kind of stuff did exist in Activeworlds, SL's predecessor - as Zones - where a predefined space would have a different lighting and environmental configuration than the rest of the world, and I did suggest something like this a while ago where parcels could be managed in 3D space (which was a bit convoluted in hindsight).

All in all, there are some features that I don't agree with implementing because while I am all for amplifying mainland and other communities and pushing residents away from standing around in isolated skyboxes all day, some of these suggested features are self-defeating of that.

TL;DR - Yes on Privacy Volumes in the vein of Parcel Privacy as a zone/volume - Nay on everything else.

sl-service-account commented 1 year ago

JenniDrax commented at 2022-11-05T01:08:30Z

Something that could allow greater density of people in an area and have it still be navigable and able to be used by those people is a great idea. I'd be for something like this. I certainly think it merits further exploration if nothing else. 

sl-service-account commented 1 year ago

Irrigo commented at 2022-11-05T13:50:59Z

This seems like a great idea. Renting space in large communities would definitely be more attractive if that rent came with a side of genuine, easy-to-have privacy.

sl-service-account commented 1 year ago

Utilizator Mode commented at 2022-11-06T10:58:31Z, updated at 2022-11-06T11:09:04Z

Im not sure about some of the details like "agent left the region" or limiting this to parcel/estate owners only (defeating a lot of the use cases) but I agree on the core principal of the idea, this is a much needed feature, current privacy tools are very limited and easily defeatable by stepping into the parcel and you have to be the owner of a parcel to use them, this would be a great solution to all those problems.

sl-service-account commented 1 year ago

Extrude Ragu commented at 2022-11-06T12:15:14Z

In my case being able to be anonymized from minimap would be an important part  of the feature. This is because talking to potential tenants in my sim I've been told one reason they'd rent elsewhere is because they don't want to receive IM's from all the people on sim all the time - So to me it could make the difference between having tenants on my sim, and them renting elsewhere in a parcel farm. Personally I'd prefer to have them on sim because a. They're more likely to come out and socialize and b. helps with Money :P

If some sim owners didn't want their tenants to be able to disappear from the minimap, perhaps it could be made an estate setting?

 

sl-service-account commented 1 year ago

Kyle Linden commented at 2022-11-09T19:04:26Z

Hello, and thank you for your feature request.

Incoming suggestions are reviewed in the order they are received by a team of Lindens with diverse areas of expertise. We consider a number of factors: Is this change possible? Will it increase lag? Will it break existing content? Is it likely that the number of residents using this feature will justify the time to develop it? This wiki page further describes the reasoning we use: http://wiki.secondlife.com/wiki/Feature_Requests

This particular suggestion, unfortunately, cannot be tackled at this time. However, we regularly review previously deferred suggestions when circumstances change or resources become available.

We are grateful for the time you took to submit this feature request. We hope that you are not discouraged from submitting others in the future. Many excellent ideas to improve Second Life come from you, our residents. We can’t do it alone.

Thank you for your continued commitment to Second Life.