Urgent- Your password may be unsafe

I can not stress enough that this is not a "Redzone" issue- it's a human security issue.  
If anyone reading this has ever logged into zFire's website isellsl, you need to change ALL your passwords immediately.  Not just your Second Life password, but any passwords you could have accidentally typed into his website.  I don't care if someone reading this is still using Redzone- it's irrelevant to the point your security is in very real jeopardy. 


In case anyone missed it, scroll down a post and you'll see proof that zFire was logging people's passwords to access their Second Life account.  


What's worse is the fact zFire has not learned from past mistakes.  This isn't the first time zFire committed crimes on the internet.  In fact, he is a convicted felon for a theft scam on eBay.  There is a very real chance, judging by his past criminal history, a lot more than your Second Life account could be at risk if you've logged into his website.


For those of you who will inevitably howl at me to prove it, here is a link to the court document: http://www.ca9.uscourts.gov/datastore/opinions/2005/12/13/0230375.pdf

After you have a look at that, keep in mind we've known for awhile zFire Xue's real name is Mike Prime.


Ok...here's some connect the dots:
-zFire has publicly admitted his YouTube account is marskgb006

-In the court documents in question (linked above), it names Shawn Cahill as one of the defendants and Mike's friend:

"The extrinsic evidence included money orders and e-mail correspondence with aliases used to conduct fraudulent transactions, written reports by both the fingerprint and handwriting expert, and certified copies of prior convictions for both Prime and his friend Shawn Cahill"

-On marskgb006's YouTube account, there is this video. Notice the title John vs. Shawn Cahill

YouTube - John Vs. Shawn Cahill

-In the court documents in question, it names Juan Ore-Lovera as a co-defendant
-Also on marskgb006's YouTube, there is this video. Notice the title of Juan's reaction to the 'John Vs. Shawn Cahill" video:

YouTube - Juan's reaction to the 'John Vs. Shawn Cahill" video.

-Remember the John Hamlin mystery? CEO of Insanity Productions with Mike Prime? Well, here's Juan's (the co-defendant in Mike's criminal case) Facebook. Look who his friend is- John Hamlin. John Hamlin | Facebook

There is no way it's a coincidence that men who played a part in the criminal trial of Michael Stefen Prime are also in YouTube videos under an account that zFire publicly admits is his.

There's no "if". zFire is Michael Stefan Prime.


So please, if you've ever logged onto the Redzone website or any part of isellsl, CHANGE ALL YOUR PASSWORDS IMMEDIATELY.

zFire's Xue's database hacked- proof made public

The first sign that zFire Xue's database had been hacked came on no2redzone's blog, where this anonymous comment was made:


Security Thru Hackscurity (12:35:24) :

"we hacked becuse zfire xue challenge hacker to hack. he so script child that it take second. site down. site back. second to access again. site go down come back. again. again. again access until he close hole which place everyone data in secondlife at risk. oh the thing we see lar. admin page with manual copybot name enter and list of added user. not detect by rz! manual! hundred user manual entered! user vasilisa shilova manual enter many name too! database dump say video true. he log wrong entered password. everyone owner redzone need change SL password! how we send database to linden with anonity? we still work on this. we not use or release database. we attach example admin log screen as access prove. we only hack becuse he ask. if he deny hack we post more criminate screen until doubt gone".

...and apparently Hackscurity makes promises not threats, because earlier today the following screenshots surfaced on The Alphaville Herald, proving not only their claims that zFire logs passwords entered onto his site as a way to potentially hack the user's Second Life account, but that he manually enters alleged copybotters into the system (rather than detecting them):

And if this new proof of zFire's deceit isn't damning enough, Hackscurity also released this screenshot, which logs traffic to zFire's hosted sites:

What is KoM, you ask?  Knights of Mars, a vigilante group to "assassinate" avatars for a price.  A group that brags about violating TOS and the ability to "kill" an avatar.  zFire Xue hosts the Knights of Mars site, in fact there's strong evidence that he runs it.

To all the Redzone users reading this, I again urge you to change your Second Life password immediately.  This isn't about ego it's about internet safety, and yours is in grave danger at the hands of the man you trusted to 

protect you, zFire Xue.

(For those wanting to stay informed, be sure check out SLU's very active and enlightening thread: Redzone Epic Thread Part Deux !)

zFire talking about sharing people's RL data and hacking SL passwords

UPDATE 3/10/11- People asked how we knew this video was real? zFire removed it from YouTube the minute he found out it had been leaked.  Too bad someone had already made a copy elsewhere.  I've updated the link below so it's viewable again :D

Also, notice his Redzone "Insantiyproductions" (his crappy spelling, not mine) profile at the bottom.  You'll clearly see the "mars006kb" profile where the original video was posted subscribed to it. (again, screenshots taken before he could delete the evidence)

----------------------------------------------------------------------

I had this video bomb dropped on me tonight.

Apparently zFire, creator of Redzone, made this video for his girlfriend.  If you listen to the video, you will hear him not only bragging about giving her access to his database information, but revealing people's RL locations and even attempting to access people's Second Life accounts based on failed password attempts on his own site.

Yes, you read that correctly, trying to figure out people's Second Life password by their failed password attempts on his own isellsl website.

Have a look for yourself, be sure to turn the volume up!!!

I have no idea who leaked this originally, but I do know it's a private video that can't be found in search.  You can only view it with a direct link because it was never meant to be seen publicly.  He also mentions his Redzone website, 'isellsl', by name.  I also noted it's not new- it was uploaded on August 3, 2010.  That means this video was made long before any of the Jiras or Greenzone.  


I'm guessing the Redzone camp will all be rushing to change their Second Life passwords now.

Quickware Alts -BANNED

Soft Linden commented on VWR-24746:

-----------------------------------

Thank you for the additional ARs, all. After some research and follow-up with some of you who reported, it's clear that there is no such thing as a ToS-compliant version of QuickWare Alts Pro. For lack of a good faith effort on resolving issues associated with this device, many assets have been blacklisted and accounts held. I can't go into specifics beyond that.

If you see QuickWare Alts Pro return under a new name or creator, please select the device and file Abuse Reports against the device's owner. Be sure to mention which specific device you have found.

As always, file ARs based on first-hand knowledge. There's nothing wrong with peers filing additional ARs to underscore importance. However, each person filing should take a close look and ensure they understand the object of the AR. They should personally be able to justify the AR if asked. Brief and verifiable is best.

Sparrow Industries- more privacy violations

I hope it's clear to anyone reading this that fight for privacy is not Redzone specific.  There are others just as bad out there, and we need to fight against them as well.  You'll notice some minor changes to this blog that reflect the need to keep informed, most noticeably the extra tabs.  I've decided to make individual tabs for each product discovered that violates privacy and/or TOS by detecting alts.  


...with that said... you'll notice a new name up there, Sparrow Industries.  Be sure to have a look!

Quickware Alt Detector- back on the market!

--QUICKWARE HAS BEEN MOVED TO IT'S OWN TAB-

Police Department in Romano, Redzone Free

Earlier today I had made a post about the Police Department in Romano using Redzone and asking for consent to check alts.  Tonight, I received an IM from the sim owner, Cdurd770 Halfpint.  He was most gracious and kind throughout the conversation, and I learned he had been out of Second Life this week so he wasn't able to remove the device requesting consent.  Below is our conversation (which I post with his permission):

[21:55]  Cdurd770 Halfpint: Hi there, thanks for visiting my sim :)

[21:55]  Cdurd770 Halfpint: Love the blog as well.

[21:55]  Theia Magic: Oh hello!  You're the police guy, yes?

[21:55]  Cdurd770 Halfpint: I am!

[21:55]  Cdurd770 Halfpint: (disarming to chat)

[21:55]  Cdurd770 Halfpint: lol

[21:55]  Theia Magic: Nice to meet you, though I'm sorry under the circumstances.

[21:56]  Cdurd770 Halfpint: Not a problem at all.

[21:56]  Cdurd770 Halfpint: Let me first say this

[21:56]  Cdurd770 Halfpint: I don't log on much, so TOS changes quicker than I can log on to remove things.

[21:56]  Theia Magic: Heh and no need to "disarm", contrary to popular belief I'm not a bitch

[21:56]  Cdurd770 Halfpint: lol it's ok, just messin

[21:56]  Theia Magic smiles

[21:56]  Theia Magic: OOhhh so you didn't know?

[21:56]  Cdurd770 Halfpint: I read on my phone

[21:56]  Cdurd770 Halfpint: but

[21:57]  Cdurd770 Halfpint: I don't give return rights to my staff cause they tend to return my stuff.

[21:57]  Theia Magic nods

[21:57]  Cdurd770 Halfpint: so I have to get these things.

[21:57]  Theia Magic: I understand

[21:57]  Cdurd770 Halfpint: I jsut had a long long chat with another gz person. Very productive chat.

[21:57]  Theia Magic: It's been a whirlwind here this week, that's for sure

[21:57]  Cdurd770 Halfpint: It has.

[21:58]  Cdurd770 Halfpint: Now, I'd like to air a few things about us, alt crap and who we're not if you hve time.

[21:58]  Theia Magic: Sure of course.

[21:58]  Cdurd770 Halfpint: Plz feel free to put this on the blog, you have my perms.

[21:58]  Theia Magic: If you'd like me, to I will.

[21:58]  Cdurd770 Halfpint: PD has been around for almost 4 years.

[21:58]  Cdurd770 Halfpint: We do what we do for free, we work in about 50-75 sims, and have our networked protection system in some 1200 sims.

[21:59]  Cdurd770 Halfpint: We work around the clock, for free, to help people have a chance to enjoy SL.

[21:59]  Cdurd770 Halfpint: We devised some time ago, over a year in fact, a way to have a clue about people who are relentlessly griefing sims.... with alts

[21:59]  Cdurd770 Halfpint: But

[21:59]  Cdurd770 Halfpint: Me being the nice person I am

[22:00]  Cdurd770 Halfpint: created this where names are not just shown

[22:00]  Cdurd770 Halfpint: and broadcasted to anyone.

[22:00]  Theia Magic nods

[22:00]  Cdurd770 Halfpint: Someon griefs...

[22:00]  Cdurd770 Halfpint: Yes, we look, we determine is this person this griefer????

[22:00]  Cdurd770 Halfpint: So we look and see if we get a visit from that person on that one sim.

[22:00]  Cdurd770 Halfpint: That's when we do what we do.

[22:00]  Cdurd770 Halfpint: RZ, bad idea.

[22:01]  Cdurd770 Halfpint: Open to all with 3999

[22:01]  Cdurd770 Halfpint: bad bad bad.

[22:01]  Theia Magic: Yes exactly

[22:01]  Theia Magic: That's been my point all along

[22:01]  Cdurd770 Halfpint: Do I use rz? Yes, my ban list is long, it helps

[22:01]  Cdurd770 Halfpint: lol

[22:01]  Cdurd770 Halfpint: Even when our system would report to us via owner chat info about people

[22:01]  Theia Magic: I've heard that from many people, that they use it for the long banlist.  I wish LL would make the ban lists here unlimited, it would help many.

[22:02]  Cdurd770 Halfpint: we never disclosed it

[22:02]  Cdurd770 Halfpint: But, now, we've moved it all out of world, there's not even an option. It's just ban them.

[22:03]  Theia Magic: See and I don't doubt that you used it responsibly, but the problem is all the names scanned in are put into the database.  Up until this recent TOS change, people were using that database to do exactly what you were fighting against- grief and stalk.

[22:03]  Cdurd770 Halfpint: Right. Agreed.

[22:04]  Theia Magic: You know, my heart goes out to people like you who bought Rz with the best of intentions.  I've met many similar.

[22:05]  Theia Magic: So, if it's ok with you, I'd like to make a return visit to your sim to verify the consent thingie is gone, then do a revision stating what we spoke of here tonight?

[22:08]  Cdurd770 Halfpint: Sure.

[22:08]  Cdurd770 Halfpint: I just now got the consent thingy. I thought I got it 3 days ago.

[22:08]  Cdurd770 Halfpint: lol

[22:08]  Theia Magic: May I ask if you removed Redzone entirely, or just the consent thing?

[22:08]  Cdurd770 Halfpint: I got them both.

I went to the sim to verify, and he did remove both the consent requester as well as Redzone entirely.

To Cdurd770, my apologies for any trouble all of this caused you, it wasn't my intention in the least.  After speaking with you today, I have the utmost respect for you and your organization.  Thank you. :)