Inventory Offer Warning

I heard about that. I'll have to put the word out to my friends when I get back online in an hour. I hope they nail the scripter who made it to the wall. You might want to post this to sl_furs and secondlife_furs just to let them know too.

you might want to read my comment below before sending that message to groups. here's a picture as well:

I think there's a bit of misinformation in that warning in that an object can't really debit your account just by accepting an inventory offer. You have to give an object explicit permission to debit your account and you will get a big bright yellow dialog box explaining that you are granting that object permission to debit your account of lindens. There are valid functions for this in LSL scripting for things such as vendors etc. So in order for this radar thing to take your lindens, you'd have to accept the object into your inventory, rez it, or wear it .. you would then get a BIG yellow warning dialog box asking you for explicit permission to debit your account of lindens, you'd have to say yes, before it could take anything from your account.

I think there were more issues before when the warning dialog boxes for the lsl permissions_debit code, looked like a regular blue pop up dialog box so people would wear or touch an object and think it was like a dance ball asking for permission to animate your avatar and just blindly click yes. Either way though, you do have to give the object explicit permission to do so. If you inadvertently grant debit permissions to an object, just immediately delete the item and empty it from your trash.

Thought I'd just clarify a bit about how this would work since a lot of details are left out with regards to how it actually happens. Bottom line is an object can not take your lindens unless you give it explicit permission to do so.

yep i agree. i've been seeing this message posted all over the place and in group notices/chat without any real clarification on permission_debit and what actually happens. people end up being unnecessarily scared of accepting potentially helpful things from strangers due to misinformation or lack of it and that's just fear mongering. i figured my pic above might help people see what happens when you're asked to grant debit permissions so they can educate themselves.

One important thing about all this, too: it's not jes about a "Free Radar" thingy. Heck, there are plenty of those that are not a problem at all. Really, this is about taking candy from strangers, no matter what the name, and ignoring the big yellow box.

There USED to be a fault in how SL handled money. You could have your account drained simply by wearing something. It worked as such: item already has permissions to pay set by the creator, and it pays the wearer over and over again. The amount was negative, which the system should have rejected, but didn't. Thus this time last year, just wearing somethign was enough to take all your Lindens.

I cannot guarantee this is fixed or not - LL is tightlipped about their Money system.

It worked as such: item already has permissions to pay set by the creator, and it pays the wearer over and over again.

I'm not quite sure I understand how your explanation works. It pays the wearer or did you mean creator? I can't possibly see how lsl would *ever* allow someone else to grant permission_debit perms over someone else's account. Do you happen to know where you heard about this because I'm not aware of this exploit as of last year.

The only 'wear an object' exploit I'm aware of was when the dialog boxes for debit permissions looked just like a regular blue dialog box you'd get for having your av animated. When these bad dance bracelets were worn, you would get multiple, similar looking dialog boxes, with the first few requesting your av be animated and then a permission debit dialog slipped in between. It's much harder to spoof now with the distinct yellow/orange box.

Yay Josh

Here I am.. just getting annoyed by this spam, and googling for a confirmation that it's just viral spam.. and who do I find explaining it? Josh! Yay. ^^

/toes

Re: Yay Josh

yes toes, my goal is to be the snopes.com of sl lol

Re: Yay Josh

most items only asked for permission on rezz. but it's different when worn. it's auto granted when worn.

Re: Yay Josh

permission_debit is never auto granted.

Someone gave me one of these types of things in late 2006/early 2007 and it had the stupidly large yellow warning box. If ever had a normal blue permissions box it was a long time ago.

Josh Bright Yellow Box

Hmmm did anyone really look to read josh first post? look at the yellow box.. maybe the reason he knows so much about all this is the fact that it says josh's money stealer!! i see the bright yellow box and i always read everything but i noticed this right off the bat!! makes u wonder who really might be under all the money scams hmm!!!

Re: Josh Bright Yellow Box

shhhh don't tell. where do you think i get my lindens for new hair?!!