[sldev] Re: Patch to Address Debit Permission Spoofing

John Hurliman jhurliman at wsu.edu
Mon May 28 15:09:00 PDT 2007


Chance Unknown wrote:
> Ultimately, if you dont authorize debits from your account, its funds 
> will not be depleated through this avenue. While you are in the 
> process of making a UI adjustments to color code script permissions, 
> maybe you can also make the checkmarks on the About Land... turn red 
> for the place where the lindens recieve $30/wk for land listings. 
> Also, there are the group creation fees,can you color that dialog box 
> red too? Thank you.
>  

It depends what the red warning dialog is supposed to symbolize. If the 
color red was used in the UI to notify the user that a monetary 
transaction is involved that would make sense. However if the red dialog 
meant "Authorizing this script to take money from you gives it the 
ability to transfer an unlimited amount of your L$ balance to other 
avatars, and this permission can only be revoked by deleting the object 
or taking it back in to your inventory. The only way to audit this 
behavior is by reviewing the source code of the script requesting 
permissions." then that's not the same thing.

John Hurliman


More information about the SLDev mailing list