May 30, 2009

Potential Privacy issue with XStreet SL dropboxes

... and for that matter with any other dropboxes, be it Hippo, Apez, Deliverator, Subscribe-o-Matic, DSN or similar dropboxes. Whenever an object sends inventory to an avatar who is offline, the system sends a message along those lines:
The object 'Xstreet SL Magic Box v3.0.10' in Second Life has offered you inventory.
Log in to accept or decline this inventory.
= Xstreet SL Magic Box v3.0.10 is owned by Xxxxx Yyyyyy
= http://slurl.com/secondlife/MyFancySim/129/70/2004
As you can see, the location of the dropbox itself gets shown in that message. In this (faked) example the dropbox is on the sim "MyFancySim" at the coordinates 129,70,2004. A dropbox in an altitude of 2004 meters will most likely be on a skyplatform used as personal home or workshop. I know some (designer) friends carefully guard the locations of their homes and workshops in the sky, mostly because of the wish for privacy, but also as security measure against prying eyes regarding the things they work on. As normal as it may seem to place your dropboxes at your personal place, as much devastating is it for your privacy.

If you turn this around, there is a good argument to be made to place your dropbox(es) into your shop. With the same information someone could find out about your personal skyplatform, they can also find out about the location of your shop. Also most dropboxes give out a weblink when touched by someone else than the owner.

Finally, it should be noted that some dropboxes can be placed multiple times. You can take a full Xstreet dropbox to inventory and place a second copy on a different sim. That way, one acts as backup for the other, and deliveries can still be made when one box should be inaccessible.

3 comments:

Trinity Dechou said...

A very good point indeed. I have had in the past people arrive at these links and as you rightfully point out, not always welcomed.
Many people have security devices in these locations and as potential 'vistors' it can be quite offputting to be threatened with ejecting.

London Spengler said...

Yes, you are right, I need to change the location of my boxes.

I never cared too much about the "secrecy" of my skybox, since it is very easy for anybody to check the mini-map and notice little green dots flying up over a shop, but it would be annoying for somebody to follow the link and appear just inside home :-p

Ari Blackthorne™ said...

Wait a minute... this has been this way for more than a year. This feature was added so you can hunt and track griefers who object spam you and so you can return/delete/mute said objects.

The fact of the matter is 1) my visiting where your drop box is located isn't a breach of privacy. And what harm is it? I can't do anything with it. Even if I have the copybot, all I can copy is the drop box prim - not anything that's inside.

As for "private location' and anything on the grid? Nope. Too easy to find out.

The point I am trying to make is that if you think you have a micro-ounce of privacy in SL, you are misinformed and sorely mistaken.

Granted, you can try to keep privacy, but I think anyone with an ounce of common sense knows: there is no such thing in SL - right down to your real life identity (tracakble by your I.P. Address.)