[sldev] Scripting projects priority survey

Tateru Nino tateru.nino at gmail.com
Wed Jun 25 06:05:19 PDT 2008


It does sound like an awfully reckless notion, unless the CLR 
implementation is a whole lot more robust than I think it is.

Timeless Prototype wrote:
> Uploading precompiled binaries worries me a lot, especially after Diniz
> Cruz's video demonstration of how to root the CLR - permanently
> disabling security features in the .NET Framework.
> http://video.google.com/videoplay?docid=-2492965730809426450&q=owasp
>
> Babbage Linden might have information about how this will be mitigated?
>
> Thanks.
>
> - Timeless Prototype
>
>
> Bruce Tong wrote:
>   
>> On Wed, Jun 25, 2008 at 5:39 AM, Christian Scholz / Tao Takashi (SL)
>> <tao.takashi at googlemail.com> wrote:
>>     
>>> I wonder if everybody knows what those questions are about (like
>>> scheduling or collection classes). I talked to some Lindens and think
>>> I know a little bit about the background regarding scheduling and
>>> ressource limits (at least I have an idea) but maybe this can be
>>> elaborated upon a little bit on what that means and what collection
>>> classes are (not everybody is a C# programmer).
>>>       
>> I'm not a C# programmer, but I assumed collection classes referred to
>> things like a Hashmap in Java.
>>
>> I've not put a lot of thought into this, but might there be some
>> undesirable exploits if people are able to upload their own
>> compilations? I guess I'm wondering if folks might be able to get
>> outside of what I assume is an isolated or protected runtime
>> environment and find data to which they should not have? I'm
>> completely ignorant of the runtime environment of scripts, so these
>> are probably unjustified concerns.
>>
>>     
>
> _______________________________________________
> Policies and (un)subscribe information available here:
> http://wiki.secondlife.com/wiki/SLDev
> Please read the policies before posting to keep unmoderated posting privileges
>
>   

-- 
Tateru Nino
http://www.massively.com/



More information about the SLDev mailing list