RSS - Posts
A little over a week ago I posted about a security update from SecondLife that made it harder for hackers to access your inventory and Linden Dollar balance. It turns out that they have another oopsie that was pushed out Monday evening.
If you tried to log into SecondLife since Monday evening you already know that you need to get the new viewer to log in, whether you use the officially released viewer or the release candidate viewer. You now need version 1.20.17 of the viewer or release candidate five of viewer version 1.21 to be able to log in.
Exactly what wet wrong this time? This is what they said on the SL Grid Status Report blog:
We recently updated the Second Life server and viewers to enhance the communications code. All transfer operations are now restricted to files that the user has expressly chosen, and specific directories that the viewer uses for transferring data. For the safety of all Second Life users, we are releasing this updated viewer to all Residents.
Potential vulnerabilities had been identified in those message communications directed at a Second Life viewer over the previous protocol. By taking advantage of this vulnerability, while extremely difficult technically, a malicious user could potentially use the viewer to access files on the victim’s computer. We currently have no evidence of this vulnerability ever being exploited.
I apologize for not posting this sooner but I was away from my computer for most of yesterday. It works out well, though, because yesterday they notified the readers of the grid status blog that there is currently problems rezzing objects, and they’re still working on getting the problem fixed. So if you try to rez something and can’t, they already know about the problem and they’re on the case.
The JIRA Public Issues Tracker was offline this morning, but they’ve managed to get it back online so you can once again report bugs in SecondLife and see the bugs others have reported.
While you’re in SecondLife make sure you stop by DollyRock and pick up a set of their very cool Halloween Stockings as well as their Halloween Freebie. The freebie is a very cute, and very sexy, Halloween outfit, complete with a hat. The hat does come with some straight black hair, but if the hair doesn’t work for your avatar (it doesn’t for me) at least you’ll get a sexy outfit to celebrate All Hallow’s Eve in.
