Hi,
Yes osGetAgentIP does not check threat level anymore
It is above that, permanently restricted to users with
administrator level ( ie gods)
The change was taking out of threat level check the functions
that don’t make much sense having it
That means functions that have no security or load issues and
so available if ossl api is,
but also functions with other fixed checks, like this example.
threat level code and tables are growing as ossl grows, with a
negative impact on performance that we can avoid.
Future change may be group similar functions on same
“allow_name”
Hope this makes it more clear.
Ubit
From: [email protected]
[mailto:[email protected]] On Behalf Of dz
Sent: Friday, June 30, 2017 16:38
To: [email protected]
Subject: Re: [Opensim-users] latest osslEnable.ini - (git master: 6bac44e)
Well,
This conversation seems to beg for input....
HUH????
" ... This does not relate directly to security in all cases:
osGetAgentIP does not check thread level anymore..."
osGetAgentIP has the MOST potential to be a security issue...
I mean REALLY??? you rate the possibility of someone animating your
avatar without your permission as a higher threat than allowing someone with a
script to do a geo-locate on a person USING an avatar??? That seems just
wrong to me....
I have a long history of arguing with devs about the threat level they seem
to arbitrarily decide to apply. If you are going to do something WRONG, at
least do it consistently, so us mortals can use functions that are truly
useful ( without having to beg each and every grid admin and convince them
that Animating the NPC they allowed us to generate isn't going to allow us
to track him/her down in RL ).
dz
P.S. I've chopped the rest of the conversation because I'm pretty sure no
one REALLY want to re-read the 5 iterations of Back and Forth..
*********************************************
_______________________________________________
Opensim-users mailing list
[email protected]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users
