A Possible Answer To Stemming the Flow
Posted on 19. Oct, 2009 by Tenshi Vielle in Digital Life
Scripter Tekk Ixtar has built what appears to be the answer to Banlink’s many flaws. His system has jumped many of the hurdles Banlink has encountered (attempts to circumvent hacking are in the works, as well as several features that Banlink doesn’t offer, including administration-level access) and included many features of his own.
Notes on this project from Tekk:
Content Protection
Preview
—————————————
Content Protection is a global banlist expanded across the grid. Each region featuring Content Protection is secured by a community of Content Protection administrators to collaborate in deterring abusive residents taking association to grief, theft, and disruption of community standards. Content Protection’s prototype version, 1.4, is the only current version out at the moment. The official version, which has had 2 months of work on improving and innovating, is anticipated to be released end-October to early-November. There is not absolutely ETA, however work has been progressing temendously and diligently. Keep in mind v1.5 is still in development.———–
Absolute Features
———–
System consists of two modes: Lenient & Strict
Strict: Immediately kicks users.
Lenient: Kicks users after (default 3) different administrators have banned them via the system.Administrators are able to ignore other administrator’s bans.
Administrators are able to exclude specific bans from their system.
Balance of power – Only the bans made by the administrator can be directly unbanned. If three or more administrators ‘exclude’ the user from being banned on their system, the ban will automatically be lifted, however will still remain for the originally banning administrator.
Issued bans will optinally be able to include a reason for the ban and a snapshot of the incident.
Age-kicking will be provided to deter new accounts suspected of being alternate accountds. Further, the system will automatically kick any user under a specified amount of days old from the region.
Payment information restriction – Optionally, users are able to configure the system to kick users with no payment information. What’s different about the system and region access settings, is the system will feature an access list to allow friends or acquantainces to bypass the restriction, whereas the region setting does not allow.
CryoLife Users – automatically banned. Users of CryoLife will automatically be detected, banned, and removed from the region using the true method; the internal built-in feature in CryoLife (not the inefficient inaccurate scripted method.) using a 24/7 hosted bot.
Scanning is instant and region-wide, up to 6,000m. (Expected to increase range before release)
Controllable via in-world, or through the professional and simplistic web control interface.
———–
Possible Features
———–
Ban users via IP address. With further research, it’s believed plausible to ban users via IP address. Method will be undisclosed.
Please note that this will operate on a monthly fee and administrators will be screened. “Level 0″ users who wish to use the system to keep their sims clear of known problem Second Life avatars as set by Content Protection administrators will not require approval. The entire system will be web-based, excluding the local settings. All bans stored externally in a MySQL database. Expected arrival date of early November.
Ann Otoole
Oct 19th, 2009
Should have gone on a donation basis only. Anyone attempting to profit from content protection needs to be universally damned and burned off the face of SL like a cancerous mole.
And it is still subject to lawsuits for it's inherent flaw of subjective banning that will result in revenge bans.
Fail.
Tekk Ixtar
Oct 19th, 2009
@Ann; As stated, there is a balance of power in the system. There will be no revenge bans. Tenshi forgot to mention that users whom simply want to utilize the system's banlist will NOT be required to pay for it. Only those with the actual power to ban–those of which will be thoroughly observed before granted that power to begin with, specifically to prevent corrupted residents from accessing the system.
Lawsuits for a global collaborative banlist is intangible. Residents aren't forced to use this system.
As for the actual monthly fee, I was prepared to establish the system free; Current users of the prototype v1.4 have urged me to make it a subscription-based system. Not only does it repay for diligent work, but also for the dedicated server's monthly hosting fees. The price would be a mere L$1,000. It's not an attempt at any profit at all, simply to sustain the system.
Ann Otoole
Oct 19th, 2009
LMAO tell that "not forced to use it" line to the residents that get unfairly banned. As I recall being banned is not a resident opt in situation.
Besides LL is banning people detected logging in with theft viewers anyway.
Tekk Ixtar
Oct 19th, 2009
Heh. As I have been informed by several residents, you are one to comment on everything to oddly troll, not listening to reason. If a user has been banned in error, administrators can exclude that ban from their system, or a whole set of bans made by an individual. There's a level system as well; I assume you have not read the post thoroughly. I would like to kindly suggest that you read the entire post instead of the words "Content Protection" and "monthly fee".
Linden Lab is rarely banning users logging in via third party viewers. At that, it can easily be avoided.
Furthermore, as you seem to be commonly known as a troll here, I would prefer not to explain anything further to you as you refuse to comprehend reason.
Trixi
Oct 19th, 2009
"Besides LL is banning people detected logging in with theft viewers anyway. "
wrong!
like a week ago some cyrolife user ripped my shape/skin off my ass at curio. like 5 ppl were ripped, we abuse reported him and hes still there… dot need to sayanything more i guess…
"Should have gone on a donation basis only."
hmm… fail?
there is a server that needs to be paid, right? why should anyone in the whole wide world do such a work on a dontaion basis and never know if he/she/it is even able to pay the servers costs?
1000L/month is affordable. no need to complain over that =)
3blahs1whatever
Oct 21st, 2009
Umm, he said theyre RARELY banning. You misread.
Nobody
Oct 19th, 2009
—–Ban users via IP address. With further research, it’s believed plausible to ban users via IP address. Method will be undisclosed.—-
Looks like you will sneek secretly into your visitors viewer to access their IP address. I believe this is against LL TOS. And I don't think this is a good move anyway. What else do you see there ? These are cheap hacker methods and have no class at all. What's next ? Try to switch on your visitors webcam, take a RL snapshot and ban the RL person ?
Tekk Ixtar
Oct 19th, 2009
It's externally obtained – not specifically via Second Life and does not violate any Terms of Service.
IP addresses of users will not be disclosed to any administrators. They will be solely used to deter avatars from creating alternate accounts to bypass bans to repeat offences (i.e. copybotting). Nor is it a hack in any form. It's simply analyzing incoming data.
I'm not prepared to respond to every attempted troll on this blog, and I am pretty fond of the statistics of how many of you simply come here to troll–however, I will respond to reasonable and respectful concerns.
Attempt to slander or in any way to negate the in-depth work and time I have put into this, as a favor to those whom wish to use it, will be ignored. If you don't want to participate, that's fine. I would suggest a common trolling site that others collaboratively troll alongside you; 4chan.org.
Ann Otoole
Oct 19th, 2009
You are lying about being able to get my IP address from your LSL scripted device. Prove you can get my IP address without Tenshi's help or some other website operator's help.
Tekk Ixtar
Oct 19th, 2009
Heya Ann.
When I sent that note to Tenshi, I informed her that I was unsure if it was complete and was not quite able to process properly due to lack of sleep.
It's not obtainable through LSL, but through the bot that will be hosted 24/7. "using a 24/7 hosted bot." I apologize for not explaining everything initially, but I will do my best to explain as much as I can here when available.
Please remember that the system is interconnected through the bot, the web-based system, and LSL.
Colleen
Oct 19th, 2009
Well Nobody, what do you suggest we do?
Colleen
Oct 19th, 2009
I along with several content creators have been using this system for a while now and I am quite fine with it ,L1000 is absolutely nothing to ask for compared to the amount of work that I know Tekk has put into this. Really, why must he absorb all the cost for servers etc etc, that would be totally unfair to him.
Business-in-your-box
Oct 19th, 2009
I think that the CryoLife ban is a good idea.
Krypt Aeon
Oct 19th, 2009
Scanning is instant and region-wide, up to 6,000m. (Expected to increase range before release)
How did you manage that?
Tekk Ixtar
Oct 19th, 2009
Oh, and also remember that the system is still in development and there are further amendments not yet mentioned here. Mostly just flexible APIs, optional notices to users, to administrators, and so forth.
If you have any ideas you think would benefit this system, please send me a notecard in-world with your suggestion.
Ann Otoole
Oct 19th, 2009
So you are penetrating the LLNet to see who is logging on and you are hacking the LLNetwork presence database to correlate IP address to resident. I'm sure LL will be pleased to know of your activities. If you have communicated your plans to LL and LL approved please paste the communications in so all can see exactly who at LL has authorized this network surveillance activity that can acquire data from the presence system.
Tekk_Ixtar
Oct 19th, 2009
Please read the following posts below this.
Nobody
Oct 19th, 2009
Tekk, no, I am not a troll. I appreciate your work and think you are on the right track. However, the idea of getting the IP from your visitors viewer concerns me. Don't make the step and go into viewers. There is more information you could get access to. And yes, it is a violation of LL's TOS. You might be a good guy, I don't know, but there are others that could access your system in many ways and that means they could get information about your customers and about us content creators.
Colleen, I wish I knew what to do.
And Ann, since so many complain about your posts, I have to say I like them. Don't smile, I don't like them all. You are outspoken and say what you think, there should be more people like you. Keep on posting !
Tekk_Ixtar
Oct 19th, 2009
Thank you for your kind response.
There's no form of "getting into viewers". It's simply incoming data logged and analyzed. I would tell you more, however, it's very sensitive data. Just know that it's not directly via Second Life and it is not against the terms of service.
Even then, the administrators of this blog has your IP address. There's no harm that can be done with your IP address other than restricting it access, which is exactly what my system does to users that are rightfully banned from the regions owned by the users who utilize the system. Since it is not via Second Life directly, their Terms of Service is not taken into consideration.
As far as the security of Content Protection, the two months I have been innovating the system, has been primarily fail-safes and tight security. More specifically, which is why I located to a dedicated virtual private server, which has no linkage to any other hosts (as average webhosts do). Provided that security, it is more costly.
Krypt Aeon
Oct 19th, 2009
I don't believe hes going into anyones client to get an IP hes just connecting to the region and seeing the IPs connected to it, and registering those connected to a name. Public information cannot be a violation in anyway.
Tekk_Ixtar
Oct 19th, 2009
It has nothing to do with the region, however, being locally present to the bot, it is likely. To preserve the security of the method, I am no longer commenting on that topic. Last thing we need is a slew of griefers gathering everyone's IP.
AdricAntfarm
Oct 19th, 2009
Why is it okay to sell shoes or a dress you can only wear on the screen for 1000L but wrong for someone to sell a product that provides protection? Hell, let's go after the chicken dealers next.
Donation? Who makes these calls? Why isn't a decent penis and HUD a donation? That Linden birthed me as a ken doll down there is just as wrong.
Oh, I am out of the loop, but these aren't the fellows taken in by a years ago corrected flaw in SQL that should of been patched are they?
mad max
Oct 19th, 2009
I've been seeing the progress on this since Tekk began, have seen it work. Granted, it's in development. Granted, it needs more work. But honestly, lighten up, Anne. Unless you have some better ideas in the works, or ANY game-changing or even moderately effective contributions towards dealing with the IP theft issue, then please consider taking a more positive lean towards this idea, instead of poo-pooing all over it. Until LL does something (or does something differently) about the problem, then i think it would be a good idea to give people that are trying to do something about it a reasonable doubt, if not actually contributing to their efforts. The cost of this system as described is valid and necessary. Even if profit was involved, so what? Privatized security works extremely well in most situations, but particularly in cases where no standing force is effective or available.
Unless you have a better idea….put a sock in it while people try to do something positive, regardless of whether those efforts have some effect or none. I don't recall seeing any revolutionary new technology coming out of the O'toole workshop to help with this problem.
Tekk, keep up the good efforts.
Ann Otoole
Oct 19th, 2009
I have been doing direct action work for months. And getting real results. Those that know know. The rest don't need to know. Check around if you don't believe me.
Oh and BTW he can't get IP addresses. Period. Unless he is hacking into LLNet and the security system or forcing clients to load web pages without user permission or somehow forcing clients to load media. By all means Go check with Linden Lab before you say I am wrong. Ask Linden Lab if Linden Lab wants this guy logging Linden account IP addresses or resident IP addresses. Ask them.
Why is it the most of the "males" here always hide behind fake names and the women always have the balls to post using their SL names anyway?
Talon Lardner
Oct 19th, 2009
I do agree that the IP ban, while not ideal, is a good stop-gap idea. An IP address is not as privacy breaking as some may think, though it may result in some being unfairly blocked if they share a large ISP with a legit banned person. Will there be a "white list" for known-good avatars who happen by sheer chance to share an ISP with a banned person?
Tekk_Ixtar
Oct 20th, 2009
The chances of a user obtaining another user's IP address which is banned within the system that plays Second Life in the same ISP, and in the same location (as hostnames are often unique to city initiails :p), are astronomical. If given the circumstance, however, that those odds miraculously do occur, IP bans can be lifted. (Remember, initially, it's optional and must be specified if the banning administrator intends to ban via IP.)
Business-in-your-box
Oct 20th, 2009
Hey Tekk, you are doing a good job, ignore the negative comments of some of SL's more notorious 'armchair activists'
Ann Otoole
Oct 20th, 2009
https://blogs.secondlife.com/community/community/...
Tekk_Ixtar
Oct 20th, 2009
May I ask, Ann, what does that have to do with anything?
Edit: Ah, I see. you perceive this is a third party viewer collecting data illegally. "it appears that some of those third party viewers also contain functionality that is being used to copy content without the right to do so, facilitate griefing, enable phishing, collect user data without clear disclosure of such practices".
Wrong.
• This isn't a viewer.
• Data is not collected via Second Life; not directly, as I have mentioned numerous times before, and I am perfecting it. I clearly stated in the notes, "With further research, it’s believed plausible to ban users via IP address. Method will be undisclosed."
Ann Otoole
Oct 21st, 2009
It is a client. And I bet I have been writing software since before you were born kid. And you need to go discuss your system with Linden Lab pronto. BTW that policy sure does apply to your project kid.
Tekk_Ixtar
Oct 21st, 2009
You seem to implicate anger and jealousy gathered cumulatively from all of your comments here and you are now attempting to attack me personally.
Should you have any mature feedback or concerns, I will be inclined to reply. Contrarily, I will disregard.
Business-in-your-box
Oct 21st, 2009
Ann, I don't understand why you are opposed to a tool which can only be beneficiary to the community. Tekk is doing a good job, and he deserves to be rewarded for it – which I'm sure he will be, as many people have already stated that they are willing to purchase the device.
Business-in-your-box
Oct 21st, 2009
*beneficial
trixi
Oct 21st, 2009
lol ann well, now just tell me how LL is going to get rid of those viewers? IP bans (not available) hardware bns (seem not to work at all)…
Sfynx
Oct 28th, 2009
this thing sounds like mafia. I see you as a big scammer I dont understand why you cant live in peace with yourself trying to mind your own. Who called the superhero to protect our interests? Oh yes you try to steal moneys selling shit to noobs. Everything you propose here its only shit you arent Sl owner you dont get IP (beside the fact you wont be able). You dont ban any and indeed you are not able to detect Cryolife, its so easy to hide it to every script, also its old viewer and your private viewer can do worse. Who will protect us from you?