Hackers broke into the Second Life user databases on Thursday, according to this post on the official blog of Second Life parent company Linden Labs. Intruders gained access to Second Life account names, real life names, contact information, encrypted account passwords and encrypted payment information.
So what?
Well, there's something scarier about this theft. Name, address and credit card information is stolen daily from various inept ecommerce sites. We're kind of accustomed to that level of theft. But how many of us are really comfortable with data stolen from the place where we spend our leisure time?
To put a finer point on it, what happens when archived MMOG chat logs are breached? It's going to be ugly, like AOL ugly: "I swear honey, that Furry meant nothing to me. It was totally just research for my new book. I'll sell the teledildonics equipment on eBay first thing tomorrow."
Gamers haven't been paying much attention to privacy of in-game communications. Given how intimate some of those communications have become, maybe it's time for more scrutiny of privacy protection measures taken by MMOG providers.
[Via Techcrunch]
[Image via furry.wikia.com]




















(Page 1) Reader Comments
Reply
Reply
Public disclosure of search and behavior data would be far, far more detrimental.
Reply
Reply
That is, of course, if the behavioral data were somehow linked to a person of reputable stature rather than said person's character. It would indeed be something interesting to see if Mayor X or Senator Y had a private/intimate cyber session posted across the internet.
Interesting more, though, would be if said politician's credit card information packaged neatly with security code, billing address, and a password quite likely to be used on multiple website ro other accounts fell into curious hands.
Reply
Reply
First, the idea that we've become accustomed to identity theft. I haven't. I think lack of security of personal information is probably the biggest problem with the internet. It's not a technological problem though; People just need to be educated better about using the internet safely.
Second, the idea that exposed chat logs are more detrimental than exposed credit card information. I do agree that there are avenues to help with credit card theft and there isn't the same sort of thing for private chat data.
However, if I had the choice, I'd prefer "private" chat logs exposed over credit card records exposed. There might be some embarassing stuff, but I'd get over that. Just like I'd get over someone finding porn on my computer or any other embarassing event. Maybe I'm just not having the kind of conversations Vlad is having.
Reply
Reply
It's kinda lame to say "serves the furfags right." Weird obsession or not, identity theft sucks for anyone.
Reply
I also wasn't saying anything private can be made public without any problems. We have the right to privacy and that should be respected online and off.
Reply
Reply
Not only do I play Second Life, but I have an anthropomorphic avatar. I try to stay as far away from the term "furry" as I can, though. I just figure why play a game as a human if you don't have to? It's supposed to be fantasy.
But yeah, Jebus... I haven't tried to log on in two days now. I wasn't even aware of this until now. First that whole thing with the veterans military records being ganked, and now the possibility someone I don't know has my credit card info.
God bless the human race, no?
Reply
Ironic though, that you have been accused of posting intimate avatar pics without permission!
Reply
not everyday something like that catches my eye. nice, uh, fan service =3
Reply
#12, Raven, that picture is on Wikipedia for babyfur. Marked with the tag, Second Life. Looks like it wasn't that hard to discover.
Reply
Reply
No wonder SL got hit. They seem ripe for the pickin.
;)
Reply
/skulks off to a corner
Reply
No one ever considers (good) security until they've been violated.
Reply
Reply
Reply
Reply
Om
Reply
If XBoxLive users' real identities got hacked, 12 year old kids might get beaten up for talking shit about "pwning" another player.
If MMORPG users' real identities got hacked, people could be murdered in real life for stealing a rare drop in the game.
If 4chan.org users' real identities got hacked, many anime fans would be exposed as pedophiles.
If SomethingAwful.com users' real identities got hacked, its basement-dwelling nerds would be too afraid to leave their basements and face the people they trash-talk about online.
Here's a thought: maybe people shouldn't do things online that they wouldn't do in real life. It would make XBoxLive a more mature environment, MMORPGs fairer, rid the world of "lolicon", and nerds might try to improve their own real lives instead of just bashing everyone elses.
Reply
I signed up for a free Second Life nearly a year ago, with a Paypal account. I never even got a chance to play it, my video card was too shitty..Wonder what kind of a risk I'm in.
Reply
Nah, it's not for a demo -- using your card just verifies your account now.
(In fact, you don't need a CC to sign up anymore. You can either leave your account unverified, or verify with a cell phone. of course, either way will leave you with either 250 in-game money or none at all, but better than nothing.)
Reply
Reply
I might be wrong, but I'm pretty sure archived chat logs aren't available through the SL client, you can only view chat records from your current session. And since a) the breach only covered account details and makes no mention of any other data and b) we assume that Linden Labs aren't recording private chats (right, guys?), it's unlikely anyone is going to have their private conversations broadcast over the net.
Also, I didn't quite understand why you would consider someone getting hold of login details more serious than credit card fraud, but I was surprised that you didn't mention the biggest risk, namely that people operate businesses in SL and own huge amounts of land and player-created content. If someone got the password and username of one of the big landowners they could cause havoc; deleting objects, removing land-rights, banning players...it could be extremely damaging for LL.
"Never really liked the fact that Second Life asked for your credit card details just to play a Demo. Although I'd like to check it out, I just cant bring myself to do it. I know CC details were apparently not breached this time, I'm still glad I had not caved in, because I'd allways have in the back of my head "perhaps they did"."
You don't need a credit card anymore and it's not a demo. You have full access to the world, the only thing you can't do is buy land directly from Linden Labs, instead you have to purchase it through one of the many real estate dealers. Many people play the game perfectly fine with just the basic account.
"I signed up for a free Second Life nearly a year ago, with a Paypal account. I never even got a chance to play it, my video card was too shitty..Wonder what kind of a risk I'm in."
Well considering that you don't have to give your Paypal password to LL at any point and you never even logged in, you're at no risk at all.
Reply
Reply
::sigh::
Reply
In contrast, SL's policy promises not to share personal information, and the hacker who obtained some of it obviously broke the law.
Reply