you could download the same plugin you ran the backdoor from in the first place, continuously improving the exploit
#general
normal surge
gilded nova
Maybe thats how big bot nets Are made
normal surge
well i dont think they're spread using that but they do use that idea of visiting a place to get updates / instructions
gilded nova
Yeah
normal surge
scary stuff
normal surge
nope, it could happen completely invisibly
normal surge
hehe it's not github's fault
normal surge
bye
gilded nova
yikes
short ginkgo
Question, does anyone know a plugin than can link discord ranks to luck perms? Has a certain discord role so they get a certain server role
short warren
DiscordSRV
short ginkgo
wait that does ranks? with lp?
short warren
Yeah ask their support about it
You might need the extra contents packs or something
Check pins for their support server
short ginkgo
I am already in it, I already use the plugin haha just did not know about this feature
short ginkgo
It is on there install page haah
forest helm
Yup DSRV has rank sync. You just need all your players to link their account with /discord link, then with about 5min in the config you can have it set up
ah yup you found it
short ginkgo
ah ICIC I just need the role ids. It iis not my dyscord so ill have to wait until shes on
actually really simple
forest helm
you don't need to be admin to get role IDs, anyone can see them if they know where to look
(i.e. I'm not proper staff yet I can still tell you the LP member role's ID is 420316139986485250)
Just right click the role and copy the ID
forest helm
(you may need to enable developer mode in appearance settings if you haven't done so yet to see that)
gilded nova
Witchcraft
forest helm
yup super easy
short ginkgo
One thing that confuses me is how does discordsrv just work with that? it must detect luck perms and know what to do
complicated
short warren
Lp api?
forest helm
It's actually not super hard. You know vault? Along with providing prefixes, it can also be used to change a player's group
so as long as the perm plugin you're using supports vault, it's actually really easy to support
(although we do indeed have some LP-specific integrations courtesy of luck, namely some contexts i.e. is linked, is boosting, and each role they have)
forest helm
ahhhhh don't remind me about the recursive nulls
but I don't think luck made that lol
Luck did make DSRV's contexts iirc
gilded nova
:0
forest helm
short ginkgo
apperently it only works the one way
so you can have a mc rank give them a discord rank but not a discord rank give them an mc rank...so rip...
So back to my origional question, does anyone know a plugin that will sync discord roles TO mc server. So If they have sub club in discord it makes them have subclub in game
rigid widget
add subclub as a parent of default group with context of discord group=subclub
Using dsrv contexts
gilded nova
Hello Larry
rigid widget
Fefo, we meet again
short ginkgo
discordsrb contexts?
...lost me again
also subclub is parent of a different group but still
like literally just put dsrv in the contexts tab?
short ginkgo
oh
ok so I can see how to kinda add a perm but not an actual role
or no
still confused
yea so I could do cmi.command.warp with context discordsrv:role sub club but thats just a specific perm not an actual rank
warm thorn
can anyone help me with making permission groups. I want to make a default and a mod and allow them to use certain essentialsx commands but im kind of confused on how to do it
outer vesselBOT
LuckPerms wiki
warm thorn
thank you
short ginkgo
I am still confused lol
rigid widget
yea so I could do cmi.command.warp with context discordsrv:role sub club but tha...
group.subclub as a permission node will give the player inheriting it that group. Also, you can add contexts when you add parents or set parents to players in the command
short ginkgo
so does that even need the srvs group sync function or this makes lp do it since it is just looking for if the person has the role
rigid widget
that's something I can't confirm or deny but you can easily try
short ginkgo
so if someone is in the group defualt but has the permissions group.subclub they are essentially in the group subclub but still technially in default?
rigid widget
a player can easily have several groups
luckperms in no way forces anyone to have only one
warm thorn
can you make a default group somehow?
outer vesselBOT
LuckPerms wiki
rigid widget
if the player had the permission group.a on their user, it's like they directly have the group. If group default has group.a it's like group a is a parent of default and they inherit a's perms through default @short ginkgo
short ginkgo
Makes sense
I did this before accidently
group a has a higher weight so if you have that true you have that group essentially
rigid widget
even if it has lower weight you have that group essentially
weight only deals with conflicting perms
!weight
outer vesselBOT
LuckPerms wiki
short ginkgo
oh ok and prefixes
rigid widget
prefixes are stored as permission nodes but their weight calculates which displays
warm thorn
i think im doing this right but have no clue lol
short ginkgo
lp is incredily complex..... but it is also crazy versitle
warm thorn
so i have essentials plugin.... if i do lp group default permission set essentials.tpa it will allow everyone to use teleport right?
rigid widget
it will allow everyone to use the /tpa command
it will not allow /tpaccept though, that's another perm
warm thorn
i just wasnt sure if i need to import essentials or somethin
rigid widget
do you have essentials on the server?
warm thorn
yes in the plugins
rigid widget
that's all you need
rigid widget
np!
short ginkgo
so heres what I did
warm thorn
op will have acess to all commands no matter what right
rigid widget
typically, yes
short ginkgo
in default I put the node group.littlestars with the context discordsrv:little stars, In the group littlestars I put the node group.subclub with the discord context. Since they all inherit then I guess they could all go in deault but still
rigid widget
discordsrv is not a context type you can use afaik
here's a hint: log onto the server as a player, run lp user <you> info and look at the available contexts
short ginkgo
I meant the actual context for the plugin, it is listed in the editor
rigid widget
screenshot? I'm not sure what you mean
short ginkgo
context is discordsrv:role
short ginkgo
oh I see what you mean, I typed it out wrong
apperently they are adding a feature in the next update of discordsrv that will allow for to server one way sync but.... this is really easy once you know it so ill stick with this
latent tendon
And my patreon is gone again
warm thorn
hey larry, i think i got it working
latent tendon
Gone*
short ginkgo
this causes and inheritence loop.... is that a bad thing? it has not caused issues yet. group c inherits group a and b but group b already inherits group c
gilded nova
It isn't ideal but there are measures to counter that when running calculations
You would want to get rid of any circular inheritances if possible
gilded nova
It isn't *ideal* but there are measures to counter that when running calculation...
By that I don't mean it's 100% expected behavior, I mean that it won't crash your server lol
short ginkgo
what I did was for the discord perms in default I put it so that if you have discord role X you get the next rank up, then in the next rank up I put it so that if you have role Y you get the next rank up. I probably could have just put all the discord things in default and it would have worked the say without the loop
so in group 2 you can technically have group 3 but group 3 inherits from group 2
rigid widget
just put all the discord things in default and it would have worked the say without the loop
^^^^^
do
short ginkgo
Lordy this is powerful, if somone gets banned from discord they would be back to default because no roles, couldn't talk and plus they would be server banned automatically as well. Found out that a reliable ban system is really important the other day. Also yea ill fix that tmmrw, then no more loop :)
warm thorn
idk if anyone knows but im using essentialsx to backup my world every hour. how would i restore to one of the backup folders?
normal surge
stop your server, and replace your original world file with the new one
normal surge
usually yes
warm thorn
hmm
normal surge
i don't know how essentials backs stuff up so idrk but you should make sure you're doing that
normal surge
you should take a look inside the backup folders you've been making to see what exactly is inside
warm thorn
wait i think i can change the command to world_nether
possibly
because i made a backup.bat and it backs up 'world' maybe i can do 'world_nether' and run the command in the essentials config
normal surge
oh the plugin is running a batch file?
warm thorn
yeah
normal surge
then you should definitely be able to back up the nether
normal surge
no problemo
warm thorn
do you know how to make the server ip a domain instead of the actual ip?
normal surge
yeah, all it takes is purchasing a domain from a provider
warm thorn
that expensive?
normal surge
not particularly, if you do it right it'd only cost you $1 for the first year, and $15-25/year after that
warm thorn
when people go to connect do they need the ipv4 of the computer or the public ip?
normal surge
players will only need your domain address
warm thorn
if i went the domain route
normal surge
you'll have to give the domain provider your public IP though
warm thorn
but like friends can connect through public ip after i port foward?
normal surge
so if you got example.com that's all any player would need to connect to your server
they could still use your regular public ip if that's what you're asking
normal surge
no prob 
warm thorn
trying to figure out luckperms to make different ranks/groups was struggle until i got linked the website
normal surge
yeah the wiki is extremely helpful
you can also run !help in this discord for some nice links to different parts of the wiki
!commands
outer vesselBOT
LuckPerms wiki
normal surge
!help
outer vesselBOT
wicked kestrel
!bungee
outer vesselBOT
LuckPerms wiki
warm thorn
@normal surge do most plugins update automatically or do i have to do that and what about when the version of minecraft changes
normal surge
most plugins you'll find don't update automatically, and that's a good thing
as far as versions update, it's a good idea to get plugin updates each time but you'll find a lot of plugins will work fine across several versions
normal surge
gnight
gilded nova
What is the best way to backup your server/network?
normal surge
the most straightforward way is to have a script run regularly to 1) stop your server, 2) copy your world file somewhere, 3) start your server
rigid widget
- copy world and plugin and settings
normal surge
ah yeah xd copy everything you can't download online
gilded nova
What would be an effective script for this?
gilded nova
Self
normal surge
are you on windows or linux
gilded nova
Windows atm
normal surge
idk how to automate batch scripts on windows so i cant help you there, but there are definitely lots of tutorials online
gilded nova
This restart script would be in another .bat file than the run.bat right?
Or in the same?
normal surge
you can make a script that starts the server and one that stops the server
and just call on both of them from the one that backs up the world
gilded nova
I will look more into it
My world file in my survival server is like 50gb will the backup take a long time?
normal surge
it all depends on where you're copying it from / to
but 50gb is a lot either way
if you're moving it to a different directory on the same drive, and you have an ssd, it could take a minute or so
rigid widget
usually backups compress things lol
so they don't take the whole space
things can be compressed very severely and still be recoverable
gilded nova
I only have an SSD
rigid widget
only? ssd is better than hdd
gilded nova
How Can i compress it?
normal surge
larry what compression would you recommend for backups 
gilded nova
only? ssd is better than hdd
I meant i dont have any HHD
gilded nova
Yeah exactly
rigid widget
i have a friend in another mc server who would likely know
normal surge
well if it were me and i was on a windows system, i'd probably just zip the file
rigid widget
that's definitely not as small as it can be
normal surge
well it's low effort and reduces the size by maybe 40%
rigid widget
yeah
normal surge
i think it's a good compromise
gilded nova
Good and safe but could get smaller
rigid widget
yeah
normal surge
if you want to make it super compressed i'd say you want to separate copying the backup from actually compressing it
so that you don't have unneeded down time
rigid widget
helpchat or Syscraft would be a decent place to ask, it's in the pins. i help run the latter but there are some really knowledgeable folks there
gilded nova
I have to go but i will try to find backup script and compression information and share with you
rigid widget
ok
rigid widget
@gilded nova re: compression: zstandard (zstd) is apparently the best
radiant lantern
Yeah that aint mine
forest helm
nah aber admited to owning it a minute later
still, pogbun.com feels like the kind of domain you might own, knowing your love for them
also wtf you pinged me yet clippy didn't yell at you...is clippy broken?
bold sparrow
Good and safe but could get smaller
Torrent?
forest helm
It doesnt yell for replies anymore
wait why on earth did luck do that lol
trail shuttle
¯\_(ツ)_/¯
forest helm
hmm
trail shuttle
Probably found it annoying all the clippy messages
Since afaik pings are for some reason enabled by default in replies
drowsy quest
Regarding the backups:
- stopping the server is not necessary. Just running
save-offthen starting the backup is enough (and when it’s donesave-on) - Gzip is generally a good compromise between speed and compression (that’s why Webservers use it). If you want to go for file size then use xz with the options -9 (max compression) and -e (extreme compression)
Getting xz for Windows is a bit tough. As is gzip
7zip uses gzip internally. So I’d recommend that
bold sparrow
I’ve downloaded a torrent which was only a few gigs and contained 200
drowsy quest
Since afaik pings are for some reason enabled by default in replies
I believe that’s fair btw
But yeah I’d be shocked if you couldn’t differentiate between a reply Ping and a random ping
And I mean it always was the goal to allow pings to reply. So now that there’s a good way it’s finally as it should be
@trail shuttle testing
outer vesselBOT
Hey BrainStone! Please don't tag helpful/staff members directly.
drowsy quest
Ok. Yeah. Clippy still works
drowsy quest
wait why on earth did luck do that lol
See above
rigid widget
Y'all saying if someone replies to my message and leaves pings on, it doesn't yell? Are ya sure?
forest helm
correct
drowsy quest
Y'all saying if someone replies to my message and leaves pings on, it doesn't ye...
There you go
@rigid widget but this triggers it
outer vesselBOT
Hey BrainStone! Please don't tag helpful/staff members directly.
rigid widget
Ffs it was the one thing I liked that Clippy still did ;-;
forest helm
see here larry #github-spam message
rigid widget
Ty _11
drowsy quest
Ffs it was the one thing I liked that Clippy still did ;-;
The way it is right now is how it was supposed to work from the start
Just back then there wasn’t a way to recognize replies
rigid widget
Well yes, people can one-click turn off the ping in a reply tho
It's not impossible, it's even less difficult there's a button for it
drowsy quest
If I was still clippy protected I’d be happy about it. Because after all I like being informed of replies
trail shuttle
Discord should've made it so it's disabled by default
rigid widget
It's not a big deal tbh, I can live
drowsy quest
I think it’s fair the way it is. It’s also in line with their design to rather ping than not
And I do think that’s a good call
torn lynx
hello
you know this permission ?
/lp user Luck permission set test.permission land_area_trusted=yes
trail shuttle
?
trail shuttle
!nw ?
outer vesselBOT
rigid widget
/lp user Luck permission set test.permission land_area_trusted=yes
You're setting that permission on a user named Luck
torn lynx
no, myplayername
i write this : /lp user playername permission set test.permission land_area_trusted=yes
rigid widget
If you're not specific then nobody can help you, sadly
test.permission doesn't do anything
rigid widget
You need to specify an actual permission node
torn lynx
my player name is kiltzor
rigid widget
Like essentials.fly in your example command, instead, would allow people to run /fly if they were in a land area where they were trusted
rigid widget
Replace test.permission with an actual permission node
Each plugin sets its own permission nodes
For Lands, it's https://github.com/Angeschossen/Lands/wiki/Permissions
torn lynx
so i write this : /lp user kiltzor permission set lands.bypass.fly land_area_trusted=yes
?
rigid widget
That would allow them to bypass fly in a trusted land area yes
torn lynx
ok thanks bro i try
gilded nova
<@456226577798135808> re: compression: zstandard (zstd) is apparently the best
So i should use zstabdard to compress my backups?
gilded nova
Is this a good backup script? i just found it and it says it will integrate 7zip to zipping the contents
gilded nova
Who else hugh asf
gilded nova
@gilded nova
sleek token
What plugin do I need to make a luckperms role show up in chat and tab list?
gilded nova
- Vault
- A chat and tab plugin
!chat Check the second link in the embed, it has a few suggestions for those
outer vesselBOT
sleek token
thanks!
sleek token
When I add a permission for my trial mod group the GUI doest pop up when using the command. the permission is finvsee
drowsy quest
I was thinking about making LP work as a single jar.
What do you guys think about that?
short warren
like making bungee/bukkit work on one jar?
would that work because if so that would be pretty great
trail shuttle
Wouldnt that make the jar large?
gilded nova
jarge
short warren
~0.006gb shouldnt be a huge issue
short warren
better sense of scale when using gb imo
rigid widget
why is it lookin in luck's repo for PR lol
forest helm
Luck has a lot of stuff in his repo lol larry
gilded nova
I can access it just fine from Chrome 😦
the pom I mean
but this is windows being shitty
because if I run gradle on WSL it builds just fine LMFAO
it happens too often sadly lol
red canopy
on our or in our
sleek token
How do I make so a normal user on my server can't get all the commands as a suggestion like this:
forest helm
That's on the other plugin / your server software's end, we don't manage tab completions (except for our own commands)
gilded nova
Well if the other plugin is properly made, setting the corresponding perms to false would suffice
But ¯\_(ツ)_/¯
red canopy
did you have to code in all of the suggestions for lp?
or does MC have like an automated intergration thing?
forest helm
yes and no
red canopy
xD
gilded nova
aka Yesn't
forest helm
MC has completions (otherwise how would your client have them), but there's a lot going on at LP's end for handling perms and coloring and stuff
red canopy
i know the clicky stuff and advanced completion stuff is custom
forest helm
(it's actually quite a pain, Luck's written an entire library just for doing completions)
sleek token
Do you guys know how to fix it tho?
red canopy
Luck is Lucky to have the knowledge
gilded nova
The way it's done is quite amusing
sleek token
Because I don't know what plugin causes it
forest helm
If users don't have permission for the LP command, they won't see it in tab complete
sleek token
I changed my group to default but I still saw it
gilded nova
are you opped?
gilded nova
yeah when testing as how your audience would play, do it like that, because I doubt they will have op lol
gilded nova
lol
sleek token
Do you guys have any clue on how to fix it for other plugins, when they are on by default?
gilded nova
No idea, it depends on each plugin individually
Or you can use a suggestions blocker which more often than not cause issues "wHY cAnt I SeE SugGesTIonS"
outer vesselBOT
Hey BrainStone! Please don't tag helpful/staff members directly.
red canopy
I bet brainstone has an article on "Why you shouldn't use a suggestions blocker plugin"
drowsy quest
What's that even supposed to be?
drowsy quest
I'll never understand why anyone would put effort into removing useful information
gilded nova
if i set these two to -> 0 would it stop or disable the annoying messages in console ?
moved-wrongly-threshold: 0.0625
moved-too-quickly-multiplier: 10.0
timber dome
so most servers are 1.15+?
gilded nova
rigid widget
@brazen cradle ?
upper depot
D:
timber dome
our developers want the network to be on 1.8 universally
brazen cradle
i fig it out
gilded nova
🤢
timber dome
they say for the duel server, pvp, factions and practice server
brazen cradle
@rigid widget i got it could not figure out how to link my patron to here
outer vesselBOT
Hey LynxError! Please don't tag helpful/staff members directly.
trail shuttle
Viaversion, viarewind
timber dome
correct, but who would play any other game mode on 1.8?
nobody
even with viaversion and viarewind theres the server still lacks half of the modern minecraft blocks
brazen cradle
i have a off question i run a server more for fun/hobby... i dont have many players,,, i started back on 1.12.2 do you think i should upgrade to 1.16.4 or fresh install?
trail shuttle
What kind of gamemode
brazen cradle
spigot.....
short warren
spigots a server software not a gamemode
brazen cradle
o lol
trail shuttle
Said server first edited my msg
brazen cradle
i have a SMP/Skyblock
upper depot
They edited their message
timber dome
where can i look to recruit more developers?
trail shuttle
Advertisement is a nono
gilded nova
smh my head
brazen cradle
sorry i did not know
gilded nova
trail shuttle
I'd say update to 1.16.4 paper/tuinity
trail shuttle
They edited their message
BD bad
upper depot
nah
brazen cradle
i guess game mode would be smp?
trail shuttle
Ye should update to what I said before then
timber dome
@trail shuttle do you suggest i upgrade to 1.16.4 aswell, and just keep the more combat focused game modes on the old combat model?
outer vesselBOT
Hey carti! Please don't tag helpful/staff members directly.
gilded nova
ok clippy
trail shuttle
Uh probably?
short warren
yeah you could use OldCombatMechanics or something if you fully want to use 1.16.4
timber dome
its not just old combat mechanics its like all the old game physics
brazen cradle
thank you all for the feedback
short ginkgo
need to restart server to change discordsrv prefix source but otherwise i should be good
craggy plank
@bold kayak dis is probs wt u need https://pixelmonmod.com/wiki/Commands#Permission_nodes
bold kayak
ty
gilded nova
you need to be server op to place and use command blocks
are you sure you are op? keep in mind that having * perm is not the same as being /opped
mk
outer vesselBOT
Hey gigalegit-! Please don't tag helpful/staff members directly.
gilded nova
no clue tbh
thick storm
please help i keep getting this really long error message every second
outer vesselBOT
Please use https://bytebin.lucko.me to send files in the future. I have automatically uploaded undefined for you: https://bytebin.lucko.me/Zalu5uiLd5
thick storm
hello?
gilded nova
is a virtualbox of a debian linux completely the same as an pc with it ? If not what are the differences ?
trail shuttle
One is a vm, the other is not
gilded nova
so no difference except that its virtual
gilded nova
would be logical if there was a difference but.. i want to know just in case
rigid widget
With the box you have all the control and power the box has, with a VM you have just what you get
modest compass
it happens when i do /vanish ;-;
well... usually you will vanish and become invisible
gilded nova
so the only difference is hardware?
thick storm
no sh!@ sherlock
gilded nova
ok
modest compass
no sh!@ sherlock
well it depends on the plugin handling the command as well so...
sleek niche
trail shuttle
Vim sucks
sleek niche
I just use nano whenever I am editing files with the command line, it is just so simple
drowsy quest
!legacy
outer vesselBOT
Sorry! I do not understand the command !legacy
Type !help for a list of commands.
drowsy quest
!help | grep legacy
outer vesselBOT
gilded nova
lol
latent tendon
There goes my patreon
gilded nova
f
gilded nova
https://paste.gg/p/anonymous/c44506b372db4e4584e2ce516ed22578 :
java.lang.IllegalArgumentException: Team 6e34380d-e8d9-4 already exists in this scoreboard
This only happens when i leave the bedwars server and joins the lobby server. For me it clearly is something from rocket-1 which is the problem (which stands in the error) i also discussed this with the developer of the plugin i have in lobby for
scoreboard (deluxehub 3) and its not their fault.
Rocket-1 plugins: ScreamingBedwars/Bedwars, Essentials, KohiKB*, Luckperms, Multiverse-Core, Nocheatplus, Oldcombatmechanics, Placeholderapi, ProtocolLib, SBAHypixelify, Vault, ViaBackwards, ViaRewind, ViaRewind-Legacy-Support*, ViaVersion, Voidgenerator and Worldedit
I thought it was the bedwars/sbahypixelify plugin, but when i contaced the, they say when you leave you also should get unregistered from the scoreboard.
I have looked up this problem for some days.
How do i fix this?
vocal rivet
https://xkcd.com/378/
nano or else no no
sharp void
https://paste.gg/p/anonymous/c44506b372db4e4584e2ce516ed22578 :
java.lang.Illeg...
This team exists already
No issue from luckperms
Check if this team exists
latent tendon
@twin warren well its weird like, if u paid for sample on 4oct, why doesnt it end on 4 nov then
outer vesselBOT
Hey Thrasilias | TRose2000! Please don't tag helpful/staff members directly.
gilded nova
To be fair Luck, your "description"/about does say "If you'd like to make a one-off donation [...] you can sign up to become a Patreon at the amount you'd like to donate, and then cancel the subscription afterwards to cancel any further payments."
twin warren
Ya? You can
But the discord roles are automatically applied by Patreon, and will get removed as soon as you stop being a patreon
drowsy quest
Hey Luck if you're around.
I recently started work on turning my code that allows a single plugin file to work on multiple platforms and download dependencies at runtime without relocating them and without conflicts in the classpath into a library and I could fairly easily apply that code to LP
So in short it would mean there's just a single plugin file for all platforms of LP (including legacy bukkit)
Dependencies would still be downloaded at runtime (only once of course)
If you're interested in how that would work out, let me know
short warren
@white idol villageroptimiser is useless 1.14+ iirc
white idol
<@!629052228992368650> villageroptimiser is useless 1.14+ iirc
I used to have villager lag till i used that plugin
hey
how to run Spark to indentify what is causing the lag?
Im mean i have like 35-50mspt
and then suddenly goes up to 60-70 for a few seconds
and goes down again to 35-50
I've made a sampler over 400 ticks
And the lag is from "Unsafe.park"
Whats?
gilded nova
what website should i use to get a free domain ?
trail shuttle
Google is a thing fyi
normal surge
i think it's much better to spend a buck and get a real domain xd
normal surge
in that case i guess freenom would work
gilded nova
what would people see if they search my domain / subdomain up in a dns lookup ?
if i setup with cloudflare and tcpshield to
normal surge
that depends on the whois information tied to the dns
gilded nova
so.. it depends on what information i give or ??
normal surge
it depends on the provider, some will hide the information that you provide, and others wont
gilded nova
the providers is the domain hoster so in this case either freedns or freenom right ?
normal surge
yeah
gilded nova
ok i will try to find out if they do, and if i would rather use one that hides it
normal surge
that's a good idea
gilded nova
i also think if you setup with cloudflare it shows a cloudflare domain instead of your but.. idk atm
normal surge
wdym by 'a cloudflare domain'?
gilded nova
i mean if you connect / setup your domain into cloudflare
Editing WHOIS records
Cloudflare redacts WHOIS information from your domain by default. However, we do store the authentic WHOIS record for your domain that is first set during the transfer flow. The contact information is shared across all domains in your Cloudflare account.You can edit the contact information for all domains in your account. To do so, navigate to the “Configurations” tab once you login to Cloudflare and before you select a zone. Under Preferences, select “Edit WHOIS” and you can modify the record. You can also reach this screen from the Domain Registration card in the dashboard Overview page of any domain registered with Cloudflare.
normal surge
yeah, they hide your actual information by default
so you should be safe if you use them
gilded nova
but i dont quite understand exactly
if i connect my domain into cloudflare do i transfer my domain into their service and has nothing to do with freenom anymore or do i just manage my domain with cloudflare ?
normal surge
if freenom allows you to change the nameservers that your domain uses, then you should be able to use cloudflare to manage your domain
gilded nova
but freenom is still the providers ?
normal surge
yeah, afaik
i don't know much about freenom though so i'd say the best option for you is to just experiment
gilded nova
yeah, they hide your actual information by default
do you think this is the same in reverse? like if they search up my public ip will they see this ?
normal surge
are you asking if someone enters your actual public IP in the search bar, will the domain name you registered show up?
gilded nova
basicly
normal surge
if that's the question then no it probably won't
gilded nova
what if they search in a lookup tho ?
normal surge
still no
gilded nova
oh okay
normal surge
more than one domain can be tied to a public IP
and there's no easy way to find them all, that's just how it is
gilded nova
but when i register a domain i need to type my public ip right ? not the ipv4 or ipv6
normal surge
your public ipv4 IP is what you need to enter
gilded nova
so the one when i do ipconfig in cmd ?
normal surge
no
gilded nova
or when i search public ip in chroome
normal surge
the one you get when you visit a "get my public ip" website
normal surge
yes because it doesn't run on your computer, it's not a program
it's a cloud service
gilded nova
you have helper me so much
thx
now i will use freenom as provider, cloudflare and tcpshield as protection
gilded nova
tcpshield has a tutorial for cloudflare + tcpshield so wont be hard
normal surge
're going to run more than one server you should moving to linux at some point
that's good to hear
gilded nova
you mean bungeecord ?
gilded nova
would it be better to run my server on an virtualbox debian than windows 10 ?
normal surge
... is the virtualbox running on windows?
gilded nova
yes
normal surge
then definitely not
gilded nova
ok
normal surge
a main benefit of linux is it uses less resources compared to windows
gilded nova
i know
normal surge
if you're still using windows then you lose that benefit
gilded nova
bloatware and stuff
normal surge
are you hosting on the same computer you use for daily stuff
gilded nova
yes
normal surge
that's smart
if you want to start using it for real, the best way to get a benefit from it would be to find a separate computer like an old pc to run your server on
gilded nova
Transfer to Cloudflare
Domain transfers tell your registry that a different registrar can now set those authoritative records for you. The relationship is based on trust. Registries only trust one registrar, at any given time, to make changes on your behalf.Transferring a domain to a new registrar informs the registry that they should instead trust that new registrar to modify information. The process requires some steps at both your new registrar and the one you are leaving. Each registrar handles transfers a bit differently, but in general they follow a pattern based on rules set by ICANN, the organization responsible for regulating domain registration.
Is this just for domains or also subdomains ? so i basically transfer my entire domain ?
normal surge
you can only transfer domains, not subdomains
gilded nova
ok
twin warren
If you're interested in how that would work out, let me know
Hey, sounds cool
I’m not keen on having all platforms in a single jar, much prefer individual artifacts per platform
Also, tbh I’m pretty happy with the current system. Doesn’t really have any big flaws IMO and also is without bugs for the most part! So I’m not particularly eager to change just for the sake of it
drowsy quest
I could throw together a PR so you can check it out. I think that would greatly improve user experience. Also with the system individual jars are still possible
potent prawn
does sound kinda cool, though we'd still get the people thinking that it only needs to be installed on the proxy
gilded nova
How does it play with legacy? Is it shaded in? Because gson is already available on 1.8.8+
twin warren
I'm not gonna stop you from PRing if you want - but just to stress, I'm very reluctant to change a system that works & that I'm happy with :p
short warren
would at least be cool to combine legacy/bukkit if thats possible, might reduce some confusion while downloading from spigot or whatever
drowsy quest
would at least be cool to combine legacy/bukkit if thats possible, might reduce ...
That won't be possible
drowsy quest
How does it play with legacy? Is it shaded in? Because gson is already available...
The missing dependencies just get loaded at runtime
gilded nova
including gson?
drowsy quest
Or well, I suppose you could combine any amount of versions into one. Nevermind then unix. That would work too!
But I mean stop at just two when you can have all?
And yes of course
Why not?
gilded nova
That won't be possible
Because if gson is downloaded and relocated at runtime too, then that is completely possible 😛
gilded nova
uuh.. why not
drowsy quest
That's actually quite crazy how it works under the hood
In short I use my own classloader to isolate libraries against the outside world
gilded nova
ooh
drowsy quest
I mean we're not talking about some theoretical concept or anything
I have actually implemented it
It's just not separated into a library yet
But my very WIP plugin AuraBan uses that technique
twin warren
LP does the same already, just only with select dependencies
drowsy quest
It even automatically download dependencies of dependencies I declare to download
gilded nova
twin warren
two or more different versions of the same class loaded at the same time is not an ideal situation
which I why it's only used when absolutely not possible to use a different technique (i.e. relocation)
the situations when it's not possible are: a) before the relocator lib has been loaded b) for libraries that use native code
gilded nova
Is it any more ideal than relocation for the common use cases?
drowsy quest
I mean it means jars don't need to be modifed and can be verified much more easily
That's why I personally prefer the "isolate everything with magic ClassLoaders" solution
gilded nova
mm
twin warren
except that's bad because of:
two or more different versions of the same class loaded at the same time is not an ideal situation
so
really a case of picking the least worst :p
which imo is relocation
drowsy quest
Well what exactly is the issue if those duplicated classes nerver interact with anything outside of the environment?
twin warren
if they never interact then there is no issue. but if they do interact, then it is a big problem and very hard to track down
drowsy quest
When would they ever?
The API is the only interaction point and frankly you should only use java itself there
twin warren
this has actually been an issue in practice -- different plugins shading slf4j and not relocating:
twin warren
perhaps that specific issue is solved, but it was just an example of a problem that could happen.
drowsy quest
Well not quite. The fact that I isolate all libraries to myself makes it actually trivial
twin warren
not really, because you ideally want your libraries to hook in with the platforms logger if it provides slf4j
drowsy quest
Oh I think I have to mention that the classloader is written in a way that prefers classes from its own sources over those of the parents
So other jars can have shaded in whatever they want, as long as I load it in my classloader that has precedence
drowsy quest
not really, because you ideally want your libraries to hook in with the platform...
That's why I detect if it's on the platform or not before I load it in
twin warren
LP has done the same, but alas it is still a problem :p
drowsy quest
Because you load in stuff that is accessible to other plugins
Whatever I load in is only ever accessible to my plugin
twin warren
that's not correct -- LP is usually not the culprit when the problem occurs
drowsy quest
It's practically impossible for conflicts
I know
That's why I decided to write the ClassLoader in a way to first always check if classes it looks for are in one of the source jars I gave it
twin warren
I'm fairly sure bukkit's (Paper's) PCL also operates in the same way -- I promise that is not a magical fix all :p
drowsy quest
That means no matter what's inside another plugin's (or platform's) jar if I have it as well I prefer my version
No it doesn't
I looked into it
drowsy quest
I'm doing that even more agressively
twin warren
I'm not convinved
drowsy quest
I've tested it with plugins that shade in SLF4J in in a way that would typically break things
Then plugins that shade libraries that I use as well (different versions though)
Also for Sponge I wasn't happy with the MySQL driver so I loaded a newer version
All working great
twin warren
you have to be careful with that too -- your driver is most likely registered with the DriverManager on class static init
and will leak out to other plugins even if not visible to other classloaders
drowsy quest
That is correct. Though I've seen your recent fix to that so that can be remidied
Though the classloader magic is definitely not at fault here
twin warren
true, relocation is also vulnerable to the same issue
but it's a good example of unforeseen problems occurring form loading multiple versions of a class into the jvm
my argument is that relocation is easier to debug and prone to less issues, because the class name is different at least
there's not two classes with the same exact name, but actually different classes
drowsy quest
but it's a good example of unforeseen problems occurring form loading multiple v...
Though here the same issues apply to both relocation and magic classloader
twin warren
yes, I said that in the message above
drowsy quest
there's not two classes with the same exact name, but actually different classes
I mean you can still relocate
twin warren
indeed, but then why even bother with the hassle of isolating
drowsy quest
Exactly. Though I generally prefer only loading jars that you know what their hashes/signatures should be like
Because after all that means I can always verify them before loading them in
twin warren
that's fair, but when the loading/relocation code is open source and initial binaries are checksumed, I think that should alleviate most concerns
twin warren
Just once
drowsy quest
Ok. So I as a malicious plugin can just override a library you load in
twin warren
yes, in the same way that you could override any plugin sitting in /plugins/
drowsy quest
Well not quite
You know what hashes those plugins should be
And the jars can be signed
You need to remove the signatures from the relocated jars
twin warren
if you're going to that level of precaution, then it's not much of a stretch to just hash /libs/ and be done with it lol
drowsy quest
Yeah but what good would that do with the relocated jars?
twin warren
well they're only relocated once - so once that process has happened the hash will not change
drowsy quest
Correct
But you as a plugin don't verify that
I can and do
Minimizing the risk of code injecting while gaining more flexibility when it comes to using libraries
twin warren
that's because it's not LPs job to do so
drowsy quest
Since you're loading them into the classpath it's your liability however
twin warren
that... doesn't make sense lol
drowsy quest
I can use your plugin to have an arbitrary code execution as the user that runs the server
Which I would classify as a fairly serious security concern
twin warren
that's always going to be possible, no matter how many checks you put in place
ultimately, you can always just inject code into the server or into some other plugin and do whatever you want if you manage to get malicious code in somewhere
whether that's a plugin, or a lp library, or whatever
drowsy quest
Well putting a check in place that requires breaking a hash that no one has broken before vs. none is a significant difference
twin warren
so.. I just replace your plugin and then the check is gone..
twin warren
yes, in the same way that you can hash /libs/ and notice
if you were paranoid enough to do so
drowsy quest
Well yes and no
Let me explain
If I were to try to prevent code injections in a server there's a few things to do
twin warren
just... don't install malicious plugins? :p
drowsy quest
For example make sure all jar files that are in the plugin directory stay the same and new one cannot be added
Next you could argue that it makes sense to look for additional jars but not really because the relocation you deploy is not 100% predictable
So while the resulting jars always work the same the individual files can be a bit different
So there's no reliable way to ensure those files stay the same
twin warren
There is, because relocation isn't attempted if the files are already there
drowsy quest
For what I'm doing that is not an issue because I always verify the files
drowsy quest
There is, because relocation isn't attempted if the files are already there
Then I delete the file so it gets regenerated
And then it's different
twin warren
right, then you just reset your hash
in the same way you would need to whenever you updated a plugin
drowsy quest
But again I need to hash it myself
twin warren
you're going to need to do that anyway lol
drowsy quest
I have no external trusted source to know if the file is good or not
That is an issue
twin warren
there is never going to be an external trusted source unless all plugin authors signed their releases
drowsy quest
Well yes
twin warren
so that argument really does not apply
drowsy quest
The hash of the offical download is trusted to a point
twin warren
is it though?
drowsy quest
It's more trustworthy than not having any
twin warren
chances are that's where the malicious code is going to originate
unless you're planning to introduce it yourself!
drowsy quest
That's not what I meant
But if you want to verify files for integrity there's no point in comparing it to hash you did yourself
All that ever checks if that file got changed or not
Not if it's the file you want it to be
twin warren
For example make sure all jar files that are in the plugin directory stay the sa...
that's exactly what you said you wanted to do ^
drowsy quest
Verifying the integrity from an external source
twin warren
you can keep going a step further forever lol
drowsy quest
Yes that is true
twin warren
the point is to take reasonable precautions
drowsy quest
But again changing jars and loading them is super iffy
twin warren
which I'm doing already
drowsy quest
Because at that point it's trivial to inject code
Even when reasonable measures are in place
twin warren
the code is open source, you can go and see for yourself that malicious code is not being injected
drowsy quest
Not what I'm saying
twin warren
& people that download the binaries I make available on spigot and lp.net vs compiling themselves are trusting me to not sneak stuff in
drowsy quest
I'm saying that a malicous plugin can now just easily replace one of your jars and no one would notice
And if they pick one that rarely gets updated they can ensure their code gets injected even after all plugins were updated
Now to end the discussion
I'm not saying this is a major security concern
I'm just saying that I find it bad practice to not verify binaries you load
Especially if you can
gilded nova
yeah, they hide your actual information by default
What is WHOIS redaction?
WHOIS redaction removes all contact information categorized as personal data from the published WHOIS record for a domain (registrant name, email address, postal address). Fields will read “Data Redacted”. The nameserver, domain lock information, and date records for a domain are still available publicly.
Cloudflare still maintains the authoritative, unredacted, record of your WHOIS data. You can modify this information at any time in the domain overview tab of the Cloudflare dashboard.
Note: WHOIS redaction is not the same as WHOIS Privacy. WHOIS Privacy replaces your information with proxy contact information. Redaction removes it altogether
Doesnt this mean they just hides the information if you register or transfer a domain on cloudflare and not a subdomain ?
drowsy quest
And by doing it my way those files always can be (and are) verified
twin warren
I'm just saying that I find it bad practice to not verify binaries you load
I agree, which is why there are checksums 🙂
verified binary -> predictable relocation -> loading is realistically just as secure as verified binary -> loading.
drowsy quest
`verified binary -> predictable relocation -> loading` is realistically just as ...
I disagree here
normal surge
> What is WHOIS redaction?
WHOIS redaction removes all contact information categ...
you can't register just a subdomain
that text basically means cloudflare will not reveal your information if they are the ones managing your domain
twin warren
you've not given a good reason as to why it's any easier to exploit than the plugin loader itself
drowsy quest
For two reasons:
The relocation is not predictable
And second intermediate files are always bad as they no longer can be externally verified
twin warren
the relocation is predictable. the plugin loader itself is open to the same flaw since it cannot be externally verified either.
gilded nova
You two still going?
twin warren
there is no difference between you hashing a file from spigotmc on download, vs hashing a relocated file in the libs dir immediately after LP has started
drowsy quest
the relocation is predictable. the plugin loader itself is open to the same flaw...
I've had the relocator produce functionally identical but still different files under different conditions. For example different java runtimes and OSs produced different files
And what plugin loader do you mean?
twin warren
well it's predictable within the same runtime - good enough for me
the platforms loader
drowsy quest
I see
Again you can verify
You have an external source that can give you the expected hashes
twin warren
no you do not
drowsy quest
How so?
twin warren
because most authors do not sign their binaries
you have to download the file from spigot or whatever and hash it yourself
drowsy quest
I can still verify. By trusting SpigotMC to give me the file it claims it does
Which is still an external source I can use to verify
twin warren
that's exactly my point - you can trust LP to perform relocation safely on the first startup too
drowsy quest
No
Not to the same extent
There's no external source I could ask for a hash of such a relocated file
The fact that it's "just" a transformation doesn't change the fact
I have no way of ever knowing if such a relocated file is the file I expect it to be
twin warren
it's even better - the jar is literally created on your system.
if you trust the LP binary, then you can trust the relocation
drowsy quest
But since you don't verify the result you cannot
twin warren
the result does not need to be verified because the jar is created by using trusted code to transform a trusted binary
drowsy quest
Considering that relocation process has hiccups every once in a while (!libsdir says hi) that is not the case here
twin warren
there is no scope to inject malicious code there
those hiccups are filesystem i/o errors - it's not due to a vulnerability
drowsy quest
Yes but it shows that the results are not verified and can be meddled with
twin warren
No they cannot, it is not the same thing
drowsy quest
Meaning that even if all sources involved are trustworthy the result is not
twin warren
again - that is not due to a vulnerability.
drowsy quest
Well who says someone didn't inject something into the runtime that modifies data being written?
drowsy quest
again - that is not due to a vulnerability.
Yes but it creates one because results are unverified and unverifieable
gilded nova
you can't register just a subdomain
that text basically means cloudflare will n...
So if i for example go to freenom and take the subdomain "whatever.chilldown.tk" and i setup with cloudflare it wouldnt hide it because it doesnt manage it or am i misunderstanding rn ?
drowsy quest
nothing's gonna save you
Not really. There have been a few cases of malware operating in such a way.
Injecting themselves through a fairly open system and then depositing themselves in non obvious places
So even if you remove the original infestation they were impossible to remove
Or near to impossible
twin warren
Grown ups talk over?
i've put a lot of thought into making the system secure 🙂 think it's right to listen to and discuss criticisms
drowsy quest
In any case
I want you to understand that I don't think your system is inherently insecure
I'm just saying I find it iffy that it's unverified and unverifiable
drowsy quest
How are they contradictory?
twin warren
i've explained how it can be verified and trusted - if you don't see that then I am not sure what else I can do to show you
drowsy quest
There is a transformation and the direct result cannot be verified except by recreating the transformation on the very same system
And well that's not how proper verification works
In practice it's absolutely fine
But there are edge cases where the system breaks
But that's all really besides the point.
You can say what you want:
You are loading binaries without first checking if they are the correct ones
No matter the circumstances
twin warren
There is a transformation and the direct result cannot be verified except by rec...
This is a fair assessment I agree with
twin warren
But that's all really besides the point.
You can say what you want:
You are load...
This is also true, but it is no different to what the Bukkit plugin loader does
drowsy quest
In a sense
The JVM can verify signed jars
You out of necessity strip that too if it exists
twin warren
No, not in a sense - it is literally exactly the same.
drowsy quest
There's a difference here
A plugin author can sign a jar
But your relocated jars can never be signed
twin warren
That is true & a fair comment
twin warren
If I wanted to do signing, then yeah, I would relocate the binaries myself, sign the result, then make those available for download instead of the originals
In my opinion though, it is better to transfer the original library binaries (as released by their respective maintainers) over the net, and allow the plugin to verify those
drowsy quest
In my opinion though, it is better to transfer the original library binaries (as...
Absolutely
twin warren
it would be much easier for me to sneak malicious code in if I hosted and served the relocated binaries myself
drowsy quest
And that's why I'm quite happy to have made a system that not only doesn't need to modify any jars, which means I can verify them on download and prior to loading every time. The system is also capable of isolating a version of a library from another
And that all seamless
twin warren
full circle!!
drowsy quest
That was the point I was trying to make an hour ago
twin warren
😆
drowsy quest
Just saying
twin warren
on that note, I'm gonna head off
drowsy quest
Alright then
twin warren
nice chatting 🙂
outer vesselBOT
Hey BrainStone! Please don't tag helpful/staff members directly.
gilded nova
drowsy quest
❤️
gilded nova
ngl that was quite engaging
drowsy quest
But overall expect an universal LP jar to drop some time next week :3
muted topaz
hey, any chance you can help me with something in that plugin? i keep getting the 'command doesn't exist' even after i added the alias
ping me if you respond please
wooden wyvern
https://cdn.discordapp.com/attachments/604011113939468294/784265799254540318/2020-12-03_22.51.35.png
Peep Y Cord
violet rivet
hey, any chance you can help me with something in that plugin? i keep getting th...
Can you send the config file for your aliases?
teal lark
Hello,
I come to you because on my server, when I put the context "server: lobby" in the permissions, it works, my players only have permission to the lobby. On the other hand, if I put the name of another one of my servers (which is on my bungeecord), there the permission is not put at all, the player does not have access to the permission on the desired server.
Do you know why server-based permissions work with the lobby and not my other servers?
Thank you in advance,
Yours sincerely,
Adrien
trail shuttle
Screenshot lp info on thr server that it works on and the one where it doesnt
trail shuttle
!update btw
outer vesselBOT
trail shuttle
!latest
outer vesselBOT
trail shuttle
Set server option in the configs to the server name
teal lark
here ?
trail shuttle
Yes
trail shuttle
Still update tho
teal lark
I understand better why it didn't work! Thank you very much for your help 😉
teal lark
Still update tho
Yep
gilded nova
I'm so fucked right now
drowsy quest
Why?
potent prawn
well it's 1:14am in melbourne on a saturday so i have a few guesses as to why
quiet kettle
Hello can somebody help me?
I am trying to install phpmyadmin but it´s not working (mysql 5.7)
the website doesn´t work
or do you recommend any other thing than phpmyadmin?
potent prawn
you will need to provide more info than that. what have you done so far.
quiet kettle
you will need to provide more info than that. what have you done so far.
I´ve done sudo apt get install phpmyadmin
I have apache 2
and mysql installed correctly
that´s all
potent prawn
so what makes you think it doesn't work
quiet kettle
because on the website I type [serverip]/phpmyadmin
and It´s a blank page
so I can´t login
quiet kettle
a complete blank page?
yes
completly
the only thing that seems strange at console is this:
root@gamesups:~# sudo apt-get install php-mbstring php7.0-mbstring php-gettext libapache2-mod-php7.0
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Unable to locate package php7.0-mbstring
E: Couldn't find any package by glob 'php7.0-mbstring'
E: Couldn't find any package by regex 'php7.0-mbstring'
E: Unable to locate package php-gettext
E: Unable to locate package libapache2-mod-php7.0
E: Couldn't find any package by glob 'libapache2-mod-php7.0'
E: Couldn't find any package by regex 'libapache2-mod-php7.0'
An user told me to do that command
before that command I had like an error msg
potent prawn
when i said console i meant the browser console
quiet kettle
when i said console i meant the browser console
where can I look that?
potent prawn
really lol
quiet kettle
because on the website I type [serverip]/phpmyadmin
I just do that, it´s everything I know
potent prawn
ctrl shift i
potent prawn
just send what you see
potent prawn
wat
that's not at all what i asked lol
ctrl + shift + i on the browser when you try to go to the web page
go to the console tab
what does it say
send a screenshot
potent prawn
weird that it's completely blank
quiet kettle
yes
potent prawn
never installed phpmyadmin on linux so idk what else to suggest ha
quiet kettle
it´s anything better that phpmyadmin?
easier to install?
it´s not the first ttime installing php
onyx mason
Probably a php error, but by default phpmyadmin doesn't show errors unless you explicitly enable error showing
onyx mason
Make sure in your virtualhost you route the /phpmyadmin to the /use/bin/phpmyadmin (I don't remember right path, google it)
trail shuttle
It is good as in its working or?
quiet kettle
It is good as in its working or?
no, I mean that the path is good
the route I mean
it´s mysql 5.7 idk if that has sth to do with that
short warren
@gilded nova https://getbukkit.org/download/craftbukkit sketchy website, but here you go if youre desperate
gilded nova
short warren
what a shit host theyre partnered with though
gilded nova
xd
short warren
3$/gb on ram and no info on specs
gilded nova
xd
normal surge
here's a fun problem i've stumbled into
[LuckPerms] Failed to init storage implementation
[00:42:16 WARN]: java.sql.SQLTransientConnectionException: luckperms-hikari - Connection is not available, request timed out after 5000ms
i know for a fact it isn't LP's fault, but i can't find exactly why this is going on and how to solve it
for context this is happening inside of a docker container being run on a brand new machine i just set up
so i probably forgot something silly, i just have no idea what
drowsy quest
!errors @normal surge
outer vesselBOT
LuckPerms wiki
normal surge
ty 😮
left badge
Just a question. What is the best thing to buy for hosting a minecraft server, VPS from ovh or Apexhosting server?
forest helm
lets see if this still works
short warren
I misspelled bloom.host lol
forest helm
lol nope
short warren
and bloom.host and winternode and pebble and titannodes and
Haven't heard about titan or winter, are they any good? Pebble is just kind of meh unless you're just looking for a realms alternative
rigid widget
they've all got their reasons to go with them tbh
quartz hull
Hello, I'm currently making a prisons server and wanted to be able to make some of the mines like wood or clay but obliviously a pickaxe doesn't mine them instantly is there a plugin out there that anyone knows of that will turn a pickaxe into a shovel or axe depending on the block your trying to break i''ve seen this sort of thing on skyblock servers and I would really like to add this please let me know!
surreal aspen
https://www.spigotmc.org/resources/multitool-plus-1-13-1-16.62509/ seems to be doing this but you need to craft each tool separately beforehand
sleek niche
Brain, I'm not sure what you mean with the original editor there: https://github.com/lucko/LuckPermsWeb/pull/341#issuecomment-739236282
The one we use currently or the one before?