Catch up on stories from the past week (and beyond) at the Slashdot story archive

 


Forgot your password?
Close
typodupeerror
×

Second Life Hit By Massive In-Game Worm 249

Posted by kdawson from the don't-touch-that-ring dept.
An anonymous reader writes, "At 2:46 CST today, the game Second Life was hit by a massive attack by a rogue programmer. Spinning gold rings began to appear in the air and on the ground, and as users interacted with them they began to chase and replicate. Apparently, most people are willing to touch an object they've never seen before and this invoked a worm script that was designed to multiply and spread across the 2,700+ servers run by Linden Labs in California, the game's owner. Many of the six hundred thousand active users experienced serious lag and lost connectivity to the servers, making it one of the largest known denial-of-service attacks in an online game. Linden Labs had to invoke martial law and lock out all logins by users except their staff as they began the task of cleaning the servers of what they began to term 'the grey goo.'" Comments in the SL blog entry indicate that Linden Labs had already deployed a "grey goo fence" before this worm struck, but someone found a hole in it.
This discussion has been archived. No new comments can be posted.

Second Life Hit By Massive In-Game Worm More

Second Life Hit By Massive In-Game Worm

Comments Filter:

  • Neat! (Score:5, Funny)

    by the_humeister ( 922869 ) on Sunday November 19, 2006 @11:57PM (#16910468)
    Now what they need is some sort of illness that affects characters temporarily, just like real life! Imagine, your character gets a cold and slows down and sneezes every once in a while. Or hey, you go kiss another character (if that's possible) and your character gets infected with herpes! Wouldn't that be fun? Oh wait - that was me last weekend. Damn.
    • This sounds like horseshit. It's like something you would see in a factually absurd hollywood movie about a programmer uploading a virus into the power grid. How does this work in these games that someone is ever allowed to inject a code that can run on someone elses session? Why would they allow that. Spining rings appearing in my session from some one elses code and my computer runs the code if I touch them. Praise Tron. I assume there is some explanation for this but since I'm not a gamer I am wit

      • Re:Someone please explain (Score:5, Informative)

        by GuruBuckaroo ( 833982 ) on Monday November 20, 2006 @12:09AM (#16910574) Homepage
        Calling it a 'worm' is kind of a stretch. It does not affect your local computer, it affects the view of the world in your local client. It doesn't run code on your computer, it just adds extra "in-game" items that automatically duplicate themselves and clog the Tubes.

        • Re:Someone please explain (Score:5, Informative)

          by Anonymous Coward on Monday November 20, 2006 @02:08AM (#16911326)
          Huh? By definition a worm is a self replicating program or algorithm that causes harm, even if only by using bandwidth, network, or computer resources.

          That is exactly what this worm did.
        • Well, it's a worm that spreads across the Linden Labs servers, ie a network of computers. So it is a worm, it just doesn't effect the end users machines, or in fact the end users at all beyond lagging them out.

      • Re:Someone please explain (Score:5, Interesting)

        by TekPolitik ( 147802 ) on Monday November 20, 2006 @12:45AM (#16910850) Journal

        How does this work in these games that someone is ever allowed to inject a code that can run on someone elses session?

        Second Life users are able to create objects using a fairly complete scripting language. The scripts run on the servers, and an object can create more objects when somebody interacts with it. It "runs" in other peoples' sessions not because it's running on their system but because they're all viewing the same MMORPG environment.

        And to preempt your inevitable comment, yes, it is very lame. I can't believe people are paying ongoing fees (in US dollars) to hold land in this thing.

      • Re:Someone please explain (Score:5, Informative)

        by DarkAxi0m ( 928088 ) <DarkAxi0m@GAUSSgmail.com minus math_god> on Monday November 20, 2006 @01:05AM (#16910980) Homepage
        every object you create in SL can have scripts http://en.wikipedia.org/wiki/Linden_Scripting_Lang uage [wikipedia.org] added to them, that fire on different events, ie touch, never ending loops or the right click menu etc.
        some of the commands let you create/spawn (i cant think of the word they use) other objects, like rain, or stars that follow you as you fly around. These objects in turn can have there own scripts too.
        i don't know my self how they normally stop never ending loops of created objects other than them asking people nicely not to do it.
        Some people have asked to able to disable the scripts but this, i think would have a to greater effects as every thing, doors, cars, lifts, dance club lights etc use the scripts.

        i don't mind it, as long a people remember that its really just a glorified chat program with scripts, ie irc with a gui /fish

        • Re:Someone please explain (Score:5, Funny)

          by Kadin2048 ( 468275 ) <slashdot@kadin.xoxy@net> on Monday November 20, 2006 @03:05AM (#16911616) Homepage Journal
          i don't mind it, as long a people remember that its really just a glorified chat program with scripts, ie irc with a gui /fish

          In that same vein, I would mind this WWW thing a lot less, if people remember that it's really just a glorified Gopher program with scripts...

        • Re: (Score:2)

          by kabocox ( 199019 )
          i don't know my self how they normally stop never ending loops of created objects other than them asking people nicely not to do it.

          Don't you remember CS1? I recall how many people in their couldn't write a conditional loop to save their life. I want to know if the script writer was actually looking to do this, or just wanted a few to pop out and didn't know how to properly stop it. Asking people not to do it isn't a solution as alot of people won't know what causes it to begin with. You know this is the

        • Re: (Score:3, Insightful)

          by Baavgai ( 598847 )
          Yep, that's about it.

          The scripting implemented in SL via LUA is, at it's heart, event oriented. When an object is created, there is an intentional lag. Functionally, an object cannot "easily" hurt the system with an infinite loop. There is a stack for each object process that's rather small and when that blows, you're done.

          Objects can instantiate new objects ad infinitum, if they try hard enough. The object itself isn't doing anything bad, just existing. But each object is overhead so, eventually, boom

    • Re: (Score:2)

      by acidrain ( 35064 )

      I think this was characterized as break out of nano-technology by the admins:

      http://en.wikipedia.org/wiki/Grey_goo [wikipedia.org]

      Which is a self-replicating sludge of nano-tech which coats the entire world. And that is even cooler/worse than your case of herpes "last week."

    • Re: (Score:3, Funny)

      by Class Act Dynamo ( 802223 )
      I think a good case of explosive diarrhea spreading through the virtual world would be quite amusing.

    • Re: (Score:3, Funny)

      by patio11 ( 857072 )
      >>
      Or hey, you go kiss another character
      >>

      Kissing another character is not the most likely vector for an infection in Second Life. We'll leave it at that.

    • Genitals are objects in Second Life (Score:2, Funny)

      by Anonymous Coward
      you go kiss another character (if that's possible) and your character gets infected with herpes

      Genitals are manufactured objects in Second Life, but your normal face's lips are not, so genitals will almost always carry scripts of their own.

      This means that kissing another character is unlikely to be a vector for viral infection, but there's a related activity that could easily do this.

      Incidentally, waxing your carrot can of course trigger any scripted action in the object, so climax can be rather more visual
    • I wonder if all the companies that now have a "presence" in Second Life are thinking about suing? What if a big press conference was scheduled for today to occur in the online game?

  • Ha (Score:5, Funny)

    by 8daze ( 1029526 ) on Sunday November 19, 2006 @11:58PM (#16910484) Homepage
    Proof that all it takes to kill the Internet is something shiny.

  • Not just misleading, but factually inaccurate too! (Score:5, Informative)

    by GuruBuckaroo ( 833982 ) on Sunday November 19, 2006 @11:59PM (#16910494) Homepage

    First off, there were only about 14,000 people on the system at the time, not 600,000 as indicated in the summary. Second, while they did lock out new logins, it should be pointed out that any user who was currently online was not kicked off - and the period of "martial law" lasted about 20 minutes.

    Of course, if there were 600,000 users on at the same time, the "game" would be unplayable - it's tough enough when it gets over about 10,000 right now.

    • It's not just the content, it's also the presentation:

      "...Linden Labs in California, the game's owner."

      Do Second Life users also grab at modifiers that are dangled [wikipedia.org] in front of them?

      - RG>

    • Re:Not just misleading, but factually inaccurate t (Score:4, Insightful)

      by arth1 ( 260657 ) on Monday November 20, 2006 @02:54AM (#16911564) Homepage Journal
      Of course, if there were 600,000 users on at the same time, the "game" would be unplayable - it's tough enough when it gets over about 10,000 right now.

      With 2700+ servers they have a hard time handling more than 10k users? Less than 4 users per server is tough enough? Um, I think there's Opportunities here.

      --
      *Art

      • Re:Not just misleading, but factually inaccurate t (Score:5, Interesting)

        by vtechpilot ( 468543 ) on Monday November 20, 2006 @08:38AM (#16913428)

        With 2700+ servers they have a hard time handling more than 10k users? Less than 4 users per server is tough enough?


        The problem is that the world is Zone Based, meaning each server is responsible for a equal size geographic portion of the world. The result is that processing power is spread evenly over the whole world. The problem is that people like to congregate causing some geographic areas to have more players, and other servers to have none. Where you have more players, you have more work for the server causing everything on that server to slow down. So the result is that the places players most want to be are also the places with the greatest lag. The unfortunate result is that many players have a negative experience right away.

        Really, the whole server architecture needs to be reworked to behave more like a proper cluster, but that is too large of a change to ever consider implementing without starting over from scratch.

        • Re: (Score:3, Interesting)

          by maxume ( 22995 )
          It would at least seem possible to make the zone size a server is responsible for variable, and then eventually, dynamic. That would look just like it scaled.

        • Re: (Score:3, Interesting)

          by jp10558 ( 748604 )
          Ummm. . . VMWare ESX server clusters under the virtual Zone based servers? Maybe not even have separate clusters, but make all 2700 servers Virtual, run them in ESX cluster that is 2700+ servers, and let ESX handle the proper clustering? Would that work?

    • PR Stunt? (Score:3, Insightful)

      by replicant108 ( 690832 )
      The Second Life marketing department have been very active recently.

      This story smells funny.

      • Re: (Score:3, Informative)

        by joshv ( 13017 )
        Really? Are you suggesting they made it up. I was there, it happened.

  • Bad soap opera... (Score:5, Funny)

    by __aaclcg7560 ( 824291 ) on Monday November 20, 2006 @12:02AM (#16910512)
    Second Life as the worm turns.

  • And it was just getting good (Score:5, Interesting)

    by jibjibjib ( 889679 ) on Monday November 20, 2006 @12:03AM (#16910516) Journal
    A few weeks ago I was hearing things about SL like that corporations were holding press conferences there, businesses were running there and making good profits, and its economy was worth millions of dollars. I thought SL was just beginning to become important, and show the world that a virtual economy was a viable idea.

    Now we have CopyBot and grey goo and it seems like SL is just another dodgy online game after all.

    • Re:And it was just getting good (Score:4, Interesting)

      by DrMrLordX ( 559371 ) on Monday November 20, 2006 @12:27AM (#16910708)
      It's also a haven for sleaze [somethingawful.com]. Say what you want about people's right to free expression, but there is such a thing as going too far [somethingawful.com]. It's no wonder that Second Life has attracted so much ire. It was a "dodgy online game" long before Copybot and grey goo hit the scene.

    • Re:And it was just getting good (Score:5, Insightful)

      by Jeremi ( 14640 ) on Monday November 20, 2006 @12:59AM (#16910936) Homepage
      Now we have CopyBot and grey goo and it seems like SL is just another dodgy online game after all


      Wow, given the same evidence, I drew exactly the opposite conclusion. A simple "dodgy online game" wouldn't give its players enough control over their world to allow this sort of shennanigans to happen. Things like viruses can only occur when people are given access to a Turing-complete programming language and allowed to do what they like with it... which is what SL does, and why it's not "just a game", but rather a platform. Granted, it may be an infant platform, still buggy and insecure, and not necessarily useful for very much yet, but then you could say the same thing about the Internet itself a few years ago.

      • Re: (Score:3, Interesting)

        by Cederic ( 9623 )

        A simple "dodgy online game" wouldn't give its players enough control over their world to allow this sort of shennanigans to happen.

        Have you even heard of MUDs?

    • Re: (Score:3, Insightful)

      by From A Far Away Land ( 930780 )
      Excuse me, but how could an "online economy" ever be viable? It doesn't produce anything, and consumes energy.

      • Re: (Score:2, Insightful)

        by Anonymous Coward
        It's a real-world entertainment service. People get entertainment value out of it, and are willing to spend real-world bucks to get it.

      • Re:And it was just getting good (Score:4, Interesting)

        by djupedal ( 584558 ) on Monday November 20, 2006 @01:48AM (#16911234)
        Excuse me, but how could an "online economy" ever be viable? It doesn't produce anything, and [clip]

        You're new, I'm guessing...

        It produces an environment whereby the ever sought-after eyeballs are gathered, occasionally focused and always tracked. Doesn't matter if it is a polar bear in a snow storm, if you can prove that the multitudes are looking your way, you can cash in.

      • Re: (Score:2)

        by Rix ( 54095 )
        Like lawyers?
        • you beat me to it :-) grandparent poster is obviously from some agrarian economy, haven't got as far as paper money yet.. mind you one day somebody will manage to explain the financial "futures" market to me as well!

    • Re:And it was just getting good (Score:4, Funny)

      by Angostura ( 703910 ) on Monday November 20, 2006 @06:02AM (#16912342)
      Next week: "How viruses and trojans prove that e-mail will never be used as a business tool".

  • What? (Score:5, Interesting)

    by JimXugle ( 921609 ) on Monday November 20, 2006 @12:05AM (#16910538)
    What? No Screenshot from anybody?

  • Second Life slowed down? (Score:5, Funny)

    by Ididerus ( 898803 ) on Monday November 20, 2006 @12:12AM (#16910594) Homepage
    Wow, so now they're blaming it on a "worm"... ok. SL is like watching an MMO flipbook, the packet-loss is phenomenal while they continue to supposedly attract corporations and live-weather map projects, host in-game advertising and I'm sure making money off people somehow with Linden cash transfers. Buy some freaking servers, or get rid of the 2,700 solar-powered calculators currently running the thing.

  • Getting close to "Snow Crash" here (Score:5, Interesting)

    by Animats ( 122034 ) on Monday November 20, 2006 @12:12AM (#16910596) Homepage

    This reads like something from Neal Stephenson's "Snow Crash".

    I never thought we'd get real systems vulnerable to attacks with 3D visual components as an integral part of the attack. This is much closer to SF than expected.

    Is there a video?

    • This reads like something from Neal Stephenson's "Snow Crash". I never thought we'd get real systems vulnerable to attacks with 3D visual components as an integral part of the attack. This is much closer to SF than expected.

      No kidding. And while this definitely sucks for Linden and the players, I can't help but think "holy crap this is cool!" much in the same way I read in awe the story of the scammer from EVE who scammed all that money out of people.

      Yeah, this sort of thing sucks, but we're learning so

    • Don't get too excited (Score:3, Insightful)

      by cgenman ( 325138 )
      In snow crash, the visual component was being used to transmit information and reprogram computing machines, in that case the brain. It was an impressive leap of insight into interfaces and the nature of computing machines, not too different than the buffer overflows we've been plagued with since.

      In the second life case, the visual component exists because pretty much everything in second life is required to have a visual component of some sort. In this case, the visual component of a ring existed soley a
    • You forgot the WoW plague. I thought that was pretty interesting too. And it was clearly deliberate and difficult to accomplish, so it speaks to how people would prefer to spend their time.

    • Second Life = Snow Crash (Score:5, Funny)

      by patio11 ( 857072 ) on Monday November 20, 2006 @01:56AM (#16911286)
      Take one look at some of the screenshots from that game and *boom* say byebye to your cerebral cortex. Think of the ugliest possible art stretched into three dimensions doing things that would make Japanese tentacle monsters say "Hey, that just ain't right".

  • Time for some Black Ice (Score:4, Interesting)

    by Infonaut ( 96956 ) <infonaut@gmail.com> on Monday November 20, 2006 @12:13AM (#16910606) Homepage Journal

    Wow, talk about reality imitating art. Or, art imitating art. Or technology imitating art. Or the virtual imitating the virtual.

    Annnyway, this sure brings me back a few years. The first time I read Neuromancer [wikipedia.org], I thought, "Damn, what would it be like to live in a world where interacting with computers is so visceral?" We haven't developed networked, immersive 3d environments, but we've sure come a long way from the days when just getting on the Internet from home was a major accomplishment.

    I'd say this attack is proof that no matter how creative and interesting and fun an environment you create, there's always going to be someone out there who will put a lot of time and effort into pissing in it. I'm sure the creator of the worm has some sort of wonderful rationalization, of course. I wonder, is it worse to attack networks in the name of profit (or patriotism), or to do so just because you can?

    • Re: (Score:3, Insightful)

      by HiThere ( 15173 ) *
      It's worse to attack for money or patriotism.

      The reason is that the graffito "artists" serve a useful function, they alert you to holes in you work, and they don't generally do much damage. (Not compared to the others.)

      Think about it, which is worse:
      1) a virus that crashes your system
      2) a virus that doesn't crash your system, but corrupts the payroll files

      I think you'll agree that 2 is MUCH worse than 1.

  • Like a snake around the brainstem (Score:5, Funny)

    by Fallorn ( 784422 ) on Monday November 20, 2006 @12:13AM (#16910608)
    Hey Kid, Want to try some Snow Crash?

  • Screenshots? (Score:3, Interesting)

    by quanticle ( 843097 ) on Monday November 20, 2006 @12:19AM (#16910646) Homepage

    This thread is worthless without pictures.

    Does anyone have screenshots of the alleged "grey goo"?

  • Nice Hack (Score:4, Insightful)

    by Anonymous Coward on Monday November 20, 2006 @12:23AM (#16910676)
    Nice hack. Kudos to whomever pulled it off. The videogame generation is in danger of becoming a legion of conformist, rule-following lab mice, conditioned to obey and consume, differentiated only by which Big Media corporation they swear allegiance to. It's good to see someone somewhere is sowing discord. Eris would be pleased, but then who gives a fuck what she thinks ;P

  • Linden Labs had to invoke martial law...

    Some people seriously need to get a grip. This is all ones and zeroes - comparisons with "martial law" are just silly. Second Life needs to be renamed to give its users a much needed message - namely, Get A Life

  • Like my Mom always used to say: "Don't take virtual candy from virtual strangers".
  • I was online when this thing was attacking, and it never seemed to get to my sim - I saw the notices, and the web notice that they'd locked things down to linden login, but they let anyone there stay. It was laggy, but that's not that unusual these days. At least with this one, the grid was never fully down (if you were already in or didn't get booted) and the Lindens were able to contain and clean it up pretty quick (unlike some of the marathon outages caused by goo of the past). Total offline time for thi

  • Well, look on the bright side... (Score:5, Funny)

    by freeze128 ( 544774 ) on Monday November 20, 2006 @12:56AM (#16910918)
    It looks like the admins now have a "second job"....

  • This sounds like a job for... (Score:5, Funny)

    by PrismaticBooger ( 103265 ) on Monday November 20, 2006 @01:03AM (#16910968) Homepage
    Sonic the Hedgehog!

  • Sorcerer's Apprentice (Score:3, Interesting)

    by CodeBuster ( 516420 ) on Monday November 20, 2006 @01:08AM (#16911012)
    This appears to be related, at least in concept, to problem which sometimes comes up in network protocol design, Sorcerer's Apprentice Syndrome [wikipedia.org], which results in a cascade of copies that eventually overwhelms the ability of the connection to transmit and route the duplicates. The term originates from the Walt Disney animated feature Fantasia where the Sorcerer's Apprentice (Mickey Mouse in the red robes and wizard hat) accidentally causes the mops washing the floor to increase via geometric doubling. One wonders if other MMORPGs are vulnerable to similar attacks.

    • Re: (Score:3, Interesting)

      by HiThere ( 15173 ) *
      Walt Disney didn't create the story of the Sorcerer's Apprentice. He didn't even create the broom. All he did was change the apprentice to a mouse and draw it.

      And for this he got an eternal copyright on the story. Not legally, but effectively. Nobody else would DARE tell that story now, because they'd be sued.

      Patents are bad, but I'm not certain that indefinitely extended copyrights aren't worse.
      • I did not say that Walt Disney had the original idea for the story, merely that the term was applied to errors in the early ftp protocols because they reminded people of the scene with the same name in the aforementioned film.
        • errors in the early ftp protocol

          tftp protocol.

          Ftp uses TCP, which already has built-in acknowledgment management, and would not be vulnerable to such a problem (unless TCP was buggy).

  • One ring... (Score:3, Funny)

    by kars ( 100858 ) on Monday November 20, 2006 @01:13AM (#16911048) Homepage
    ...to bring them all, and in the darkness bind them.

  • Say it ain't so! (Score:4, Funny)

    by dangitman ( 862676 ) on Monday November 20, 2006 @01:17AM (#16911064)
    "At 2:46 CST today, the game Second Life was hit by a massive attack by a rogue programmer.

    Uh oh, I think SkyNet just became self-aware... of its Second Life account.

  • Playing Doctor. (Score:2, Funny)

    by Anonymous Coward
    "Apparently, most people are willing to touch an object they've never seen before"

    You should be so lucky.

  • Ah but the big question is... (Score:4, Funny)

    by Qoroite ( 637807 ) on Monday November 20, 2006 @02:37AM (#16911488)
    If you get 100 rings do you turn into Super-Sonic? ^_^
  • Did anyone read this before posting it? the figure of 600,000 was pulled out sof someones butt. I have never seen more than 25,000 people on SL. It's certainly not the largest denial of service in the game, in fact script attacks like this happen almost weekly in SL and always involve cutting off new log ins. I've never heard them use the term martial law and the supposedly new term grey goo has been used for months and months in realtion to these self replicating object attacks. The in-game scripting mak
  • Like most others who have posted so far, my first reaction to this disaster was "Cool!" But when I think about it, I get uncertain to what the rational reaction is. There are several forgiving factors to this prank/terrorist act:
    • It is just a virtual world, just a game.
    • The vulnerability of the system was demonstrated, possibly a good thing. It makes you consider the consequences about DOS-attacks in the real world.
    • It lets people think about what is important in First Life: Maybe it is not a computer game

  • Well, big deal (Score:4, Insightful)

    by vadim_t ( 324782 ) on Monday November 20, 2006 @05:18AM (#16912138) Homepage
    The first time I saw something like that happen it was really bad. Performance was very badly affected, and the objects would launch people into the air, so the only thing that could be done was sitting (you can't be pushed if you're sitting) and talking until they fixed it. And after a while the whole grid had to be brought down for hours.

    Now all that happens is that things slow down for a while, they close logins for a few minutes, and soon everything is back to normality. Some areas aren't even very noticeably affected, because object creation is disabled, so the stuff doesn't get to run on those sims in the first place. The only effect felt there is the degradation of the central servers.

    While it's certainly annoying, it's not nearly the problem it used to be.

  • Quick fix! (Score:3, Interesting)

    by GraZZ ( 9716 ) <`ac.voninamkcaj' `ta' `kcaj'> on Monday November 20, 2006 @07:15AM (#16912778) Homepage Journal

    [PST 3:18] The grid has been reopened to all log-ins. Welcome back!

    [PST 3:07 PM] Log-ins will be closed to all except Linden staff while we finish cleaning up the aftermath of the grey goo attack.

    [PST 2:44PM] An attack of self-replicators is causing heavy load on the database, which is in turn slowing down in-world activity. We have isolated the grey goo and are currently cleaning up the grid. We'll keep you updated as status changes.

    Under an hour from recognizing the problem to fixed. If this were WoW, the servers would have been down 3 or 4 days!
  • I've been seeing an awful lot of stories about second life lately. First it was businesses opening virtual stores, then the copybot and now this. Is it all coincidence, or has Linden Labs been pushing their marketing campaign into high gear?
  • It's business as usual in Second Life. NEWS would be if there WASN'T an exploit for a whole week.

  • An abridged history of SL DoS attacks (Score:3, Informative)

    by tony_ratboy ( 228844 ) on Monday November 20, 2006 @09:17AM (#16913858) Homepage
    This latest attack isn't the newest or most severe Second Life has experienced. In October 2006, a glut of attacks [secretlair.com] followed a vague "terrorist" threat [secretlair.com] uttered by self-replicating objects. In April 2006, three major attacks [secretlair.com] took place. Almost a year ago today, Linden Lab blocked a DoS attack by deploying a giant virtual firewall in-world [secretlair.com], but I don't think that method is still used. Linden Lab had suggested earlier this year it would bring DoS attackers to the attention of law-enforcement agencies, but the results (if any) have not been publicized.

Slashdot Top Deals

Beware of Programmers who carry screwdrivers. -- Leonard Brandwein

Close