[sldev] Re: Viewer Auth Feedback

dirk husemann hud at zurich.ibm.com
Wed Oct 3 06:46:07 PDT 2007


Dale Glass wrote:
> On Wed, Oct 03, 2007 at 07:16:23AM +0200, dirk husemann wrote:
>   
>>>> Personally, I'd like to get out-of-band confirmation for the exercise of
>>>> capabilities. An email with a link, for example, before rezzing an
>>>> object, or doing anything that debits my account, or much else other
>>>> than walking and talking. So I can configure which ones are always on,
>>>> never on, or that the system has to ask me out-of-band to grant for the
>>>> rest of the session.
>>>>         
>> hmm...getting an email for rezzing objects sounds to me a
>> bit...well...clunky. and it certainly breaks any immersive experience.
>> not sure we want that (well, i don't for one).
>>     
> Doesn't have to be mail. A log visible on the website could be nice for
> example.
>
>   
>>> Only if you can't use the password (the one which you gave the viewer)
>>> to reconfigure these options.  If 3rd party viewer security is the goal,
>>> the only way to enforce that, is (like everything these days) server
>>> side by not allowing the viewer to do specific things.
>>>       
>> in the end it comes down to trust: whose viewer do we trust? i'd trust a
>> viewer that's available as open source and has been widely vetted and
>> examined for security holes. i'd probably have my reservations about joe
>> random's viewer-from-the-basement that's closed source and was just
>> released yesterday...i might trust a viewer that i've written (then
>> again, knowing me, i might not).
>>     
> A bit pedantic: The source is under the GPL2, which means source MUST be
> released. LL could sue for copyright infringement anybody who refused to
> provide the source.
>   
nah...just write your viewer using libsecondlife.
> [...]
>
> But, even if I'm trusted, I'd still like to have this mechanism. Maybe
> one day I'll screw up and accidentally release a viewer that does
> something nasty. Permissions and logs would be very helpful in this
> case.
>   
true.


-- 
dr dirk husemann, pervasive computing, ibm zurich research lab
--- hud at zurich.ibm.com --- +41 44 724 8573 --- SL: dr scofield

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.secondlife.com/pipermail/sldev/attachments/20071003/53f7960a/attachment-0001.htm


More information about the SLDev mailing list