Second Life Security Breach

[Signe]

Second Life Security Bulletin

SAN FRANCISCO, CA. (September 8, 2006) - Linden Lab reported today that it is notifying its community of a database breach, which potentially exposed customer data including the unencrypted names and addresses, and the encrypted passwords and encrypted payment information of all Second Life users. Unencrypted credit card information, which is stored on a separate database, was not compromised.

The breach was discovered on September 6, 2006 and promptly repaired. The company then launched a detailed investigation that revealed an intruder was able to access the Second Life databases utilizing a "0-Day Exploit" through third- party software utilized on Second Life servers. Due to the nature of the attack, the company cannot determine which individual data were exposed. The company's technical investigation is ongoing.

'We're taking a very conservative approach and assuming passwords were compromised and therefore we're requiring users to change their Second Life passwords immediately," said Cory Ondrejka, CTO of Linden Lab. "While we realize this is an inconvenience for residents, we believe it's the safest course of action. We place the highest priority on protecting customer data and will continue to take aggressive measures to protect the privacy and security of the community. "

Linden Lab advises all users to take appropriate precautions against misuse of personal information. To reduce the risk of fraud, Linden Lab will not contact individuals by phone or any other method asking for private information unless it is in response to an inquiry from the individual user.

Source

[Tale]

That could have some amazing legal implications in a world where accounts can have virtual property worth eleventy thousands of dollars.

[geldonyetich]

Would serve em' right if Linden Labs did find themselves getting held accountable for virtual property hijackings.  They're often used as a poster child for leigitimized RMT, even though they lack a game balance for RMT to be concerned with.

[WindupAtheist]

I heard you can download and join SL without even giving credit card info now.  One of these days I'm gonna join, make an avatar with a turban and a big ugly beard, and go suicide bomb some furry sex clubs.

[Righ]

You have to buy your clothes, so you'd need to get a job as a migrant worker on the Connex refinery to buy a turban. When you get laid off, you won't be able to afford to live, and you'll have to fall on the mercy of a bright-eyed young fundamentalist cleric. At that point, they'll be choosing the target, not you. Even Second Life's a bitch, then you die.

[WindupAtheist]

I'll just go along with them long enough to get my dynamite belt.  Then it's adios to the Jews and hello furries.