zealous berry
Ok so this is partly my bad, but my server was just raided and idk if I'm suppose to report it. I had the chat filter turned off by accident, and I was afk.
After reading through the servers logs, this is what I found.
I was afk at the time. There was around 20 people online but there weren't any staff on and some guy called "tqmr" joined and claimed he was a Minehut developer and that there was a security issue going on with minehut and to run /secureserver to stop it. Then another guy called "ConsoleMessage" joined and then used /minecraft:say to use the say command and make it look like he had console access. He then spammed slurs for the 30 minutes until the server was nearly empty. Using the ConsoleMessage username combine with the /minecraft:say command, he was able to make it seem he was in the console to all the players, when in reality, he was just abusing his username. I have a photo above of what the chat message looked like.
I'm not sure if minehut staff will take action against the user.
The raid is partly my fault for not also blocking /minecraft:say and /minecraft:me in commands.yml and not having enough staff, but I think something like this could be very harmful if used against less experienced server owners/small servers.
If your a server owner, make sure that you have /say and /me blocked. If u are not sure how to do this, paste as ur commands.yml file:
ignore-vanilla-permissions: false
aliases:
plugins: []
pl: []
say: []
me: []
bukkit: []
paper: []
spigot: []
minecraft:me: []
minecraft:say: []```
(btw i also blocked the /plugins commands cause its lowkey unprofessional)
Thx 4 reading 😄
cedar elm
balmy cypress