Title: Second Life Security Breach Post by: Signe on September 09, 2006, 06:22:42 PM Quote Second Life Security Bulletin SAN FRANCISCO, CA. (September 8, 2006) - Linden Lab reported today that it is notifying its community of a database breach, which potentially exposed customer data including the unencrypted names and addresses, and the encrypted passwords and encrypted payment information of all Second Life users. Unencrypted credit card information, which is stored on a separate database, was not compromised. The breach was discovered on September 6, 2006 and promptly repaired. The company then launched a detailed investigation that revealed an intruder was able to access the Second Life databases utilizing a "0-Day Exploit" through third- party software utilized on Second Life servers. Due to the nature of the attack, the company cannot determine which individual data were exposed. The company's technical investigation is ongoing. 'We're taking a very conservative approach and assuming passwords were compromised and therefore we're requiring users to change their Second Life passwords immediately," said Cory Ondrejka, CTO of Linden Lab. "While we realize this is an inconvenience for residents, we believe it's the safest course of action. We place the highest priority on protecting customer data and will continue to take aggressive measures to protect the privacy and security of the community. " Linden Lab advises all users to take appropriate precautions against misuse of personal information. To reduce the risk of fraud, Linden Lab will not contact individuals by phone or any other method asking for private information unless it is in response to an inquiry from the individual user. Source (http://secondlife.com/corporate/bulletin.php) Title: Re: Second Life Security Breach Post by: Tale on September 09, 2006, 11:27:31 PM That could have some amazing legal implications in a world where accounts can have virtual property worth eleventy thousands of dollars.
Title: Re: Second Life Security Breach Post by: geldonyetich on September 10, 2006, 01:47:41 PM Would serve em' right if Linden Labs did find themselves getting held accountable for virtual property hijackings. They're often used as a poster child for leigitimized RMT, even though they lack a game balance for RMT to be concerned with.
Title: Re: Second Life Security Breach Post by: WindupAtheist on September 10, 2006, 01:50:40 PM I heard you can download and join SL without even giving credit card info now. One of these days I'm gonna join, make an avatar with a turban and a big ugly beard, and go suicide bomb some furry sex clubs.
Title: Re: Second Life Security Breach Post by: Righ on September 11, 2006, 12:06:18 AM You have to buy your clothes, so you'd need to get a job as a migrant worker on the Connex refinery to buy a turban. When you get laid off, you won't be able to afford to live, and you'll have to fall on the mercy of a bright-eyed young fundamentalist cleric. At that point, they'll be choosing the target, not you. Even Second Life's a bitch, then you die.
Title: Re: Second Life Security Breach Post by: WindupAtheist on September 11, 2006, 05:16:43 AM I'll just go along with them long enough to get my dynamite belt. Then it's adios to the Jews and hello furries.
|