Warning: Some malicious client mods are stealing passwords
When you install a mod, the mods gets full access to your computer, and can do ANYTHING to it.
Make sure you absolutely trust the source before installing any such mods. This applies to both server mods and client mods.
I don’t know which mods are the culprits.
When the modding support is added, there will be support for sandboxing mods to give them less access to important stuff. You can chose to trust a mod if you want to, and if it needs to do fancy things, but the default will be to run the mod sandboxed.
If you really want to know, a mod will always be able to steal your password and username, even if they make those variables private. You've just got to be able to use common sense and not download from untrustworthy sources.
I thought one of the advantages of using Java was the Virtual Machine helping protect you. How are they causing havok through it?
Rollback Post to RevisionRollBack
Games that are still enjoyed thanks to modding-
Morrowind, Oblivion, Starcraft, Garrys Mod, Half-Life (And thus TF2, Portal, ectectect), ect.
Modability isn't just a word I made up, it's the line between Minecraft being a fad and a cult classic.
I'm surprised people are crazy enough to think Notch is straight out lying due to his supposed "hate" for modders.
Regardless if he's telling the truth or not, be careful everyone. And yeah, there has been some people lately that have been posting mods that don't look so legit.
I thought one of the advantages of using Java was the Virtual Machine helping protect you. How are they causing havok through it?
They can get your password by sniffing the packets that are being sent from your computer, or simply catching your username and password as it is leaving the login field. It's not hard to do it. But other than that, they can't do anything to your computer.
The Meaning of Life, the Universe, and Everything.
Join Date:
3/9/2011
Posts:
161
Member Details
Quote from Alblaka »
Sure thing, if somebody modifys the files responsible for log-in and similar stuff, anyone could do anything to your PC. Ok, not anything, because Java sucks at getting permission to edit out-source files XD
But luckyly, most mods solely ADD content to the minecraft.jar, basing on ModLoader.
Due to my coding work, i can tell you ModLoader is not messing with any "login"-related files. Thus, all mods running cleanly over ModLoader, without changing base files, CAN'T steal password and stuff.
As well, most mods modifying 1 or 2 base files only change in-game relevant files (f.e. my mod Overrides the Player-updating and the Pickaxe-code). Still no danger.
At all, i would even doubt client-observing stuff is even possible with solely modifying the minecraft.jar.
If you're still paranoid: Just cut your internet off (not literally o.o), start up the mod in minecraft via a cmd.
If there is really some kind of Trojan in, it will show you it's "Failed to Upload your secret password"-like error in the cmd ^^
To be serious, i honestly doubt there is any mod yet, which is capable of stealing passwords of such a low-cost game. Hacking newer games would be much more valuable.
Though, due to low age and thus > stupidity-naivity of the players... may pishing on MC is just easier :biggrin.gif:
Seems like Notch is just trying to get people not to use client mods now. I haven't seen any mods that steal passwords on this forum. What an ass.
In fact I saw a few "mods" on the forums which could do such a thing, but they're more of launchers than mods, like that Portable Minecraft thingy...
Anyways, I'd be more prone to blame the particularly catastrophic management of this forum's security (with the login pop-up issue which happened 2 weeks ago) for the hacks that Notch is talking about than the modders.
If you are unsure of a mod, don't download it.
Don't forget to check out my website, http://slothygaming.com
MJM IS FINALLY RETURNING!
*reads info* "oh god glad i noticed"
I think this sould be sticky
Even trought its a little off topic but still
.
Mod Archive
.
Mod Archive
.
Mod Archive
.
Mod Archive
Sorry if that sounds rude. lol
www.youtube.com/user/DirtFreakFMX My youtube channel, has tutorials and other good shtuff
Regardless if he's telling the truth or not, be careful everyone. And yeah, there has been some people lately that have been posting mods that don't look so legit.
They can get your password by sniffing the packets that are being sent from your computer, or simply catching your username and password as it is leaving the login field. It's not hard to do it. But other than that, they can't do anything to your computer.
Happened to me, had to make a new forum account and Minecraft account. I will not post what mod though do to it may start a flame war, unfortunately.
Official KillingToaster's () given: 1
If you earn one, you can not give it away.
That was awesome
turbeauke
Carpenter
Posts: 60
Joined: Wed Nov 10, 2010 11:39 am
Minecraft: TurBeau
your minecraft name says otherwise >>
You spoke my mind.
.
Mod Archive
In fact I saw a few "mods" on the forums which could do such a thing, but they're more of launchers than mods, like that Portable Minecraft thingy...
Anyways, I'd be more prone to blame the particularly catastrophic management of this forum's security (with the login pop-up issue which happened 2 weeks ago) for the hacks that Notch is talking about than the modders.