[Opensim-users] Retaining correct creator/owner when moving OARs between stand-alone simulators.

[M.E. Verhagen]

Stand alone simulator do not require an internet connection and can be
run on a local lan, so they cannot check with an external registry
service.


2011/9/10, Marcus Alexander Link <manupool at gmail.com>:
> How about a non-profit User/Creator Registry service -
> comparable with the Domain Name System (DNS)...
>
> M.
>
> On Sat, Sep 10, 2011 at 2:32 AM, Justin Clark-Casey
> <jjustincc at googlemail.com> wrote:
>> On 09/09/11 03:44, Cider Jack wrote:
>>>
>>> This makes perfect sense to me. No reason for the creator to be the
>>> owner when the creator might not even exist on the new grid. Also
>>> keeps the permissions functional, as mentioned.
>>>
>>> On a related note though, I'm a bit concerned whether I'm reading this
>>> right:
>>> "2. Otherwise, if a user with the same *name* as the creator exists then
>>> that
>>> user's UUID is used."
>>>
>>> I'm reading this to mean that if an avatar name of "John Jones"
>>> creates an object on SoaS, then someone uploads the oar/iar to
>>> something like OSGrid, ReactionGrid, whathaveyou, where there is a
>>> completely random/unrelated avatar on that grid named "John Jones".
>>> This means that the second John Jones is shown as creator, even though
>>> they have nothing to do with it?
>>>
>>> This might be a concern not only for the original creator potentially
>>> losing credit, but it seems it might open a simple exploit for
>>> griefing purposes. Say that John Jones on OSGrid has nothing to do
>>> with an obscene/illegal item that was imported. They could be held
>>> accountable for something they have absolutely nothing to do with.
>>> Even if their name is cleared with the grid manager (shouldn't take
>>> much investigation, as the object's owner name would be a good place
>>> to start), their wider reputation on (and off) that grid could be
>>> irreparably damaged. For avatars using RL names this could potentially
>>> impact their RL.
>>>
>>> But then again, perhaps I haven't properly grasped how this works.
>>
>> The name lookup used to happen and still will with old OARs that use a
>> different resolution method (OSPA).  I think this was last used back in
>> 0.6.9.  For recent opensim, only a UUID lookup is done - if a simple
>> string
>> creator name is used then there's no attempt to reassociate it with a user
>> account.
>>
>> I think overly trusting user names on grids is a mistake - after all,
>> anybody person could create an account with that name and associate bad
>> content with it.  And to be honest, the SL mechanisms were never designed
>> with this kind of content transfer to third party grids in mind.
>>
>> --
>> Justin Clark-Casey (justincc)
>> http://justincc.org/blog
>> http://twitter.com/justincc
>> _______________________________________________
>> Opensim-users mailing list
>> Opensim-users at lists.berlios.de
>> https://lists.berlios.de/mailman/listinfo/opensim-users
>>
> _______________________________________________
> Opensim-users mailing list
> Opensim-users at lists.berlios.de
> https://lists.berlios.de/mailman/listinfo/opensim-users
>