[Opensim-users] latest osslEnable.ini - (git master: 6bac44e)

[AJLDuarte]

Hi,

                Yes osGetAgentIP does not check threat level anymore

            It is above that, permanently restricted to users with administrator level ( ie gods)

 

                The change was taking out of threat level check the functions that don’t make much sense having it

                That means functions that have no security or load issues and so  available if ossl api is,

but also functions  with other fixed  checks, like this example.

 

                threat level code and tables are growing as ossl grows, with a negative impact on performance that we can avoid.

                Future change may be group similar functions on same “allow_name”

 

                Hope this makes it more clear.

Ubit

                

 

From: opensim-users-bounces at opensimulator.org [mailto:opensim-users-bounces at opensimulator.org] On Behalf Of dz
Sent: Friday, June 30, 2017 16:38
To: opensim-users at opensimulator.org
Subject: Re: [Opensim-users] latest osslEnable.ini - (git master: 6bac44e)

 

Well,

 

This conversation seems to beg  for input....

 

HUH????

 

"  ...          This does not relate directly to security in all cases: osGetAgentIP does not check thread level anymore..."

 

osGetAgentIP  has the  MOST potential to be a security issue...  

 

I mean  REALLY???     you rate the possibility of someone  animating  your avatar without your permission as a higher threat  than allowing someone with a script to do a geo-locate on a person USING an avatar???     That seems  just wrong to me....

 

I have a long history of arguing  with devs about  the  threat level they seem to arbitrarily decide to apply.  If you are going to do something  WRONG,  at least do it  consistently,  so us  mortals  can use functions that are truly useful  ( without having to beg each and every grid admin and convince them that  Animating the NPC they allowed us  to generate  isn't going to allow us  to track him/her  down in RL ).

 

dz

 

P.S.   I've chopped the rest of the conversation  because I'm pretty  sure  no one  REALLY want to re-read the 5 iterations of  Back and Forth..   

*********************************************

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://opensimulator.org/pipermail/opensim-users/attachments/20170630/2bc1a264/attachment.html>