LOstorm SL Viewer

Advisory-001 (2020-Dec-14)

back to main website

An issue was identified where the "Check IDs" feature displays a blank username field, and incorrect spoofed IDs. This occurs when using the "Remember Username" feature without also using the "Remember Password" feature.

This does not affect the safety of the ID spoofing feature as IDs are re-calculated upon pressing the login button.

The usage of correct IDs may be confirmed by examining the Firestorm.log file after logging in to the game:

Open the Firestorm.log file in a text editor and find the first line containing the string "LOSpoof" to confirm correct IDs are sent. Example:

2020-12-14TXXXXXXXXZ INFO #LOSpoof# newview/lllogininstance.cpp(244) 
LLLoginInstance::constructAuthParams : Login parameters: {'address_size':i64,'agree_to_tos':0,'channel'
  :'Firestorm-Releasex64','extended_errors':1,'host_id':'','id0':'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'
  ,'last_exec_duration':i0,'last_exec_event':i0,'mac':'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx','platform':'win'
  ,'platform_string':'Microsoft Windows XXXXX','platform_version':'XXXXX','read_critical':0,'start'
  :'last','version':'6.4.12.62831'}