Showing posts with label security. Show all posts
Showing posts with label security. Show all posts

Tuesday, October 25, 2011

Private Channel Pandorabots and Chat Channel Spam

Recently I received a report from a customer whose Pandorabot suddenly started spewing spam into local chat. I traced the problem down to a freebie penis that continually announces its location on channel 2. The customer's Pandorabot had been configured to listen on channel 2 rather than the local chat channel (channel 0).

This does not appear to be a common problem. I've only had one report of private channel spam and there are hundreds of Pandorabots scattered all over the grid. It may be limited to the rare case where a Pandorabot is listening on channel 2 and a resident wearing the OnDuty penis is within chat range. I've asked whether continually announcing your location on a private channel is considered griefing and have yet to receive a reply.

If your Pandorabot suddenly starts spewing spam take the following steps:
  • Turn your Pandorabot off by saying "menu" on the Pandorabot's chat channel then clicking the "OFF" dialog menu button
  • Edit the Configuration notecard and change the CHANNEL setting. I recommend using a channel number greater than 10 as private chat spam has thus far only been detected on channel 2.
  • Restart your Pandorabot by clicking the base prim. If you cannot see the base prim, click View -> Highlight Transparent or CTRL-ALT-T
  • Email missyrestless@gmail.com or IM Missy Restless to report the problem. Please provide as many details as possible including channel number and a copy of the chat spam.
I have not yet filed an abuse report against the OnDuty Penis as I'm not sure this is considered abuse (seems to me it should be). I will be making a free Pandorabot update available with private channel spam protection.

Sunday, October 23, 2011

How to Upgrade Your Pandorabot METAbolt Add-On

There have recently been a number of improvements to both METAbolt and the Pandorabot METAbolt Add-On. Support for the recently released METAbolt Group Responder has been added to the Pandorabot METAbolt Add-On. This allows your bot to detect trigger phrases in group chat and respond with customized group IM's. Additional security has been added to the METAbolt LSL API and configuration for this security feature has been added to the Pandorabot METAbolt Add-On. Also added is support for easily moving your Pandorabot METAbolt Add-On to another SL object (e.g. a drum kit or dance pole). Many improvements have also been made to the Pandorabot scripts.

If you own a Pandorabot METAbolt Add-On and want to freely upgrade to the current version, you can do so by following these steps:
  • Copy any changes you have made to configuration notecards
  • Copy/Move any items you have added to the Pandorabot METAbolt Add-On Base Prim (e.g. landmarks, notecards, textures, ...)
  • Take the Pandorabot METAbolt Add-On Base Prim back into your inventory (log your bot out, right click the Pandorabot METAbolt Add-On Base Prim and select "Take")
  • IM Missy Restless (search for "Missy Restless", click on the "Missy Restless" search result, click on "View Full Profile", click "Instant Message")
  • Drag and drop the Pandorabot METAbolt Add-On Base Prim item from your inventory onto the Instant Message window (note, the object will have the name of your bot)
You should receive the Pandorabot METAbolt Add-On update as soon as I receive notice of the transfer. When you receive the Pandorabot METAbolt Add-On box, rez it, open the box, copy the contents to your inventory, and rez the Pandorabot METAbolt Add-On Base Prim. You will need to re-do any changes you made to your previous Pandorabot METAbolt Add-On Base Prim (use the saved configuration notecards as reference). Note: I may be away from my computer - if you do not hear from me drop me a reminder.

Enjoy!

Tuesday, October 18, 2011

How to Enable the METAbolt LSL API for Outfit Changes

Quick & Easy Summary
To enable Pandorabot METAbolt Add-On dialog menu outfit changes, set your METAbolt preferences to disable LSL command security and autorun the LSL API plugin.

Background
Recently the METAbolt LSL API was moved from the METAbolt core to a plugin. In addition, preferences were added to allow METAbolt users to restrict the LSL API use to the owner and/or a scripted object. These changes, although arguably beneficial for METAbolt architecture and security, broke the Pandorabot METAbolt Add-On dialog menu commands for outfit changes.

If you are not using outfit folder changes via the Pandorabot METAbolt Add-On dialog menu interface then you do not need to make any changes.

In order to re-enable outfit changes in METAbolt 0.9.51.0 and later you will need to make the following changes to your METAbolt preferences (Application -> Preferences).

Enforcing LSL Command Security
The easiest way to enable dialog menu outfit folder changes is to disable LSL command security. This can be done in the Application -> Preferences -> General -> Security/L$ METAbolt preferences pane by unchecking the "Enforce LSL command security" checkbox. See the section "Enhanced LSL API Security" below for an alternate, more secure, and somewhat difficult way to enable outfit folder changes via the dialog menu.

Loading the METAbolt LSL API Plugin
In addition to disabling LSL command security (or using enhanced LSL API security) you will also need to load the LSL API Plugin. To load the plugin automatically on each startup of METAbolt, go to the Application -> Preferences -> Plugins METAbolt preferences pane. In the "Available plugins" window, click on "MB_LSLAPI" then click the ">" button to add it to "Selected plugins". Click "Apply" and "OK". Alternately, the plugin can be loaded manually by clicking "Plugins -> MB_LSLAPI".

Individual Avatar Preferences
Each avatar you login with METAbolt has their own individual preference settings. The preference settings described above (disable LSL command security and autorun the LSL API plugin) must be done for each avatar. To do so, login as an avatar and make these changes to your preferences. Repeat for each METAbolt avatar you use for which you would like to enable outfit folder changes via the dialog menu.

Enhanced LSL API Security
Additional LSL API security is available with the "Enforce LSL command security" checkbox in the METAbolt preferences via the Application -> Preferences -> General -> Security/L$ checkbox. To enable outfit folder changes via the dialog menu _and_ enforce LSL command security you need to set the Master Avatar and Object UUID's. To find the Pandorabot METAbolt Add-On base prim UUID you will need some elementary LSL script skills. Create an LSL script with the default state entry as follows: 

state_entry() { 
        llOwnerSay("Owner UUID is " + (string)llGetOwner());
        llOwnerSay("Object UUID is " + (string)llGetKey()); 
}


Drop the script into the base prim Contents. Copy the base prim owner's UUID to the "Avatar UUID" setting. Copy the object UUID string to the "Object UUID" setting. Delete the script from the base prim Contents. Make sure the "Enforce LSL command security" box is checked then click "Apply" and "OK". Repeat for each avatar for which you wish to enable enhanced LSL API security.

METAbolt LSL API Documentation
METAbolt maintains an excellent website with News, Announcements, Downloads, an Add-On/Plugin Directory, a Community Forum, and the METAwiki which provides extensive documentation & tips. The following METAwiki pages provide information on the LSL API: