[opensource-dev] Debugging purging a single folder from trash
Henri Beauchamp
sldev at free.fr
Mon Oct 5 07:59:15 PDT 2015
On Mon, 5 Oct 2015 16:52:05 +0200, Latif Khalifa wrote:
> It's not nonsense, it's a security measure. In SL sims are trusted so
> they proxy all the communication from the viewer to the central
> services such as inventory and assets. On OSGrid anyone can attach
> their own sim. This sim could tell the inventory service "User XYZ
> just emptied the trash", which in practice means everyone with a
> modified sim code could empty your Trash and Lost & Found.
>
> This is why those operations were disabled on OSGrid, and work just
> fine on more controlled grids.
So, instead of securing the communications (simply check that the user
is actually logged into the requesting sim, or use AISv3 instead of
UDP messages), you prefer breaking a protocol (not even documenting
the change anywhere, and not warning the TPV developpers you did it)...
Non-sense (again) !
Henri.
More information about the opensource-dev
mailing list