• 0

    posted a message on The World of Nagura - PvP - [NO WHITELIST] - 24/7 - Ventrilo
    Quote from Clerkius »
    -snip- was BANNED for Fly Hacking!


    I laugh. I've been on this server for about a month, employing all of my hacks the entire time. Only now it was realized that I was doing so, though, and the cause was flying away from the zombie pigmen you spawned on me as punishment for logging out in combat (though what really happened was an OutOfMemoryError since I was on my desktop with only 2GB of RAM and a bad graphics card). Let me list the hack methods I found/wrote myself: flying, super-speed, player locator, x-ray, invisibility+invincibility (what I call "zombie mode"), auto-healing from food in my inventory, client-side WorldEdit commands, super-pickaxe, etc. All that diamond armor and TNT I had wasn't duped. No, it was spawned directly, but don't ask me how. Thank you, and have a nice day.

    P.S.: you can get my mod engine from -snip-

    Mod edit: User warned for posting hacks.
    Posted in: Minecraft Survival Servers (archive)
  • 0

    posted a message on The World of Nagura - PvP - [NO WHITELIST] - 24/7 - Ventrilo


    WOOT! Got a ton of wood, ladders, torches, and diamond axes :biggrin.gif:
    Posted in: Minecraft Survival Servers (archive)
  • 0

    posted a message on [Closed] ☆ ☆ ☆ SUPER-EARTH ☆ ☆ ☆ The Original Minecraft Community ☆
    IGN: DarkStorm_
    Location: Florida, US
    Age: 14
    Have I read the rules: Yes
    Extra notes: I enjoy all types of servers, and this combination of them is amazing! I would like to join and possibly create my own town. I am also a friend of iSolace, who plays on this server.
    Posted in: PC Servers
  • 0

    posted a message on The World of Nagura - PvP - [NO WHITELIST] - 24/7 - Ventrilo
    Age: 14
    State / Country: Florida, US
    First & Secondary Language?: English first, Spanish second
    Why are you interested in joining this server?: I love PvP and taking peoples' stuffs
    Do you consider yourself mature?: Mature enough to play minecraft multiplayer without QQ, yes
    Do you have access to Ventrilo?: Yes, I do. I got a brand new headset two weeks ago
    Have you read the Rules & Regulations?: Yes, it was quite full of tasty chunks
    Is there anything else you'd like me to know?: I've played on bloodbath (now titan) before, and definitely enjoyed the experience there.
    Posted in: Minecraft Survival Servers (archive)
  • 0

    posted a message on Minecraft Java Method Library?
    Quote from Moonj64 »
    So I just recently acquired the ability to decompile Minecraft and being a person learning some of Java programming I thought it would be a good idea to take a look. I opened up a few of the files and I noticed one thing in particular. The code Notch Wrote is somewhat confusing. The names of his implemented methods are mostly along the lines of func_65_456464 and there are 504 different java files. So what I want to do about it is compile a list here of all of the different methods and how they function as a tool for modders. Before this happens however I had been wondering if there is any reason why this would be frowned upon. None of the source code will be posted barring the method and field names and functions. Anyway feedback is appreciated (also if this is in the wrong section I apologize).


    This isn't really what he wrote. It's called obfuscation, where an external program takes your compiled code and scrambles names and other things to make the code hard to read by people attempting to decompile. This is the right section, I believe
    Posted in: Mods Discussion
  • 0

    posted a message on Renatus - Aurora Reborn | 99.9% Vanilla | 24/7 | Mature |
    IGN : DarkStorm_
    Age : 14
    Why you should join : I am very experienced in redstone, I don't grief, my friend (iSolace) plays on it, and this server looks reallyyy cool (especially the spleef arena that I saw when I was looking around earlier today)
    How long have you played Minecraft? :Around 3 months
    Don't forget to read the rules! [***]
    Posted in: PC Servers
  • 0

    posted a message on 1.5★★ TITΛN ★★ Griefing ✔ PVP ✔ Factions ✔ Craftbook ✔ LVL ✔
    In game Name: DarkStorm_
    Age: 14
    Country/Timezone: Florida, USA/EST
    Why you want to play here: I enjoy PVP servers and the concept of build and hide
    What you expect of this server: An entertaining, yet frustrating at the same time, player versus player experience, where I build and attempt to keep it hidden. Plus, I haven't seen many servers like this one, with no limits
    How did you hear about us?: Through a friend (iSolace)
    Posted in: Minecraft Survival Servers (archive)
  • 0

    posted a message on Accounts are being HACKED. We need something DONE.
    Quote from Knytt »
    Quote from DarkStorm »
    DDoS attacks aren't the end of the world... you people act as if they are anti-American terrorist acts, but they are just large amounts of traffic influx in a short span of time that causes a server to run out of resources, CPU based or network based, bringing the server down for the duration of the attack. Bombs [ :tnt: ] aren't being dropped on servers...


    Who said terrorism has to mean the end of the world? 9/11 wasn't the end of the world. It was just two buildings that emo sheep happen to whine about a lot because Bush told them to. Terrorism is attacking civilian targets to achieve a political agenda, which is what Anonymous is all about. They're not muslims, they don't wear funny hats and they don't live in the middle east, but they're terrorists none-the-less.


    Therefor I, my friends, people I interact with on the internet, and many others are terrorists? WOOT I'm a terrorist! I'm going to go bring down your server with acts of terrorism :SSSS:


    Quote from zapmunk »
    Quote from Simon »
    Maybe someone have made a plugin that get's account information??
    (in multiplayer) :tongue.gif:


    that isn't technically possible.

    the login packet minecraft sends to the server doesn't actually contain the password to your account, specifically to prevent that. it just sends your username and [censored4antipiracy] for the password.

    its not possible to extract passwords from a smp login, because it doesn't contain it.


    Like I said, the session id is passed. The hacker can just turn around and log into minecraft.net

    Quote from Kittytravel »
    My two cents?

    Have it be verified with email.


    Ex. Do you wish to change your password?

    *Hacker puts password in.*

    Password changed.

    A few hours later.

    :SSSS: HACKERS'D?!?!

    *checks E-mail*

    Your password has been recently changed. If you did not do this, or this was unintentional please click the link below for a recovery password.

    *click link*

    :Diamond: :Diamond: :Diamond:


    They can't change your pass directly, they would change email then click "forgot password" and supply a new password. Therefor you wouldn't be able to revert password or email
    Posted in: Survival Mode
  • 0

    posted a message on Accounts are being HACKED. We need something DONE.
    Quote from iSolace »
    Quote from asferot »
    Quote from DarkStorm »
    Minecraft is based around username and session id. Passwords are never used within the client or server for anything but creating a session id.
    Correct me if i'm wrong, but I believe this is how the problem occurs: When a minecraft user, for example (using the cryptography names, yes) Alice, join's a server belonging to someone else, for example, Bob, the session id is passed from Alice's client to Bob's server. Bob may create a custom server (or an hMod plugin) that acts as a middleman and takes the session id. Bob, now having the session id, can then turn around and log in to minecraft.net under Alice's account. From there, he can do whatever he wants for the remainder of the session id's validity, including change Alice's email and request a new password (since he can't change the password directly, it requires the original password).


    Something seems a bit off in this theory....
    Like the FACT that password and username are sent as plain text to the login server...

    Yes, but only the login is encrypted. Once logged in, your session is not encrypted at all. Look up firesheep and learn how it works.


    Actually.........

    minecraft.net/login.jsp:
    <table>
    	<tr>
    		<td>Username:</td>
    		<td><input type="text" name="username" value="" /></td>
    	</tr>
    	<tr>
    		<td>Password:</td>
    		<td><input type="password" name="password" /></td>
    	</tr>
    	<tr>
    		<td></td>
    		<td><input type="submit" value="Log in!" /></td>
    	</tr>
    </table>


    minecraft client LoginForm.java code:
    String parameters = "user=" + URLEncoder.encode(userName, "UTF-8") + "&password=" + URLEncoder.encode(password, "UTF-8") + "&version=" + 12;
          String result = Util.excutePost("http://www.minecraft.net/game/getversion.jsp", parameters);


    URLEncoder just makes it work in a url ("hello world" to "hello+world")

    Therefor the login, both in the client and on the website, are unencrypted :SSSS:

    And yes, firesheep would work, but only locally. Stealing it via custom server would be much more effective
    Posted in: Survival Mode
  • 0

    posted a message on Accounts are being HACKED. We need something DONE.
    Quote from asferot »
    Quote from DarkStorm »
    Minecraft is based around username and session id. Passwords are never used within the client or server for anything but creating a session id.
    Correct me if i'm wrong, but I believe this is how the problem occurs: When a minecraft user, for example (using the cryptography names, yes) Alice, join's a server belonging to someone else, for example, Bob, the session id is passed from Alice's client to Bob's server. Bob may create a custom server (or an hMod plugin) that acts as a middleman and takes the session id. Bob, now having the session id, can then turn around and log in to minecraft.net under Alice's account. From there, he can do whatever he wants for the remainder of the session id's validity, including change Alice's email and request a new password (since he can't change the password directly, it requires the original password).


    Something seems a bit off in this theory....
    Like the FACT that password and username are sent as plain text to the login server...


    yeah... that is true, it would probably be a good idea to do some encryption there :SSSS: These people might as well be doing the old man-in-the-middle thing
    Posted in: Survival Mode
  • 0

    posted a message on Accounts are being HACKED. We need something DONE.
    Minecraft is based around username and session id. Passwords are never used within the client or server for anything but creating a session id.
    Correct me if i'm wrong, but I believe this is how the problem occurs: When a minecraft user, for example (using the cryptography names, yes) Alice, join's a server belonging to someone else, for example, Bob, the session id is passed from Alice's client to Bob's server. Bob may create a custom server (or an hMod plugin) that acts as a middleman and takes the session id. Bob, now having the session id, can then turn around and log in to minecraft.net under Alice's account. From there, he can do whatever he wants for the remainder of the session id's validity, including change Alice's email and request a new password (since he can't change the password directly, it requires the original password).

    EDIT:
    Quote from Knytt »
    I think I'm going to disagree with my previous statements about Anonymous here, because by now a small portion of the 4chan users known as Anonymous, has organized themselves into a terrorist group that is ALSO called Anonymous. They have homepages from where they organize DDOS attacks, that has nothing to do with 4chan, and basically they use the identical name to hide behind.


    DDoS attacks aren't the end of the world... you people act as if they are anti-American terrorist acts, but they are just large amounts of traffic influx in a short span of time that causes a server to run out of resources, CPU based or network based, bringing the server down for the duration of the attack. Bombs [ :tnt: ] aren't being dropped on servers...
    Posted in: Survival Mode
  • 0

    posted a message on MINECARTS Mk. II *Latest Update: 9/1/2011*
    This is an awesome idea, I definitely support this! :iapprove: I might be able to mod this into the game when I finish understanding the workings of (and locations of things in) the client code (I've been doing some decompiling and created a BCEL-based interface + getter/setter inserter for a simplistic modloader thingy), but the physics involved may be difficult to put into the code :SSSS:

    Quote from lilbuddha212 »
    [...] What i would really apreciate though as an addition is a method of joining minecarts together perhaps anattatchable latch on either end of a cart causing carts to stick whe they touch, i realise some of the modifications you propose would make this system invalid but i feel it all fits into the "tech tree" concept and players would eventually learn that they nolonger need it, but it would be useful for building an actual train system(primarily for carrying large ammounts of cargo from a to :cool.gif: [...]


    Also a very good idea. I think the carts may need some space in between where the couplings would be, since they turn in near 90 degree angles (single-block turn). When they turn corners in tight spaces, there is already graphical collision with the walls due to their size, therefor if they were joined with no space, I'm sure there would be some other, worse problems with the objects' models going through each other.
    Posted in: Suggestions
  • To post a comment, please or register a new account.