Second Life Hit By Massive In-Game Worm

An anonymous reader writes, "At 2:46 CST today, the game Second Life was hit by a massive attack by a rogue programmer. Spinning gold rings began to appear in the air and on the ground, and as users interacted with them they began to chase and replicate. Apparently, most people are willing to touch an object they've never seen before and this invoked a worm script that was designed to multiply and spread across the 2,700+ servers run by Linden Labs in California, the game's owner. Many of the six hundred thousand active users experienced serious lag and lost connectivity to the servers, making it one of the largest known denial-of-service attacks in an online game. Linden Labs had to invoke martial law and lock out all logins by users except their staff as they began the task of cleaning the servers of what they began to term 'the grey goo.'" Comments in the SL blog entry indicate that Linden Labs had already deployed a "grey goo fence" before this worm struck, but someone found a hole in it.

Comments

And it was just getting good

[jibjibjib]

A few weeks ago I was hearing things about SL like that corporations were holding press conferences there, businesses were running there and making good profits, and its economy was worth millions of dollars. I thought SL was just beginning to become important, and show the world that a virtual economy was a viable idea.

Now we have CopyBot and grey goo and it seems like SL is just another dodgy online game after all.

Re:And it was just getting good

[DrMrLordX]

It's also a haven for sleaze. Say what you want about people's right to free expression, but there is such a thing as going too far. It's no wonder that Second Life has attracted so much ire. It was a "dodgy online game" long before Copybot and grey goo hit the scene.

Re:And it was just getting good

[djupedal]

Excuse me, but how could an "online economy" ever be viable? It doesn't produce anything, and [clip]

You're new, I'm guessing...

It produces an environment whereby the ever sought-after eyeballs are gathered, occasionally focused and always tracked. Doesn't matter if it is a polar bear in a snow storm, if you can prove that the multitudes are looking your way, you can cash in.

Someone please explain

[goombah99]

This sounds like horseshit. It's like something you would see in a factually absurd hollywood movie about a programmer uploading a virus into the power grid. How does this work in these games that someone is ever allowed to inject a code that can run on someone elses session? Why would they allow that. Spining rings appearing in my session from some one elses code and my computer runs the code if I touch them. Praise Tron. I assume there is some explanation for this but since I'm not a gamer I am without a clue.

Re:Someone please explain

[TekPolitik]

How does this work in these games that someone is ever allowed to inject a code that can run on someone elses session?

Second Life users are able to create objects using a fairly complete scripting language. The scripts run on the servers, and an object can create more objects when somebody interacts with it. It "runs" in other peoples' sessions not because it's running on their system but because they're all viewing the same MMORPG environment.

And to preempt your inevitable comment, yes, it is very lame. I can't believe people are paying ongoing fees (in US dollars) to hold land in this thing.

What?

[JimXugle]

What? No Screenshot from anybody?

Getting close to "Snow Crash" here

[Animats]

This reads like something from Neal Stephenson's "Snow Crash".

I never thought we'd get real systems vulnerable to attacks with 3D visual components as an integral part of the attack. This is much closer to SF than expected.

Is there a video?

Time for some Black Ice

[Infonaut]

Wow, talk about reality imitating art. Or, art imitating art. Or technology imitating art. Or the virtual imitating the virtual.

Annnyway, this sure brings me back a few years. The first time I read Neuromancer, I thought, "Damn, what would it be like to live in a world where interacting with computers is so visceral?" We haven't developed networked, immersive 3d environments, but we've sure come a long way from the days when just getting on the Internet from home was a major accomplishment.

I'd say this attack is proof that no matter how creative and interesting and fun an environment you create, there's always going to be someone out there who will put a lot of time and effort into pissing in it. I'm sure the creator of the worm has some sort of wonderful rationalization, of course. I wonder, is it worse to attack networks in the name of profit (or patriotism), or to do so just because you can?

Re:Not just misleading, but factually inaccurate t

[vtechpilot]

With 2700+ servers they have a hard time handling more than 10k users? Less than 4 users per server is tough enough?

The problem is that the world is Zone Based, meaning each server is responsible for a equal size geographic portion of the world. The result is that processing power is spread evenly over the whole world. The problem is that people like to congregate causing some geographic areas to have more players, and other servers to have none. Where you have more players, you have more work for the server causing everything on that server to slow down. So the result is that the places players most want to be are also the places with the greatest lag. The unfortunate result is that many players have a negative experience right away.

Really, the whole server architecture needs to be reworked to behave more like a proper cluster, but that is too large of a change to ever consider implementing without starting over from scratch.

Re:Not just misleading, but factually inaccurate t

[maxume]

It would at least seem possible to make the zone size a server is responsible for variable, and then eventually, dynamic. That would look just like it scaled.