secondlife / jira-archive

2 stars 0 forks source link

[BUG-228496] Bellisseria - Snap Shots and Music Urls In 1 Case Access Lists Are Not Being Reset After Parcels are Released #6572

Open sl-service-account opened 4 years ago

sl-service-account commented 4 years ago

What just happened?

I teleported to my bellisseria linden home and the land settings reflected previous owners settings.

I unofficially reported this months ago. I received a new linden home and the access list was not cleared.

Little unsure why people would get a property set up urls and images and release them. Could be for scamming people or taking away from the intended first impression? It's annoying checking new linden home properties to make sure there's nothing attached from previous owners.

What were you doing when it happened?

checking out my new linden home

What were you expecting to happen instead?

clean fresh parcel with all previous owners settings removed and changed to default.

Other information

Attachments

Original Jira Fields | Field | Value | | ------------- | ------------- | | Issue | BUG-228496 | | Summary | Bellisseria - Snap Shots and Music Urls In 1 Case Access Lists Are Not Being Reset After Parcels are Released | | Type | Bug | | Priority | Unset | | Status | Been Triaged | | Resolution | Triaged | | Reporter | Paulsian (paulsian) | | Assignee | Derrick Linden (derrick.linden) | | Created at | 2020-04-14T20:25:28Z | | Updated at | 2020-05-16T17:39:31Z | ``` { 'Build Id': 'unset', 'Business Unit': ['Platform'], 'Date of First Response': '2020-04-21T08:58:44.206-0500', 'ReOpened Count': 0.0, 'Severity': 'Unset', 'System': 'Linden Content in SL', 'Target Viewer Version': 'viewer-development', 'What just happened?': "I teleported to my bellisseria linden home and the land settings reflected previous owners settings.\r\n\r\nI unofficially reported this months ago. I received a new linden home and the access list was not cleared. \r\n\r\nLittle unsure why people would get a property set up urls and images and release them. Could be for scamming people or taking away from the intended first impression? It's annoying checking new linden home properties to make sure there's nothing attached from previous owners. ", 'What were you doing when it happened?': 'checking out my new linden home', 'What were you expecting to happen instead?': 'clean fresh parcel with all previous owners settings removed and changed to default. ', 'Where': 'http://maps.secondlife.com/secondlife/Wazoo/180/152/56', } ```
sl-service-account commented 4 years ago

Paulsian commented at 2020-04-21T13:29:50Z

I'm releasing this parcel. For reference this is the unsecure URL that was attached to my new linden home upon delivery. http://server1.chilltrax.com:9000/

sl-service-account commented 4 years ago

Paulsian commented at 2020-04-21T13:50:18Z

Another "brand new" linden home obtained today at a parcel in bellisseria with an unsecure URL attached to the property from the previous owner: Here's the unsecure URL  http://relay.181.fm:8006/

Here's the location:

http://maps.secondlife.com/secondlife/Mangusta/105/28/60

sl-service-account commented 4 years ago

Paulsian commented at 2020-04-21T13:56:48Z

and another one I just received under media / type it said kline/kline or something strange like that I went to select the drop down and it was not an option and went away. I changed to no content. unsure what that means but was not an option in the drop down. 

sl-service-account commented 4 years ago

sandi Mexicola commented at 2020-04-21T13:58:44Z

What happens if you just change the URLs and access lists, etc., to what you want?

sl-service-account commented 4 years ago

Paulsian commented at 2020-04-21T14:14:47Z

and another one with settings that are not identifiable and or secure from previous owner kline/kline under media type. Please see attachments. ![New Linden Home Media Mod Not Listed 2.JPG](New Linden Home Media Mod Not Listed 2.JPG)

My point is new users are getting linden homes that could be security threat to users unknowingly by automatically playing unsecure URLs that could be malicious. 

sl-service-account commented 4 years ago

Paulsian commented at 2020-04-21T14:16:09Z

Yes I can delete my own settings I've done that many many many times. I'm seeing a trend that could be negative and reporting it so that maybe that is not what is supposed to come with new linden homes? 

sl-service-account commented 4 years ago

Paulsian commented at 2020-04-21T14:24:26Z

So by visiting MY 2 brand new linden homes today I've also visited 2 unknown unsecure URLs that were attached to the properties by previous owners and were not cleared at the time they abandoned the parcels. 4 out of my 5 linden homes today were not cleared before I received them. 

sl-service-account commented 4 years ago

sandi Mexicola commented at 2020-04-21T14:26:06Z

Well, good point.  I suppose it would be better if everything were blanked out or set to some kind of default.  

Meanwhile, you could set your SL viewer to not play any music streams or media until you whitelist them.  

By the way, that picture is a little bit too small to read. :)  

 

sl-service-account commented 4 years ago

Paulsian commented at 2020-04-21T15:12:48Z

I can take care of myself just fine. I'm more concerned about the security of Linden Lab & the community, especially new users. 

I've invested in numerous flying avatars. I enjoy the freedom to soaring around Bellisseria. Right now i'm wondering what exactly am I flying through. I've noticed 3rd party audio urls extending outside of parcels. the urls inside the parcels are 99.9% unsecure. So my suggestion about the Avatar Shower would be a good thing. 

Maybe an option in media settings to only play secure URLs? Maybe partnership with trusted media provider to provide media resources to Linden Labs for use on parcels?  

sl-service-account commented 4 years ago

Paulsian commented at 2020-04-22T17:34:47Z, updated at 2020-04-22T17:39:02Z

My first linden home today had unsecure url in media tab from a previous owner that was not cleared upon my arrival. This is the link of the unsecure link and please see attachment. http://server1.chilltrax.com:9000/  I manually cleared them out before releasing parcel. Attachment and link is for your records. ![New Linden Home Media Not Cleared from Previous Owner Unsecure URL Bindlestiff.JPG](New Linden Home Media Not Cleared from Previous Owner Unsecure URL Bindlestiff.JPG)

sl-service-account commented 4 years ago

Paulsian commented at 2020-04-22T17:53:11Z

Here's one where the snap shot was not set to default upon parcel release. You may be wondering well what's the harm of a snap shot not being cleared it's cute! Imagine if this was an explicit sexual image. 

![New Linden Home Snapshot Not Cleared from Previous Owner Rheinhart.JPG](New Linden Home Snapshot Not Cleared from Previous Owner Rheinhart.JPG)

sl-service-account commented 4 years ago

Paulsian commented at 2020-04-22T18:01:03Z

For Today: Out of my 5 New Linden Homes 2 of them had not been set to default. Maybe a required button that has to be pushed by user to revert all settings to default to be able to abandon/release property like how we have to remove objects before land can be abandoned so does the settings. For new users that will be more confusing. Abandon button should equal auto revert to default settings?