Bugs in the new HUD

[Tad Carlucci]

1) It's hard to read because it's semi-transparent. There should be an option to set the HUD to fully opaque. If there is, it's not apparent.

2) The Box and Image functions are Not Safe for Normal Use. They should STOP the user with a warning that changing all cats/boxes will erase ALL pricing and set ALL cats/boxes Not For Sale.

3) It sure looks pretty, but requiring your viewer to display web pages is a security problem. There should be a non-web-based version of the HUD for those of us who actually care about securing our systems and don't want to wander around letting any Tom, Dick or Harry Griefer display whatever they want on the screens.

[MsMagick Resident]

What's it look like? Sounds like I'm going to want to stay with the old version (which had many different designs to choose from - I can only really read the "Colorful Large Dark" one) - or the new version of the old style that they are talking about, assuming in comes in Colorful Large Dark.

[Callie Cline]

Hello!

Thank you for your post.

We take all comments and suggestions in consideration, but as you know, can not make commitments towards future functionality

The Box and image switch functions were present in the old HUDS too, there has been no change there.

I think we could consider adding a warning to the instructions that come with the HUDS . It is mentioned in our online manual however.

Security will always be an issue with anything you do on the internet. Note though that the new HUD works out of the box with the default settings available in several major SL viewers. We do not require anything special from our side here.

Some viewers also have an option to only allow specific media to display.

If you prefer the other HUD, not to worry. 1.33 HUD's are incompatible, but we have an updated old style 1.44 HUD that works with your updated cats available in the store. Just get it here: http://maps.secondlife.com/secondlife/Ki.../123/91/25

Thank you for your posts!

Your KittyCatS Team

[MsMagick Resident]

*nods* The media activation can be a big security issue if it can be accessed by others, such as when you allow it to automatically play media. My geek girl explained it to me re: something else. People can find where you are in RL by streaming media to you when you land on their SIM. Then they just see what IP address the media was streamed to at the time that you landed (compare the two logs), and then trace that address.

I haven't gotten the update yet, but went ahead and grabbed the updated version of the old style HUD package from the KC store. Thanks SO MUCH for making that available. I want the summary info and quick access buttons, and to use the actual website when I need the cattery & pedigree info.

BTW - I do LOVE everything else new that I've seen so far. :-)

* * *
Update: My in-world live KittyCats and boxes are all updated (I even updated all the ones in my Magic Boxes) and the Legacy HUD is working great! :-) Thanks!

[khloe Wyx]

I would like to express thanks for the new upgrades in the animations, and in the hud.. but i would like to ask if this is ever going to be done in dark background with light colored lettering. Because for me that is the easiest to READ!

Thank you
khloe

[MsMagick Resident]

(04-29-2015 03:51 PM)khloe Wyx Wrote:  I would like to express thanks for the new upgrades in the animations, and in the hud.. but i would like to ask if this is ever going to be done in dark background with light colored lettering. Because for me that is the easiest to READ!

Thank you
khloe

I'm right there with you. I'm using the Colorful Large Dark version of the Legacy HUD (KittyCats Control HUD 1.44) for multiple reasons:
- Readability
- Providing the Info I Need at a Glance - Without Filling Up My Screen
- Safety, Safety, Safety (see below*)

If you're having issues and liked the old style, they have the Legacy ones at the KC store and they are free as long as you had the old version. They are the same styles as before but work with the updated cats.

---

* Regarding Turning on Media for the New HUD, here are some notes from my Geek Girl, who is an IT professional in RL and does building, scripting, etc in SL. She has even made her own viewer!

- Media uses old (vulnerable) Webkit libraries in most viewers (including Firestorm) [Basically, it's like you are using a very unsafe web browser. Even the version that she personally tried to fix to make it safe failed multiple safety tests.]

- Media can and has been used to geolocate users, tying SL usernames to RL places (more or less accurate) by allowing the owners to link user names to their IP addresses.

- The media filter (which lets you selectively enable media) doesn't exist in all or even most SL viewers. Notably, it doesn't exist in the official SL viewer, nor does it exist in Kokua, UKanDo or Alchemy, nor in Exodus (which is still popular among the SL combat crowd)

- Media does not work the same for everyone. For some (very few) people it doesn't work at all.

[Shamu077 Resident]

(04-29-2015 08:54 PM)MsMagick Resident Wrote:  - Media can and has been used to geolocate users, tying SL usernames to RL places (more or less accurate) by allowing the owners to link user names to their IP addresses.

That's nothing new - every time you enter a Sim with streaming music, and any clulb with streaming music or a DJ or artist, the stream owner can see your IP, with some added work, unless you go to clubs and turn off the music before you arrive. Same with kitty Sims that have music playing. The parcel owner knows where you live !! (assuming they want to, which few do.)

Shrug... Does anyone really care? I just tell everyone where I live - it's a big town - whats the security problem?

[Tad Carlucci]

The security problem is that the example of the problem is So LAME.

A better example would be a spoofed login page. Using the Second Life viewer (or most, if not all, third party viewers) you (the user) have NO way to determine the web site (URL) which you're seeing. So it is a simple matter for someone to create a web page which, for example, looks exactly like the KittyCats login page but, unbeknownst to you, it's actually a page on another server. It is a simple matter to collect your username and password, record them, and thenpass them along to kittycats.biz so you're properly logged in and using the actual site, as normal. Then, at a later time, the attacker logs in as you and does whatever you're allowed to do on the site.

For most of us, that's not a huge issue. But .. just think where the attacker would be if they could actually get KittyCatS Resident to use .. just once .. the login page on their prim!

To make it worse, there is NO record of any of this happening.

Linden Labs is not involved .. none of their servers have any record of you ever looking at the prim and interacting with that web page.

Your web history has no record since it was done with the browser built into the viewer.

The ONLY records are with your ISP, assuming they record ALL your traffic, and with the attacker's web server, which, of course, the attacker controls.

Remember, though, this is still a lame-ass example. Only the most neophyte script kiddie would be so simplistic. A concerted attacker would be much more aggressive and, with careful work, be able to take over your computer completely. So, the symptom may not be that you're reading postings you never did .. it may be a visit from the FBI seizing your computer to determine why you broke into Sony and stole their financial records.