Comments on: Hacker destroys OpenSim regions http://www.hypergridbusiness.com/2009/06/hacker-destroys-opensim-regions/ THE MAGAZINE FOR ENTERPRISE USERS OF VIRTUAL WORLDS Wed, 08 Feb 2012 19:31:00 +0000 hourly 1 http://wordpress.org/?v=3.2.1 By: How to choose an OpenSim hosting company – Hypergrid Business http://www.hypergridbusiness.com/2009/06/hacker-destroys-opensim-regions/comment-page-1/#comment-5126 How to choose an OpenSim hosting company – Hypergrid Business Wed, 06 Oct 2010 00:02:17 +0000 http://www.hypergridbusiness.com/?p=21764#comment-5126 [...] way, if something happens to the data facility — for example, if it’s hit by a hacker, as happened last summer to Web hosting companies and OpenSim hosting companies around the world — your provider will [...] [...] way, if something happens to the data facility — for example, if it’s hit by a hacker, as happened last summer to Web hosting companies and OpenSim hosting companies around the world — your provider will [...]

]]> By: Maria Korolov http://www.hypergridbusiness.com/2009/06/hacker-destroys-opensim-regions/comment-page-1/#comment-129 Maria Korolov Sun, 14 Jun 2009 23:36:49 +0000 http://www.hypergridbusiness.com/?p=21764#comment-129 Wayfinder -- The hacker also took out over 100,000 websites -- I don't think the hack deliberately targeted OpenSim, and OpenSim might be just an innocent bystander type of victim. -- Maria Wayfinder –

The hacker also took out over 100,000 websites — I don’t think the hack deliberately targeted OpenSim, and OpenSim might be just an innocent bystander type of victim.

– Maria

]]> By: Wayfinder http://www.hypergridbusiness.com/2009/06/hacker-destroys-opensim-regions/comment-page-1/#comment-128 Wayfinder Sun, 14 Jun 2009 16:27:16 +0000 http://www.hypergridbusiness.com/?p=21764#comment-128 While I'm not acquainted with the underlying structure of the hacked site, from what I understand this was a matter of someone using a Microsoft Windows-intended application on a Linux platform. Anytime someone crosses platforms like that, it is their responsibility to make sure security is tight, and to prepare for the worst. As one user noted, this is what happens when non-professional entities try to pass themselves off as pros. It's also a harsh warning to the VR community that it's time to clearn up their act. It is true that the entire OpenSim system is a security nightmare. Also as someone above put it, any build that is put on anyone's region can be copied, modified, transferred to others. The only way to insure against that is for the service itself to turn off "God-Mode". But every self-owned mini-grid is going to have full God ability. People need to be aware of that. The World Wide Web today is chaotic and anarchistic in nature. We should not expect a VR web to be any different. Effective solution: only do business with reliable, proven companies. I have personally found Reaction Grid people to be trustworthy and customer-focused. I do not have the same feelings about OpenLife, a company that is about as unprofessional an entity as I have come across. It's the old caveat: let the buyer beware. I must admit that I have zero respect for the hacker who hit this time. With all the people who are disgruntled with Second LIfe, with all the people Linden Lab (allegedly) ripped off with a "bait and switch" scheme that forced the shutdown of thousands of sims... for a hacker to hit the very folks who offers that company some competition strikes me as nothing more than someone not skilled enough to hit the big company, so he decides to pick on the small fry instead. He's not a "hacker"... he's a hack. He doesn't care who he picks on, he just picks on the easy targets, and doesn't care who gets hurt in the process. At one time the term "hacker" was respected, defining a person who could make a computer do whatever they wanted it to do. Companies hired hackers as the most brilliant minds in the industry. Now, "hacker" is associated with antisocial back-room boys who are getting thier jollies causing whatever damage they can, to whomever they can, doing so anonymously. If they had any real skill or sensibility, they'd use their talents to help those who are fighting against the big, self-serving companies by improving the product and shoring up security. Instead, they just harm others indiscriminately. Such people have no honor, no conscience, no true skill. True skill is used to build... not destroy. True courage is evidenced face to face, not cowardly hiding behind a keyboard. Them hitting an OpenSim establishment is nothing more than an example of some lunatic who doesn't care who he kills as he pulls the trigger. While I'm not acquainted with the underlying structure of the hacked site, from what I understand this was a matter of someone using a Microsoft Windows-intended application on a Linux platform. Anytime someone crosses platforms like that, it is their responsibility to make sure security is tight, and to prepare for the worst. As one user noted, this is what happens when non-professional entities try to pass themselves off as pros. It's also a harsh warning to the VR community that it's time to clearn up their act.

It is true that the entire OpenSim system is a security nightmare. Also as someone above put it, any build that is put on anyone's region can be copied, modified, transferred to others. The only way to insure against that is for the service itself to turn off "God-Mode". But every self-owned mini-grid is going to have full God ability. People need to be aware of that. The World Wide Web today is chaotic and anarchistic in nature. We should not expect a VR web to be any different.

Effective solution: only do business with reliable, proven companies. I have personally found Reaction Grid people to be trustworthy and customer-focused. I do not have the same feelings about OpenLife, a company that is about as unprofessional an entity as I have come across. It's the old caveat: let the buyer beware.

I must admit that I have zero respect for the hacker who hit this time. With all the people who are disgruntled with Second LIfe, with all the people Linden Lab (allegedly) ripped off with a "bait and switch" scheme that forced the shutdown of thousands of sims… for a hacker to hit the very folks who offers that company some competition strikes me as nothing more than someone not skilled enough to hit the big company, so he decides to pick on the small fry instead. He's not a "hacker"… he's a hack. He doesn't care who he picks on, he just picks on the easy targets, and doesn't care who gets hurt in the process.

At one time the term "hacker" was respected, defining a person who could make a computer do whatever they wanted it to do. Companies hired hackers as the most brilliant minds in the industry. Now, "hacker" is associated with antisocial back-room boys who are getting thier jollies causing whatever damage they can, to whomever they can, doing so anonymously. If they had any real skill or sensibility, they'd use their talents to help those who are fighting against the big, self-serving companies by improving the product and shoring up security. Instead, they just harm others indiscriminately. Such people have no honor, no conscience, no true skill. True skill is used to build… not destroy. True courage is evidenced face to face, not cowardly hiding behind a keyboard.

Them hitting an OpenSim establishment is nothing more than an example of some lunatic who doesn't care who he kills as he pulls the trigger.

]]> By: Quickest OpenSim instructions ever - Hypergrid Business http://www.hypergridbusiness.com/2009/06/hacker-destroys-opensim-regions/comment-page-1/#comment-113 Quickest OpenSim instructions ever - Hypergrid Business Sat, 13 Jun 2009 07:25:23 +0000 http://www.hypergridbusiness.com/?p=21764#comment-113 [...] don’t forget to save plenty of backups. As I learned this week, it is far too easy to lose all your work if you don’t keep your backups in a separate [...] [...] don’t forget to save plenty of backups. As I learned this week, it is far too easy to lose all your work if you don’t keep your backups in a separate [...]

]]> By: Over 100 OpenSim regions destroyed by hacker « Multiverse Newswire http://www.hypergridbusiness.com/2009/06/hacker-destroys-opensim-regions/comment-page-1/#comment-111 Over 100 OpenSim regions destroyed by hacker « Multiverse Newswire Fri, 12 Jun 2009 20:11:01 +0000 http://www.hypergridbusiness.com/?p=21764#comment-111 [...] via Hacker destroys OpenSim regions - Hypergrid Business. [...] [WORDPRESS HASHCASH] The comment's server IP (64.90.182.162) doesn't match the comment's URL host IP (64.90.182.164) and so is spam. [...] via Hacker destroys OpenSim regions – Hypergrid Business. [...]

[WORDPRESS HASHCASH] The comment’s server IP (64.90.182.162) doesn’t match the comment’s URL host IP (64.90.182.164) and so is spam.

]]> By: Gareth Nelson http://www.hypergridbusiness.com/2009/06/hacker-destroys-opensim-regions/comment-page-1/#comment-107 Gareth Nelson Thu, 11 Jun 2009 13:35:49 +0000 http://www.hypergridbusiness.com/?p=21764#comment-107 "Hopefully, it will cause people, regardless of the OS Platform they choose, to validate the security of their OS and all of their software infrastructure and make sure they have a backup and disaster recovery plan that is sufficient to prevent catastrophic data loss and/or downtime!" This wasn't a flaw with linux itself, it was a flaw in an application running on top of it - an application designed for remote management of the virtualisation technology. This would not have happened with a UML, VServer or Xen stack doing all administration via the traditional "ssh in, do your stuff, logout" method. “Hopefully, it will cause people, regardless of the OS Platform they choose, to validate the security of their OS and all of their software infrastructure and make sure they have a backup and disaster recovery plan that is sufficient to prevent catastrophic data loss and/or downtime!”

This wasn’t a flaw with linux itself, it was a flaw in an application running on top of it – an application designed for remote management of the virtualisation technology. This would not have happened with a UML, VServer or Xen stack doing all administration via the traditional “ssh in, do your stuff, logout” method.

]]> By: Dusan Writer’s Metaverse » OpenSim Servers Hacked, Metanomics Fail http://www.hypergridbusiness.com/2009/06/hacker-destroys-opensim-regions/comment-page-1/#comment-106 Dusan Writer’s Metaverse » OpenSim Servers Hacked, Metanomics Fail Thu, 11 Jun 2009 11:19:36 +0000 http://www.hypergridbusiness.com/?p=21764#comment-106 [...] reported a few days ago about an attack on servers that brought down hundreds of web sites and openSim [...] [...] reported a few days ago about an attack on servers that brought down hundreds of web sites and openSim [...]

]]> By: Over 100 Opensim regions wiped in weekend virtualization exploit | The gadgets http://www.hypergridbusiness.com/2009/06/hacker-destroys-opensim-regions/comment-page-1/#comment-105 Over 100 Opensim regions wiped in weekend virtualization exploit | The gadgets Thu, 11 Jun 2009 07:14:30 +0000 http://www.hypergridbusiness.com/?p=21764#comment-105 [...] Hypergrid Business is reporting that an unknown person or persons destroyed a large number of OpenSim regions over the weekend, by exploiting a weakness in LxLabs’ Linux-based HyperVM management software. OpenSim is a popular third-party reverse-engineered implementation of Linden Lab’s Second Life server software used in a variety of commercial, non-commercial and educational virtual-environment grids. [...] [WORDPRESS HASHCASH] The comment's server IP (67.222.8.23) doesn't match the comment's URL host IP (67.222.11.241) and so is spam. [...] Hypergrid Business is reporting that an unknown person or persons destroyed a large number of OpenSim regions over the weekend, by exploiting a weakness in LxLabs’ Linux-based HyperVM management software. OpenSim is a popular third-party reverse-engineered implementation of Linden Lab’s Second Life server software used in a variety of commercial, non-commercial and educational virtual-environment grids. [...]

[WORDPRESS HASHCASH] The comment’s server IP (67.222.8.23) doesn’t match the comment’s URL host IP (67.222.11.241) and so is spam.

]]> By: links for 2009-06-10 | Metaverse3d.com http://www.hypergridbusiness.com/2009/06/hacker-destroys-opensim-regions/comment-page-1/#comment-102 links for 2009-06-10 | Metaverse3d.com Thu, 11 Jun 2009 01:04:11 +0000 http://www.hypergridbusiness.com/?p=21764#comment-102 [...] Hacker destroys OpenSim regions - Hypergrid Business Partager : [...] [WORDPRESS HASHCASH] The comment's server IP (213.251.189.204) doesn't match the comment's URL host IP (213.186.33.19) and so is spam. [...] Hacker destroys OpenSim regions – Hypergrid Business Partager : [...]

[WORDPRESS HASHCASH] The comment’s server IP (213.251.189.204) doesn’t match the comment’s URL host IP (213.186.33.19) and so is spam.

]]> By: Valiant Westland http://www.hypergridbusiness.com/2009/06/hacker-destroys-opensim-regions/comment-page-1/#comment-104 Valiant Westland Wed, 10 Jun 2009 22:07:54 +0000 http://www.hypergridbusiness.com/?p=21764#comment-104 This is a perfect example of what happens when you approach IT security with a "Fan Boy" mentality. I'm sure many of the people affected thought... "I'm running Linux, so I'm "Safe"" NOT! This is a painful lesson that hopefully reverberates through both the Virtual World, Linux and Open Source communities. Hopefully, it will cause people, regardless of the OS Platform they choose, to validate the security of their OS and all of their software infrastructure and make sure they have a backup and disaster recovery plan that is sufficient to prevent catastrophic data loss and/or downtime! This is a perfect example of what happens when you approach IT security with a "Fan Boy" mentality. I'm sure many of the people affected thought… "I'm running Linux, so I'm "Safe"" NOT! This is a painful lesson that hopefully reverberates through both the Virtual World, Linux and Open Source communities. Hopefully, it will cause people, regardless of the OS Platform they choose, to validate the security of their OS and all of their software infrastructure and make sure they have a backup and disaster recovery plan that is sufficient to prevent catastrophic data loss and/or downtime!

]]> By: Kyle G http://www.hypergridbusiness.com/2009/06/hacker-destroys-opensim-regions/comment-page-1/#comment-103 Kyle G Wed, 10 Jun 2009 19:33:05 +0000 http://www.hypergridbusiness.com/?p=21764#comment-103 Any operating system or application has security holes that can be exploited especially OpenSim in its alpha stage. To combat this ReactionGrid has developed a "save to oar" prim created by Chris Hart our CTO which our "Gridizens" can use. We also do daily automated backups which are taken offsite. We appreciate the positive comments and also appreciate the very hard work that OSGrid does in moving OpenSim forward and their generous way of providing no cost connections to their grid. They are an inspiration for ReactionGrid & a source of help for us when we get stuck. There would be much less progress and visibility without the hard work of OSGrid on OpenSim. All of us hosting OpenSim should try and work together to make OpenSim more secure but as Maria stated the key to this for now and the future is good offsite backups on a regular basis. Thank you Cross and Maria for your feedback and positive comments. By years end we will see a much more stable and secure platform due to the efforts of OSGrid, ReactionGrid and many others including the end users who regularly use our worlds. See you all in 3D! Kyle G-RG CEO & Gridizen . Any operating system or application has security holes that can be exploited especially OpenSim in its alpha stage. To combat this ReactionGrid has developed a "save to oar" prim created by Chris Hart our CTO which our "Gridizens" can use.

We also do daily automated backups which are taken offsite. We appreciate the positive comments and also appreciate the very hard work that OSGrid does in moving OpenSim forward and their generous way of providing no cost connections to their grid. They are an inspiration for ReactionGrid & a source of help for us when we get stuck.

There would be much less progress and visibility without the hard work of OSGrid on OpenSim. All of us hosting OpenSim should try and work together to make OpenSim more secure but as Maria stated the key to this for now and the future is good offsite backups on a regular basis.

Thank you Cross and Maria for your feedback and positive comments. By years end we will see a much more stable and secure platform due to the efforts of OSGrid, ReactionGrid and many others including the end users who regularly use our worlds.

See you all in 3D!

Kyle G-RG CEO & Gridizen

.

]]> By: cross examination http://www.hypergridbusiness.com/2009/06/hacker-destroys-opensim-regions/comment-page-1/#comment-101 cross examination Wed, 10 Jun 2009 16:08:25 +0000 http://www.hypergridbusiness.com/?p=21764#comment-101 Ah, sorry to hear about the builds. :( Honestly, anyone who uses OSGrid would have to decide that security is non existent. I can host a region from my house and if you rezzed your build on my land I can snag a copy with godmode as if I am a Linden on SL. Closed garden approaches may not be popular with the open source kids but to protect your content (a little better) and to keep security one must look to these providers. Another question one should ask is for real life name and business address of these providers. SL avatar Joe Blow with their 4-5 friends is just not a wise bet. Neither is OSGrid where no security exists. I hand it to places like Reaction and open life with real names behind the people who expect you to give them money. Ah, sorry to hear about the builds. :( Honestly, anyone who uses OSGrid would have to decide that security is non existent. I can host a region from my house and if you rezzed your build on my land I can snag a copy with godmode as if I am a Linden on SL. Closed garden approaches may not be popular with the open source kids but to protect your content (a little better) and to keep security one must look to these providers. Another question one should ask is for real life name and business address of these providers. SL avatar Joe Blow with their 4-5 friends is just not a wise bet. Neither is OSGrid where no security exists. I hand it to places like Reaction and open life with real names behind the people who expect you to give them money.

]]> By: Ever Ready http://www.hypergridbusiness.com/2009/06/hacker-destroys-opensim-regions/comment-page-1/#comment-100 Ever Ready Wed, 10 Jun 2009 15:59:20 +0000 http://www.hypergridbusiness.com/?p=21764#comment-100 Seems the hack was the last straw of many ... LxLabs boss found hanged after vuln wipes websites <a href="http://www.theregister.co.uk/2009/06/09/lxlabs_funder_death/" rel="nofollow">http://www.theregister.co.uk/2009/06/09/lxlabs_fu...</a> The article was about both. Reaction Grid just wanted to eloborate in extensive detail why they weren't infested by this bug. Doesn't mean the situation can't be reversed ... Seems the hack was the last straw of many …

LxLabs boss found hanged after vuln wipes websites
http://www.theregister.co.uk/2009/06/09/lxlabs_fu…

The article was about both. Reaction Grid just wanted to eloborate in extensive detail why they weren't infested by this bug. Doesn't mean the situation can't be reversed …

]]> By: Maria Korolov http://www.hypergridbusiness.com/2009/06/hacker-destroys-opensim-regions/comment-page-1/#comment-99 Maria Korolov Wed, 10 Jun 2009 15:55:07 +0000 http://www.hypergridbusiness.com/?p=21764#comment-99 For more about the suicide, read here: Computerworld: <a href="http://blogs.computerworld.com/death_of_software_exec_adds_pathos_to_attack_on_web_hosting_firm" rel="nofollow">http://blogs.computerworld.com/death_of_software_...</a> IT Wire: <a href="http://www.itwire.com/content/view/25559/53/" rel="nofollow">http://www.itwire.com/content/view/25559/53/</a> Is this an ad for ReactionGrid? No, but it is an ad for taking a business-focused approach to OpenSim hosting, with off-site backups made on a regular schedule. As one of the sponsors of the Business Center, its loss has cast a serious damper on our business outreach efforts. Quite a few people worked on that build, and we're sorry to see it go. Will we rebuild? I don't know yet. And the Trombly Ltd. facility, where our offices are, was a project worked on by a large number of people, Jeffrey Scheets in particular, who put in quite a bit of work on the bookstore project. I recommend that all business owners ask their service providers to supply them with the OAR files from their regions on a regular basis. This is a step that we didn't take, and now seriously regret. -- Maria For more about the suicide, read here:

Computerworld: http://blogs.computerworld.com/death_of_software_…

IT Wire: http://www.itwire.com/content/view/25559/53/

Is this an ad for ReactionGrid? No, but it is an ad for taking a business-focused approach to OpenSim hosting, with off-site backups made on a regular schedule. As one of the sponsors of the Business Center, its loss has cast a serious damper on our business outreach efforts. Quite a few people worked on that build, and we're sorry to see it go. Will we rebuild? I don't know yet.

And the Trombly Ltd. facility, where our offices are, was a project worked on by a large number of people, Jeffrey Scheets in particular, who put in quite a bit of work on the bookstore project.

I recommend that all business owners ask their service providers to supply them with the OAR files from their regions on a regular basis. This is a step that we didn't take, and now seriously regret.

– Maria

]]> By: cross examination http://www.hypergridbusiness.com/2009/06/hacker-destroys-opensim-regions/comment-page-1/#comment-97 cross examination Wed, 10 Jun 2009 15:35:51 +0000 http://www.hypergridbusiness.com/?p=21764#comment-97 I am confused. Is this an article about a security breach or an advert for Reaction Grid? I am confused. Is this an article about a security breach or an advert for Reaction Grid?

]]> By: Bettina Tizzy http://www.hypergridbusiness.com/2009/06/hacker-destroys-opensim-regions/comment-page-1/#comment-96 Bettina Tizzy Wed, 10 Jun 2009 08:58:10 +0000 http://www.hypergridbusiness.com/?p=21764#comment-96 Devastating. Devastating.

]]> By: Len W. Brown http://www.hypergridbusiness.com/2009/06/hacker-destroys-opensim-regions/comment-page-1/#comment-95 Len W. Brown Tue, 09 Jun 2009 22:18:39 +0000 http://www.hypergridbusiness.com/?p=21764#comment-95 "Losses were limited to OpenSim regions hosted on Linux shared virtual servers running the HyperVM management software from LxLabs, whose president committed suicide in Bangalore on Monday." Why did he commit suicide? You referenced his death yet mention nothing of the cause. I'm curious as all hell now. Thanks! "Losses were limited to OpenSim regions hosted on Linux shared virtual servers running the HyperVM management software from LxLabs, whose president committed suicide in Bangalore on Monday."

Why did he commit suicide? You referenced his death yet mention nothing of the cause. I'm curious as all hell now.

Thanks!

]]>