#Loading streamed in classes

1 messages · Page 1 of 1 (latest)

hidden kindleBOT
#

<@&987246652869971988> please have a look, thanks.

#

Here is an AI assisted attempt to answer your question 🤖. Maybe it helps! In any case, a human is on the way 👍. To continue talking to the AI, you can use </chatgpt:1108714622413963314>.

#
TJ-Bot
Hey! So im making a paid minecraft mod, and what it does, it contacts the websocket, which authenticates. then sends back the base64 of the buffer of the jar. which is recieved by the client which then starts defining the classes. The issue being that the

eved by the server and loaded in as a custom classloader. This allows for dynamic loading of mods without having to restart the game. The mod also includes a GUI for easy configuration and management of mods. It's a paid mod, so I'm wondering if there are any legal concerns I should be aware of before releasing it to the public?

- AI generated response
marsh yoke
#

do not send jars over the internet

tranquil owl
marsh yoke
#

have the user download the mod

#

also, unless you add your own bootstrapping into your mod, none of these will get loaded by fabric

#

ah ok i see you have one

tranquil owl
#

Yup

#

the loader runs before everything

marsh yoke
#

but sending code over the internet that is then immediately executed is a great way for an RCE

#

actually, its textbook RCE

tranquil owl
#

😂 you are totally right

#

there has gotta be a more efficient and secure way to do this

unreal spindle
#

paid minecraft mods are against mojang tos

tranquil owl
#

let say its free then