well, Justin raised a good issue : Opensim need to be "clients proof" , ie checking for any odditites a a tainted client could inject in the system. I'm sure as soon as currencies will be implemented at intergrid level, we will see some kind of attacks coming from tainted clients .<br>
<br><br>SM<br><br><div class="gmail_quote">On Mon, Dec 15, 2008 at 5:55 PM, Lc <span dir="ltr"><<a href="mailto:lcc1967@gmail.com">lcc1967@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
what i found until now :<br><br>The previously inventory items are still in the db, at least the inventory table is not altered whatsoever, but the freshly uploaded items are not inserted.<br><br>I need to "sql" the association inventory / Asset now.<br>
<br>Sacha<div><div></div><div class="Wj3C7c"><br><br><div class="gmail_quote">On Mon, Dec 15, 2008 at 5:35 PM, Justin Clark-Casey <span dir="ltr"><<a href="mailto:jjustincc@googlemail.com" target="_blank">jjustincc@googlemail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div>James Stallings II wrote:<br>
> Interesting choice of words: "... since OS<br>
> appears to be vulnerable to any application using libSL, browsers<br>
> included."<br>
><br>
> This begs the questions: can opensim distinguish between clients? Should<br>
> it as a part of the core functionality?<br>
><br>
> I think the answer to the former, at least, is a resounding 'No".<br>
><br>
> In any event, last I heard, use of third-party inventory transfer<br>
> systems was not supported by the opensim team, if not actively<br>
> discouraged (at least, that was the case in the past).<br>
<br>
</div>I don't think there is either active encouragement or discouragement of the use of such systems. I think it has little<br>
to do with the OpenSim project.<br>
<br>
However, I believe that we should aim to be robust in the face of clients that do unexpected things - the client is in<br>
the hands of the enemy, as Raph Koster said.<br>
<div><br>
><br>
> I think that at the very least, it is safe to say "use at your own risk".<br>
><br>
> There are numerous good reasons why - not the least of which is that<br>
> they may in fact damage your inventory, not to mention the<br>
> near-impossible task of supporting someone else's closed-source application.<br>
><br>
> I am *truly* sorry that Sacha is having a problem with this, but I<br>
> really think he needs to seek out support from the vendor.<br>
><br>
> In the interim, if there is in fact a problem with SI corrupting<br>
> inventories, we should perhaps investigate some method of controlling<br>
> its use.<br>
><br>
> Cheers<br>
> James<br>
><br>
><br>
> On Mon, Dec 15, 2008 at 9:41 AM, John Hopkin<br>
</div><div><div></div><div>> <<a href="mailto:opensim@jfhopkin.karoo.co.uk" target="_blank">opensim@jfhopkin.karoo.co.uk</a> <mailto:<a href="mailto:opensim@jfhopkin.karoo.co.uk" target="_blank">opensim@jfhopkin.karoo.co.uk</a>>> wrote:<br>
><br>
> With all due respect, surely:<br>
><br>
> (a) This doesn't look like the cache glitch - with that, you see your<br>
> pre-existing inv items, just not the new ones. It looks to me like<br>
> Sacha is saying the inventory is actually rendered unusable (permanent<br>
> "loading" message).<br>
><br>
> (b) If (a) is correct, this is *not* purely a SI problem, since OS<br>
> appears to be vulnerable to any application using libSL, browsers<br>
> included. An application using a standard API should not be able to<br>
> cause damage to the underlying database.<br>
><br>
> Even if SI had actually deleted the entire inventory or something,<br>
> surely you'd just see an empty inv, not "loading"?<br>
><br>
> All the best<br>
> John<br>
><br>
> James Stallings II wrote:<br>
><br>
> >Sacha, typically, from what I understand, a cache-clear is req'd<br>
> before any<br>
> >inventory imported with second inventory will be seen in the av's<br>
> inventory.<br>
> ><br>
> >That being said, second inventory questions are perhaps best asked<br>
> >elsewhere.<br>
> ><br>
> >Cheers<br>
> >James<br>
> ><br>
> ><br>
> >On Mon, Dec 15, 2008 at 7:24 AM, Lc <<a href="mailto:lcc1967@gmail.com" target="_blank">lcc1967@gmail.com</a><br>
</div></div><div><div></div><div>> <mailto:<a href="mailto:lcc1967@gmail.com" target="_blank">lcc1967@gmail.com</a>>> wrote:<br>
> ><br>
> >> Hello all,<br>
> >><br>
> >> Some users report me that issue and I'd appreciate if someone<br>
> can reproduce<br>
> >> that :<br>
> >> Beware, the avatar won't recover the inventory, please don't<br>
> test that with<br>
> >> your regular "you"<br>
> >><br>
> >> Create a new avatar<br>
> >> go InWolrd<br>
> >> Grab some object / skin / shape / items in order to fill its<br>
> inventory<br>
> >> Check the inventory = No issue, all should be there.<br>
> >> Eventually logOff/On to countercheck<br>
> >><br>
> >> Now the "odd" part :<br>
> >><br>
> >> Start SecondInventory<br>
> >> upload any object/skin whatever inworld<br>
> >> Stop SI<br>
> >><br>
> >> Log the avatar inworld<br>
> >> Now the inventory will stay "loading"<br>
> >> No shape / skin is loaded<br>
> >> you are ruthed<br>
> >><br>
> >> I looked in the DB and couldn't find any items loaded with<br>
> SecondInventory<br>
> >><br>
> >> Can someone test that ?<br>
> >><br>
> >> thanks<br>
> >><br>
> >> Sacha<br>
> >><br>
> >> _______________________________________________<br>
> >> Opensim-users mailing list<br>
> >> <a href="mailto:Opensim-users@lists.berlios.de" target="_blank">Opensim-users@lists.berlios.de</a><br>
</div></div>> <mailto:<a href="mailto:Opensim-users@lists.berlios.de" target="_blank">Opensim-users@lists.berlios.de</a>><br>
<div>> >> <a href="https://lists.berlios.de/mailman/listinfo/opensim-users" target="_blank">https://lists.berlios.de/mailman/listinfo/opensim-users</a><br>
> >><br>
> >><br>
> _______________________________________________<br>
> Opensim-users mailing list<br>
</div>> <a href="mailto:Opensim-users@lists.berlios.de" target="_blank">Opensim-users@lists.berlios.de</a> <mailto:<a href="mailto:Opensim-users@lists.berlios.de" target="_blank">Opensim-users@lists.berlios.de</a>><br>
<div>> <a href="https://lists.berlios.de/mailman/listinfo/opensim-users" target="_blank">https://lists.berlios.de/mailman/listinfo/opensim-users</a><br>
><br>
><br>
><br>
><br>
> --<br>
> ===================================<br>
> The wind<br>
> scours the earth for prayers<br>
> The night obscures them<br>
><br>
> <a href="http://osgrid.org" target="_blank">http://osgrid.org</a><br>
> <a href="http://del.icio.us/SPQR" target="_blank">http://del.icio.us/SPQR</a><br>
> <a href="http://twitter.com/jstallings2" target="_blank">http://twitter.com/jstallings2</a><br>
> <a href="http://www.linkedin.com/pub/5/770/a49" target="_blank">http://www.linkedin.com/pub/5/770/a49</a><br>
><br>
><br>
</div>> ------------------------------------------------------------------------<br>
<div>><br>
> _______________________________________________<br>
> Opensim-users mailing list<br>
> <a href="mailto:Opensim-users@lists.berlios.de" target="_blank">Opensim-users@lists.berlios.de</a><br>
> <a href="https://lists.berlios.de/mailman/listinfo/opensim-users" target="_blank">https://lists.berlios.de/mailman/listinfo/opensim-users</a><br>
<br>
<br>
</div><font color="#888888">--<br>
justincc<br>
Justin Clark-Casey<br>
<a href="http://justincc.wordpress.com" target="_blank">http://justincc.wordpress.com</a><br>
</font><div><div></div><div>_______________________________________________<br>
Opensim-users mailing list<br>
<a href="mailto:Opensim-users@lists.berlios.de" target="_blank">Opensim-users@lists.berlios.de</a><br>
<a href="https://lists.berlios.de/mailman/listinfo/opensim-users" target="_blank">https://lists.berlios.de/mailman/listinfo/opensim-users</a><br>
</div></div></blockquote></div><br>
</div></div></blockquote></div><br>