Lette i assume FS team is aware of this already, but if not: New form of griefing?

that's from further down in that thread, so looks like they're on it

thaumata: ahhh, thank you! that either hadn't happened yet or i had missed it- i'd been curious as to HOW it could even happen in the first place

Yeah, that's wild!

I've been researching why musicians were leaving SL. This just provided a huge lead for me. Thank you.

In the past I interviewed musicians who actually stopped performing in SL because they said people were coming to their events and griefing, so this now shows some of what they might have been dealing with!

Yep, Whirly is really good at keeping current on stuff like this. More than anyone else on the team, she has her fingers in nearly every pie (support, QA, development, and communicating with LL). I wouldn't be able to add to her answer, but I bet if we needed an explanation for how MOAP does this, she'd be able to give one.

Lette : i figured it was likely you were all on top of it! but just in case it managed to slip past and all that. i find it super weird that MOAP can even DO that, passively, though. well, not really? like, i think i know how it's doing it, but if so i'm not sure why it's taken griefers this long to figure it out and they weren't doing it on day 2

of MOAP then (or if not then, day 2 of all that feeding through webpages, as i'm not sure it all couldbefore they changed search etc. to use the web)

like...when did they route group creation through the web interface? i guess it's useful to be able to do some management stuff out of SL, but i wouldn't have expected them to even run that through there!

Based on Whirly's note at the end of the post Thau pictured, it sounds like the exploit the griefers are using is what opens the group floater. I know that doesn't explain how, but it sounds like causing MOAP to open search and places is, I guess, "normal," and the group thing is the problem getting a fix.

Lette : i'm pretty sure i know how most of it works and i doubt? anyone here would take advantage of the info! it's a combo of auto redirect and all the html "hooks" (like slurl opening in your viewer from a website, but they've added more and more with web profiles) plus the way html form input works

it just...seems odd that it never occurred to people before recently that you could do all that, because most of it has been implemented for years now. admittedly, it never occurred to ME that you could do that before i thought about it, but i'm also not trying to do that kind of thing

Cake : interesting. i guess they make good targets because they advertise and get decent audience sizes? kind of shitty that people are doing it to them, but then, shitty people gonna be shitty.

Allegory : Yeah, I find it concerning. SL has a great indie music scene still, just be careful when you go to these events. I'll try to ask around to see if I can get some safety tips or ways to prevent this or something.

Sadly, like most other griefing this stuff primarily scares or frustrates new folks who are nowhere near the forums.

And realistically also folks like me who have been gone so long we would have no idea what was going on and just log off.

Cake : if everyone turns off auto play media (that means you have to tell the audience to turn it off and get them to do it though), this particular exploit does not work

i don't think there's a way to shut off media on a prim on the land side- if there were such an option, it would be an easy fix for this one for venues. (and maybe there should be such an option)

They hooked too much webshit into the viewer.

Clara 🦄 : eeeyup

as long as they cannot rez, turning off "Play media attached to other avatars" might be enough. and while there are some fun things that could do, i ALWAYS leave that off because people cannot be trusted.

Allegory : So that's the trick! Thank you.

Cake : i think that SHOULD be enough to block it! fingers crossed it's something that can get around quickly and easily at venues, at least, to prevent it from being an issue in the future.