Talk:OsTeleportObject
From OpenSimulator
(Created page with "=="Severe" rating? Why?== I would really like to see that devs have to prove that a function deserves a given threat rating by providing examples of how a function is used to ...") |
(→"Severe" rating? Why?) |
||
| Line 1: | Line 1: | ||
=="Severe" rating? Why?== | =="Severe" rating? Why?== | ||
I would really like to see that devs have to prove that a function deserves a given threat rating by providing examples of how a function is used to cause problems like crashing sims, with functions defaulting to no threat rating if they cannot provide such proof. I cannot imagine how this function could be exploited in any way that cannot already be done by other means. [[User:Mlorrey|Mlorrey]] ([[User talk:Mlorrey|talk]]) 14:38, 27 March 2022 (PDT) | I would really like to see that devs have to prove that a function deserves a given threat rating by providing examples of how a function is used to cause problems like crashing sims, with functions defaulting to no threat rating if they cannot provide such proof. I cannot imagine how this function could be exploited in any way that cannot already be done by other means. [[User:Mlorrey|Mlorrey]] ([[User talk:Mlorrey|talk]]) 14:38, 27 March 2022 (PDT) | ||
| + | |||
| + | ---- | ||
| + | |||
| + | Just because you cannot imagine an attack vector doesn't mean it doesn't exist. There are plenty of ways to exploit a lot of the functions, even base LL ones, and I am sure as hell not going to provide them here for the world to see. The limits and throttles we impose exist for a reason and even so they remain so liberal as to being of almost no use in some cases. If you want to use the function just enable it directly without utilizing the threat level system, in the ini how to do that. The threat level system is a bit weird I give it that, but it's designed to make it easier to enable a set of functions as well as providing guidance as to the danger of them. If you want to ignore that clear indication, then better have a good excuse for the inevitable explosions and fireworks you'll see as soon as a bad actor figures out the barn door is wide open with a neon invitation sign hanging above. - [[User:Tampa|Tampa]] | ||
| + | |||
| + | ---- | ||
Latest revision as of 01:22, 28 March 2022
[edit] "Severe" rating? Why?
I would really like to see that devs have to prove that a function deserves a given threat rating by providing examples of how a function is used to cause problems like crashing sims, with functions defaulting to no threat rating if they cannot provide such proof. I cannot imagine how this function could be exploited in any way that cannot already be done by other means. Mlorrey (talk) 14:38, 27 March 2022 (PDT)
Just because you cannot imagine an attack vector doesn't mean it doesn't exist. There are plenty of ways to exploit a lot of the functions, even base LL ones, and I am sure as hell not going to provide them here for the world to see. The limits and throttles we impose exist for a reason and even so they remain so liberal as to being of almost no use in some cases. If you want to use the function just enable it directly without utilizing the threat level system, in the ini how to do that. The threat level system is a bit weird I give it that, but it's designed to make it easier to enable a set of functions as well as providing guidance as to the danger of them. If you want to ignore that clear indication, then better have a good excuse for the inevitable explosions and fireworks you'll see as soon as a bad actor figures out the barn door is wide open with a neon invitation sign hanging above. - Tampa
