Wednesday, February 7, 2007

Conundrum!

I noticed the other day that some of my scripts were able to execute on no-script land.

Through the process of elimination, I was able to narrow it down to exactly what combination of factors permitted this to occur, and now I can reproduce it at will — for example, I modified the "Sexy Walk" attachment so it now continues to function in no-script territory; no more monkey walk for me!

My first thought was, "I should probably report this as a bug."

My second thought was, "But I could make a mint selling AOs that keep working!"

My third thought was, "I wonder if this is an exploit. Do they still offer a bounty on exploits? And if I don't report it, but sell objects which make use of it, would I get banned?"

Further research is needed.

5 comments:

Natalia Zelmanov said...

Johanna, you always find these really cool things! Its amazing how well you know SL!

Ged Larsen said...

Oh, interesting situation...

Especially, for example, if the "exploit" allowed people to use offensive / griefing scripts on no-script land...

Other exploits exist that LL is aware of, and has publicly stated that they do not intend to fix. Examples include bypassing "no-copy, no-transfer" for unrestricted prim parameter copying of everything except textures.

Another is the "permissions bug" where next-owner permissions are not changed until the object is rezzed, allowing objects to potentially be copied / transferred by a new owner, if the more restrictive permissions were set by the creator while the prim was in inventory, and never subsequently rezzed.

Both of these, LL is aware of and has commented on, but has chosen not to fix.

What are you going to do?

Johanna Hyacinth said...

Thanks, Natalia! :)

Ged, I'm standing in a Linden's office right now, having asked him whether it's permissible to make such items, or whether it would be considered an exploit. He's gone silent, so I imagine he's asking someone else what the answer is...

Johanna Hyacinth said...

I spoke with Data Linden, who said as long as it wasn't used for anything malicious then he didn't see a problem with me making and/or selling objects which function in no-script land.

While "I can't see why not" isn't exactly the most ringing endorsement, at least I've got it straight from a Linden's mouth...

Barney said...

It's a known and well-endorsed thing, how to get scripts to work on no-script land. And darn handy for a lot of things, which is why it's still there, I guess :)