An anonymous comment on this blog was too good to leave buried in the comments. Everyone take a look at this quickly, because as soon as zFire Xue spots this he will take the link down. Take copies if you can.
In this video zFire Xue (the man behind the avatar) tells his girlfriend about a special HUD he has made her which has all the usual (now banned) features of RedZone in it for alt detection, geolocation etc. But also, it shows that he harvests possible Second Life passwords of the users of his website. They log in there with real SL names and sometimes type their SL password out of habit. zFire collects these passwords it seems, and this hud shows them for any user.
The key bit is where zFire says that in his tests he has found they sometimes indeed use SL passwords by accident.
zFire admits in this video to hacking the SL accounts of some of his customers.
Edit: Some people are asking how we know this is the real zFire as this was posted anonymously without evidence. Take a look at this video of the real zFire (Mike) and see if you agree that the voice and face in the video look the same.
Edit 2: Here is the transcript for anyone with difficulty accessing video. Thanks to people at SLUniverse for typing it up:
This webpage will let you look up basic information about a person at isellsl, as well as if and when they joined isellsl, if they own a RedZone, if they’re on anybody’s RedZone’s safe list, and if they ever got a RedZone demo… which those three things are more useful for me.
What’s useful for you is that this website will also predict people’s Second Life passwords. Now you know how that’s done? It does that based on incorrect passwords that they enter. A lot of times out of habit people of course enter their Second Life username and by habit enter their Second Life password occasionally.
All of the incorrect passwords that they’ve ever entered will be visible. Not everybody has one. Many of them do and in my tests many people have indeed entered their Second Life passwords. So that’s here.
A little useful thing I am also going to make it display are people’s real world locations. For us only, that will be very interesting. Nobody else can access this page at all; only me and ze. Anyway that is all for now. I do have another page I’m gonna make for you. But here’s this one for now.