• All submissions to this site are governed by Second Life Project Contribution Agreement. By submitting patches and other information using this site, you acknowledge that you have read, understood, and agreed to those terms.
Issue Details (XML | Word | Printable)

Key: SVC-4243
Type: Bug Bug
Status: Resolved Resolved
Resolution: Duplicate
Priority: Critical Critical
Assignee: Unassigned
Reporter: Fred Rookstown
Votes: 1
Watchers: 3
Operations

If you were logged in you would be able to see more operations.
2. Second Life Service - SVC

LLNotifyBox-creating functions need serious throttling.

Created: 11/May/09 08:25 PM   Updated: 10/Jun/09 08:28 AM
Return to search
Component/s: Scripts
Affects Version/s: 1.26 Server
Fix Version/s: None

File Attachments: 1. Zip Archive LLDialogSpammer.zip (0.8 kB)

Environment:
Second Life 1.22.11 (0) May 5 2009 13:59:37 (Cool SL Viewer)
Release Notes

CPU: Intel(R) Core(TM)2 Duo CPU E6850 @ 3.00GHz
Memory: 3528 MB
OS Version: Linux 2.6.28-12-generic #43-Ubuntu SMP Fri May 1 19:27:06 UTC 2009 i686
Graphics Card Vendor: NVIDIA Corporation
Graphics Card: GeForce 8800 GTS/PCI/SSE2
OpenGL Version: 3.0.0 NVIDIA 180.44

libcurl Version: libcurl/7.16.4 OpenSSL/0.9.7c zlib/1.2.3.3 c-ares/1.4.0
J2C Decoder Version: KDU
Audio Driver Version: FMOD version 3.750000
LLMozLib Version: [LLMediaImplLLMozLib] - 2.01.23837 (Mozilla GRE version 1.8.1.13_0000000000)
Issue Links:
Duplicate
 
Relates


 Description  « Hide
llDialog, llLoadURL, and similar functions that create a blue dialog are being used heavily by griefers to crash or log out users in sandboxes, welcome areas, etc. A fix is required.

To reproduce this type of spam:

  • Place the Master script into a prim
  • Paste the slave script in it 100 or so times (make it in an inventory folder, CTRL-C, and hold down CTRL-V for a while, then drag them all into your prim).
  • Copy the box six times and say "CRASH ME" in local chat.

Your window should fill with llDialog spam and some of you may crash. I have designed the scripts to die when you log out or leave the sim. You can also delete the box, of course.

My suggestion for a server-side fix (needed in conjunction to a fix in the viewer, see VWR-3561) is the following:

  • Throttle llDialog/llMap/llRequestPermissions for the RECEIVING USER (not the script or object) to, say, 1 per second UNLESS IF THE ORIGINATING OBJECT IS OWNED BY THE RECEIVER. THis will prevent some guy from running around on several accounts planting llDialog spammers all over the place to spam someone, yet will allow some weapons HUDs to continue operating.
  • Excessive llDialog/llMap/llRequestPermissions calls from the SENDING OBJECT should set all scripts in that object to non-running. Again, however, an object owned by the recipient of the dialogs should allow all dialogs to the owner to pass.
  • llDialogs should only be sent to a user if the object is within the same sim.
  • llDialog, etc network messages should be given a lower priority than connection-critical SL traffic, to prevent logouts from excessive llDialog spam.


 All   Comments   Change History      Sort Order: Ascending order - Click to sort in descending order
Soft Linden added a comment - 10/Jun/09 08:28 AM
Resolving SVC-3514 by adding per-agent throttles and dropping script delays would address this issue - marking as dupe