#general
3141 messages · Page 1802 of 4
oh my god can you children stop being children for 3 minutes
yes let's talk about 1.18.2
anyone know if there is a list for farms that break with paper? And or redstone contraptions.
i just finished retesting my state's new college app system and they didnt fix the thing i asked them to fix so i decided to passive aggressively write the code and said "here, copy paste it"

ez
not kidding https://codepen.io/algorithmjunkie/pen/vYeXVmZ
for ssn entry they literally have a random textbox and say "enter 9 digits doesnt matter if you include dashes or not"
and i was like "that is horrible UX, enforce the format"
So, basically, what you're telling me
and they're like "naw"
yea
No cause its bad
just yet another thing on the stupidly long list of stuff I probs shoulda watched over the years
i figured it was probably stupid
I still ain't watched GoT
I mean, my general view these days is that most of the "hype" films/shows are kinda shite
like all the new marvel movies, etc
yea, ive been using agoodmovietowatch.com and sorting by 'the very best'
hasn't failed yet
but im in the mood for pure stupid atm
and krampus might fit the bill
I remember the days of using rotten tomatos
i just go in blind
captain fantastic is a great movie, which i found on the site. 10/10 recommend if you havent seen it
high critics, high audience score - fuckin' great!
low critics, low audience score - this is a coin toss between being the a contender for the worst list
low critis, high audience score - prepare to watch one of the best shows released this year
oh, high critics, low audience score - don't bother
cat, that third line = gold
Bots nowadays do sport?
I think that most of the people reviewing films these days are out of touch with what the audience really wants, and theres been many cases of them being salty af over shows because they don't understand that
rip u
Not to mention, film makers forget the classic rule and then wonder why they get burned by real audiences: "you don't fuck with a classic!"
me surfing aws: 
page loads fine here
yyds
god that website looks so dated but clean
i honestly prefer sidebars
because you dont run out of space with those
i heard u like navbars so i put a navbar in ur navbar in ur sidebar in ur dropdown
sidebars get stupidly annoying when you're tryna deal with nesting, etc
not that nav bars don't have their own set of special little issues
but what do i search for!
I mean, the sole intent of that page is to showcase off their stuff to make you more interested in wasting time and cash toying with their platform
god i wish my school website had a seaech bar
nah
my school's ICT department's smart enough
it's just that the website is a wordpress clusterfuck
so it wouldn't even be that hard to implement a search bar
just add tags to the articles
i have no php
ez
if it works it works amirite
alright i feel bad bc almost every comment is worried about OP for valid reasons but i also laughed at the "post workout feast"
"1 Single Brazil Nut (from western Amazon)"
https://www.reddit.com/r/DecidingToBeBetter/comments/rdogqc/long_covid_created_the_optimal_diet/
lmfao
honestly i don't care which i use unless PRing to a codebase with strict formatting rules
i will refuse to PR to a codebase that says use spaces instead of tabs
they can fuck off to hell
oh god please do not remind me of shogicraft codebase
ok but real talk, 2, 4 or 8 space tabs
I mean, I generally care to maintain consistency with the existing file
windows defaults to 8 and i forgot how to change it lmao
4
2 is like, too narrow that stuff starts tending to blend too much
8 is just a waste of space
kinda like nah oh may
ur just odd and need to speak to a therapist
wouldn't mix well
dart enforces 2 space tabs and it just too smol
most tabs are multiples of 2 having an odd number makes it hard to align them
i prefer 4
luke I'm curious, did you ever figure out the RCE with log4j?
Yeah figured you would lol
oh ok nevermind you didn't figure it out
HotSpot uses tabs of 2 iirc but I've never heard of a language enforcing tab size
dart plugin for vscode changed my tab size everytime i created a new file
haha vscode
i will NOT taint my IntelliJ with other languages, sherman
no.
i refuse to even touch anything python related
ain't pycharm only for python and not any other language
and yet that's what Elshout is implemented in
fun times
do u have a github
I want to follow u
I mean sure but there's nothing interesting on my gh yet (Same as Discord name)
haven't pushed it yet I haven't had much time to work on it
plz push I wanna see whatever is there
will soon once the thing is less messy ;-;
do you ever plan on using a pfp
you don’t even have a pfp on GH
what is elshout
what’s the best way of going about learning Java from a Python background
read java trails. use java.
cursed programming language designed by naomi
https://docs.oracle.com/javase/tutorial/java/index.html
then start using it and fucking up and learning why it's a fuck up and then use it more and dont fuck up the same way, fuck up another way, learn about it, rinse, repeat, eventually you know java
This beginner Java tutorial describes fundamentals of programming in the Java programming language
repeat for any programming language
53,336 bananas, +16.3k karma, 18 awards received
good site to use https://codingbat.com/java
Good person to talk to: @potent fossil !
best idriz
think they use log4j?
bro.
they use the best logger, System.out.println()
is public static void main(String[] args) { the Java equivalent of Python’s def init(self): ?
yup
ok that makes a bit more sense
it's the entry point to your program, yes
I can’t escape characters on mobile easily
wrap your stuff in `
that character doesn’t exist on mobile keyboard
yes it does
well actually technically technically __init__ is the constructor, so, slight difference
im on mobile lmao
naomi it's not that big of a deal
is essential updated for 1.18 yet
ok cool
yes
cant seem to find the version for 1.18 in their repository
turns yucky yucky into poggie poggie
i dont do python a whole lot but i think the entrypoint method can be configured, right? so it can technically be set to any name
__init__ in python is equivalent to a java class's constructor (i.e. if class name is Bicycle then it's equivalent to public Bicycle() {})
and would be called on new Bicycle()
i love doing new MainClass() in my java programs
so from my understanding:
public means the method can be called from outside the class
static means that the method belongs to the class
void means that we’re not returning anything
but what’s the point of having an array of strings as the arguments?
when you start the program like java MainClass arg1 arg2 arg3 it comes in as a string array in public static void main(String[] args)
ah okay
check twitter dms
I’m assuming it doesn’t have to be an array of strings, we can define the arguments individually if we wanted?
Nope, it's gotta be an array
ok that makes sense, does it have to be an array of strings?
Yes, then you process it further if need be
wow that’s kinda surprising honestly lol
pretty sure that's how most languages handle it
java is lower level than python (but still high level)
so you gotta do more boilerplate
C++ doesn’t do that from what I’ve seen
os.args in V also returns a string array
at least in how I’ve seen C++
c++ also takes in arg array i think
it looks like it takes in args individually
keep in mind I’m not proficient in C++ at all, it’s just what I’ve seen from ghidra generating a C++ “translation”
i mean for a java method you can define any args you want with their own names
we're talking about the program entrypoint
ah ok
public static MyMainClass {
public static void main(String[] args) {
new MyMainClass().woot(args[0], Integer.parseInt(args[1]), Double.parseDouble(args[2]);
}
public void woot(String aStringArg, int anIntArg, double aDoubleArg) {
// ...
}
}
for example
but ofc that's assuming you're passing 3 args and the 2nd one is parseable as an int and the 3rd one is parseable as a double so in a real environment you'd be doing checks to ensure those conditions and so on
anyway ima go back to watching this movie
extremely helpful, thank you
What the fuck
do not attack me its christmas thanks
python doesn't really have an entrypoint method, whatever script you run first will just run first
(I guess you could say zipapp bundled python applications have their entrypoint in _main_ though)
C++ argument array also includes the program name used to start the program, whereas Java doesn't, that's I believe the only real difference for entry points. Of course arrays in C++ look different.
this might sound a bit dumb but what exactly is the difference between an entrypoint method and Python’s __init__
or rather, what exactly does entrypoint method mean
guys
can someone give me a course which teaches me python
oh wait I think I get it
the entrypoint method means that is the one that’s called when running the program for the first time
and because you can’t have code outside of a class, that’s what Java uses to determine what gets run, right?
Anyone know any server which actually got attacked by the exploit?
meanwhile Python doesn’t have something like this because not all code in Python needs to belong to a class
Yeah more or less
It can evaluate stuff directly as they come
Conventionally people use
if __name__ == '__main__':
pass
To have an equivalent
right
It's actually useful, because I remember this will only get called if the file is the one being ran
python not being purely class based isn't the reason as to why it doesn't have a main()
C and C++ work perfectly well without classes too
And that if statement will allow you to only execute it if it's the main python file
ok I’m starting to understand this a lot more than I did when I first started trying Java
Python is easier to begin than java I guess
oh yeah much easier lol
it sort of depends which one you start with first
python took me quite a while to get used to with the dynamic typing haha
But it's actually arguable, I believe python does too much for the user, it's good if you know what you're doing but not the best for really understanding how everything works
^
I’m not experienced enough in any language to have a real opinion about that lol
Well, it's just in case you want to have a career in these
Python is so dynamic writing large programs with it either requires a very disciplined team or a lot of alcohol to deal with the pain
It's great for writing little toy programs or trying things out though which also makes it nice for people learning how to program, I guess
what’s wrong with writing large programs in Python?
It's horrible to scale
when you have that many functions and variables, the dynamic typing becomes increasingly difficult to track
Parallelism is basically suicide
oh yes that's the reason I don't like python
I suppose that makes sense, but it works for me
I've grown too used to having strict types on everything
multiprocessing module lel
Me too
Because you're probably not handling enough data
also fun fact
in python, I think 0 == False
and that little thing royally screwed me over
Maybe keyword is?
yep I forgot about is
for me stuff like Java is too much verbosity, Python is far too little, to the point that you have no idea what type is what after a while
I'm just used to having types from like Rust
rust and c++ I think for me is the happy medium for verbosity
Goodluck beginning with cpp
isn't jumping all the way to C++ from Python a little extreme
then I gave up because closures don't bloody capture variables
I can actually see where you’re coming from - there’s a Mario Kart Wii physics reimplementation written in Rust, and with how many things that need to be kept track of it makes sense why strict rules apply
oh no sorry I went to python from c++
Yeah
oh
now im confused
Strict rules?
i assume they mean strict typing
yeah
Ah okay
I actually tried to jump from Python to PowerPC
PowerPC?
PowerPC assembly?
yes
Damn
I’m trying to work on a project that adds new characters to MKW from scratch
with new IDs and entries in the parameter files used
very luckily it’s pretty easy to see how certain roadblocks are happening
So you do asm?
kinda? I’m “doing ASM” in the sense that I’m using ghidra to help write gecko codes
Interesting
it doesn’t require a lot of reverse engineering, I’m more or less just looking to see how certain registers set values and then using the gecko code to change it
and very thankfully a lot of work has been done in the decomp for MKW
Nice
I tried assembly and C a whole ago, it was interesting to say the least
also tried writing my own tiny assembler in python and an emulator in C
I will say that Python is so helpful for new stuff to .bin files quickly
The biggest thing I've made is strlen in asm
I’ve never actually “made” something in asm, only modified
It can print characters but only as ascii codes
To stdout?
yes if I run it in the little emulator I made for it
Not sure what you mean here, C++ can do that
I'm going to guess you captured a pointer/reference and then it was invalid when the lambda was executed so you got a segfault
The only way C++ could magic up a solution to that is to have the language be garbage collected
uhh I think when I tried it
It gives you ways to solve it yourself though
using namespace std;
// a unique_ptr is move-only
auto u = make_unique<some_type>( some, parameters );
// move the unique_ptr into the lambda
go.run( [ u = move(u) ] { do_something_with( u ); } );
If that looks ugly to you it's C++, it's required to look ugly 😄
ohh I didn't know about unique pointers
I think what I was doing was calling a function and within the function a struct was constructed containing a lambda taking an arg from the function args
then we save the struct and when we called it lo and behold garbage
there were probably ways to fix it but python worked better
Yeah in C and C++ you do a lot of copying and a lot of reference counted types even if you don't need to just because trying to prove you didn't just violate memory safety is a nightmare
SIGSEGV gang
Rust does that thinking for you and GC'ed languages let you pretend that isn't even a thing
@warm anchor make a data breach bingo
hi i did a thing
38?
yes! 38 mb
That's not much
😄
well it is 1.2.5 after all
that’s old kek
early versions were actually pretty well known for taking up extremely little memory
Well.. flat world
and that too i guess
It's just chunks and a player object
and no entities, and a view distance of 4
Yup
works with 22 mb, crashes with 20 mb
iirc even under load older versions could work with just 256mb on average
well versions older than 1.3 at least
cool
Just map sprint to the key on right. < >
^ I have sprint mapped to R
⭐ 1/5
Why does this plugin not support craftbukkit 1.2.5?
I think you can disable it
I don’t think so
when stable release for 1.18?
Updates to Paper do not have any sort of estimate for when they release, ever. Any and all updates will arrive when they are ready, and the only thing to do is wait for them patiently along with everyone else.
😄
When you find that option, pls ping me. So I can get rid of it.
You used to be able to disable it with some program thing but then they rewrote some input drivers or some shit and broke it
Sad
I think you can still overridr global shortcuts
I think I accidentally did that once while making my screenshot app lol
google it, but I remember it maybe removed other things with it
it's super dumb
dumb solution, should be in the default settings.
https://apple.stackexchange.com/a/141857
just realized utorrent actually uses μ in its name so is it technically pronounced mu-torrent 
my torrent :)
utorrent more like cryptotorrent
yeah I agree
QBitTorrent >
I couldn't even get keyboard shortcuts to work at all on mac
Like the one to open terminal in current folder
Set it up and all
NFTorrent when? 🤣
I mean, the nft bay exists
this works?
i tried using karabiner last year and it didn't work for me
oh, damn, it works now
Not tested, just the first result I found. 🤡
I remember it didn't support it last time I looked at it was I was using something before that until apple borked it

Oh Apple instead of adding hundreds of new bugged features pls fix the ones of the last 6 years.
Need to wait some years for a Hackintosh.
Not gonna pay twice or triple the price for an AMD GPU.
wait a few years and you'll regret waiting so much
with Apple switching to their own silicon
well maybe not just a few years
but still
I've a mac book already. So no need to have a Hackintosh. Just a project to do something non development related.
Ah I see
what's the best free land claim plugin?
GriefPrevention is nice
should be tomorrow I think (Totally didn't make that up)
Troll
Grief prevention
we have https://offlinemo.de for that actually
ok?
hi
how to get role color
What's with the site? Why did the builds disappear?
no clue what you're talking about, the builds show fine
also next build is build #69 ;)
is it on github too?
the downloads are not on github
ok
Well, thanks!
1.18.1 doesn't change almost anything
So is 1.18 stable or should i wait for a stable 1.18.1
nothing is stable
Hm ok
Does anyone have any experience using Xaero's Map? I could use come quick troubleshooting help
anyone knows where to find PlaceholderAPI dev builds?
Build it yourself 🙃
Their Discord server. 
Do they have?
There is a Jenkins server, but I have no idea where that link is.
I found it tank you
@ Peter Crawley is this your yt channel? https://www.youtube.com/watch?v=V0tqbEFHP6U
cuz recommended go brrr
naomi why are you using irc now?
she got booted by discord
so... what if I just didnt give players the Crafting Table recipe when they start...
like, rankup to craft craftingtable
how does one rankup
pay
LOL WHAT
LOL imagine a p2w server that sells crafting tables
I see you saw it too.
EA-Craft
I fail to understand why a video that is like a month old has now turned into a rocket
Old news.
yea why does youtube just love to recommend me videos from 6 years ago
I just woke up
The Jenkins security team has confirmed that Log4j is not used in Jenkins core. is the news btw.
not the vuln if thats what youre thinking
slf4j in core pmuch prevented the work to do for em
only i am dumb enough to burn my tongue on hot chocolate
lol
how do i make my profile transparent like yours
Please don’t
anyone knows a good hologram plugin for 1.17 that works?
I’ll block you if you do that
holographic displays
please don't criticize me
its this one right https://dev.bukkit.org/projects/holographic-displays/ ?
ye
tyvm 🙂
1.8 
:(
I will much prefer Sherman with transparent profile pic
Default one is worse and an eye sore

ur an eye sore

is anyone here a good builder
This is not the place for solicitation
where is
one of the many places which specifically deal with that?
cat is a good builder, he's the best
he'll build you the biggest shit on your rug
Spigot, MCM, etc, etc, etc
any discords
but then you remember that sout gets forwarded to log4j
We're not google
tf u mean cat why aren't you google
https://www.planetminecraft.com/project/free-builder-for-hire/
Apr 18, 2016 ... I do alot more builds but i am a minecraft builder who is always bored and ... who will hire me for FREE to build there server from scratch ...
ez clap
.g best discord servers to ask for mc builders
(DiscordBot) https://www.top.gg/servers/tag/minecraft
we are google after all
💀
Probably asked multiple times but when is a stable version expected to be released
wdym stable
Updates to Paper do not have any sort of estimate for when they release, ever. Any and all updates will arrive when they are ready, and the only thing to do is wait for them patiently along with everyone else.
opencore wont show the recovery partition 😔
might just give up
literally no idea what's causing that
get fucked dap
i'd love that but not by opencore
good luck with that one bruh, cuz there are no lyrics
The Gävlebocken is always this weird conflicting thing for me
Like, I kinda wish it would burn, just for the sake of it being the right thing to do
But, it always kinda feels a shame when it does burn that peoples work went up in flames, literally
bonfire night?
hm?
Having problems with TNT Duping, Bedrock Breaking or Sand Duping Vanilla Exploits? See: https://github.com/PaperMC/Paper/issues/3854 for information.
How much do you guys still have to update in paper 1.18, is there a lot still to do?
lol i just realized Steve is a real chad, he can throw eggs like 30m up in the air
would be cool, you know
What a brilliant idea!
And he can carry a fuckton of gold
Would be more surprised by all the cobble than some gold tbh
isnt gold denser than cobble?
Well, but an gold ingot is much smaller than 1m3 of couple, no?
👋 Hi all!
gold ore 
finally, i have another programming project idea
Oh hello noami
Owen hello
Tell me naomi
watch the technical Minecraft players coming to ask how to reenable the Log4J exploit claiming it's a feature 

Duplication exploit powered by log4J
I mean you could probably use it in some kind of mechanic which uses timing due to the parsing or some shit
the exploit is really bad
we know
Cat says he can’t reproduce the actual exploit with it 🤷♂️
if u got plugins using log4j ur ded
1.8 is ancient tho, glhf
^
cobble has a density of 2.8g/cm3 by comparison
too lazy to do the math though
Okay please stop talking about 1.8.8
Versions older than my grandma aren’t supported, update
nobody is gonna help you
good mooorning
gm!!!
see, monkegame completely circumvented the pvp problem by just making pvp 1 hit = 1 kill 🧠
We know
I literally already said that
I still cannot reproduce the actual exploit but god knows
Ok
uwuwa it's almost 17:00
cat skill issue x)
Whats gonna happen at 5 naom
We. know.
Owen was never seen again
Welcome to the club 🤝
wut
except instead of 5 it's any time
almost
anxiety med made me sleep all day
yea I was wondering.... x)
which honestly is rather effective
jesus lmao
🤔
youtube compression makes it sound worse 😔
i have a flac somewhere 
it is definitely making my headache worse but i just love Kraus
step one is to not use nginxconfig.io
What are you struggling with?
naomi are you not getting your discord back
@naomi are you not gonna tell us what your programming project idea is
getting domain/phpmyadmin to work 😄 it always returns 404. realistically it is because of something in the config from nginxconfig.io but I don't know what
if it's returning a 404 then it's matching some config which you're not expecting it to
people told me it is because the phpmyadmin location has no try files but when I add that I just get thrown to the default index.php of that site
so what I've been doing since yesterday is commenting out random stuff and see what happens 😄
pretty much me whenever there's a bug and i have no idea what's causing it
;-;
everything i have is in that paste 😄
Damn, thats a crushing experience
are you sure you don't have any children?
No one wants to be my mate, i wonder why 
dw, you can upload it as a txt message 
You can actually send as a txt file
link?
no empathy
those workers probably got worked to the bone just to get crushed at their job because amazon couldn't do safety checks on the building
pretty fucked
Don't speculate

I hate yoy
No one:
JRoy: REEEE POLITICS
no
storm destroys a building and that's poltics?
Hello, I have a server with 1.17.1 and grief prevention although my villagers don't breed? I already set the game rule of mobgrief to true but still they don't pick up items with the correct villager farm method
check the grief prevention config then
dont live in the snow then
there's no settings about villager's breeding in grief prevention :/
lol just rewrite the whole plugin yourself and fix it
is the mob pickup paper option still a thing
try removing plugin and see if it still happens or not
adding villager: true works?
maybe idk anything about that setting
idk man i think villagers not being able to pick up things is very political 
JRoy hacked your account?
scroll up a bit lol
i saw it

any1 who knows a way to make a headless piston in 1.18?
hell nah I already got banned once
doesn't take much 
laser can start
Try me
relatable
Nah, mostly just half my friends are scared caused covid and the others are spending time with family or loved ones, smh
yea it's creeping back up where I love too
where you love 😍
just have a social distancing drinking party
video chat in discord and play mario party
x)
I give up
No way to install macOS
I remember doing it super easily a year ago but now it’s just impossible
just install it into a vm
Why would I do that
I bought every single part in my computer just so macOS would run perfectly fine
Not to run it on a VM 😔
What do you call the value type Minecraft reads colors in command?
As in typing 00000000 for CustomPotionColor
What is that kind of value is that?
I can't find any information on this. Please ping me if you know the answer.
mini got a bit of a question for ya
any beers you know of that don't taste ridiculously bitter
I believe it’s decimal?
...and you still don't know that macOS is literally the most unreliable OS to use on non-apple hardware?
well, oof
Except I literally ran macOS without a single issue on my machine for months
Well actually never had any issue
Just dumb me decided to uninstall it
- do not send exploit shit on discord
- Literally the announcements.
Are 1.8 to 1.16 all patched?
reeeaaaadd
cat fuming rn
Well considering we have 100s of people ask the same question without basic reading skills or understanding capacity daily.
Gets kinda annoying.
Try to find a tutorial. What macOS version?
I can try to help
try
Monterey
One second
Maybe I should try Big Sur and then update
1 sec
just drink mixed shit
vodka with water
oh right
vodka with water
why would you water down vodka smh
why would you water down water
clean shots or get out
they can't handle the power of raw potato
Like
Literally beaten by a fucking potato
gg
im sure mikro likes it raw
Go with Big Sur, apple added something
If that doesn’t work, use Catalina, because I have verified proof that that works
Then update to Monterey
yea I’ll probably just do Big Sur because it used to work for me
Okay! Good luck! Let me know if it works!
It might not help that I’m running 2 year old kexts I found on Reddit
but it used to work fine
so I won’t touch it
the clipboard on a computer was invented because of #paper-help
speaking of clipboard, we have the macs at our college all connected to the same network and if you copy something it syncs across all macs, so if someone copies something and someone else copies something and you paste you're pasting what the last person copied, super fun
Is there a way to prevent interacting with blocks based on Ranks? Like no Enchant Table till Rank-3 ??
idk why that feature even exists lol
and the result of that has to be just spam in the clipboard, right?
it mostly result in you pasting something from someone else on accident
and having to redo your copy
surprising
Isn’t this feature also on iDevices - macs
what if I copy my password
how isnt someone dedicating their entire day on just pressing ctrl + c on some spam
I feel like I could copy something and have it be copied on my iPad as well
then i'd paste your password
and then you copy "thanks for the password" into the clipboard
communicate the test answers through clipboard
yes
i copied part of an assignment for my mate the other week lol
i think most of the class used it eventually 
How i can disable water flow in paper 1.17?
I feel like installing macOS mavericks rn
Says the person using discord if a IRC channel for paper exists
ive never used a irc client as main one since it looked legacy
your face looks legacy
ofc not, its mostly developers nowadays
Then your IRC client sucked
the lounge is perfectly usable
Discord easy to use but annoying sometimes because locked down; IRC harder to use but waaay more customization and stuff
yeah im legacy forehead lol
if you're going to use a web client why not just use discord at that point?
yeah way more custimization if you literally want do do it all yourself lol
as far as i know you can't easily customize the lounge compared to irssi or hexchat
Because being in control is nice?
(i havent used thelounge in years no hate pls)
You can literally write any css and have it look however you want, lol
I also helped write the plugins API so you can do commands and stuff
Do you use my theme Naomi?
oh theres a plugins api now?? thats fantastic
yeah and talk with those 2 other people on irc 
i use the Morning theme
i should give it a re-try
i'll take a look tho, mini
if you use irc you're literally a bot
is there any good irc client for recommending any new ppl
discord
quassel's p good
My theme is still the top on npm, wooo
inb4 its the only theme 😉
hexchat if youre a windows kid
38 actually, smh
uwu~ ✨
Consider reading the rules if you have to ask such a question
i'd have to ask noah to install it
And no, we don't use derogatory terms here
understood
@void void wtf why does your thelounge instance not use my theme
hey just asking about the log4j thing
if you played in a multiplayer server on 1.18 after your java software has been updated (but not minecraft)
can you get affected
it's not a bug in java, but in a library lol
so fixing log4shell is great and all, but.. wouldn't it be ✨ amazing ✨ if we all just promised to be nice and instead use this power to make vanilla minecraft doom server 🤔 https://t.co/tCaUCG1dqg
See the pins in #paper-help for more information
i played in a multiplayer server unpatched until just now
Somebody can literally force you to play doom if you join a server with an unpatched client
Lmao
i'm worried my computer's compromised
I do believe that we acted pretty fast
its funny how its such a big deal now but its literally been around for like 5 years 
is that the Modding API mojang promised since years 
just worried i got compromised as i played it yesterday and the day before
this is amazing
i'm scanning my comp with mcafee but i'm afraid the exploits can evade antivirus
The exploit is not a virus
they can download malware onto the computer right
my school does
guy that fixed my computer does
i just roll with defender these days
If someone actually managed to abuse the RCE on you they would not have stopped at downloading malware
^
this might sound rude but realistically nobody cares about your system
so my comp would be dead rn
if they abused it
great advice
"just nuke it out of orbit bro"
No
nah, you'd be part of a botnet, tops
realistically, you noticed nothing
and nothing happened
If a SWAT team comes busting through your door within the next few days you know you have been affected /s
^^^^^
wait if your fabric loader has been updated to 1.18.1 but the paper server hasn't
is it still dangerous
i wonder how much it's been abused before it got publicly known
Not much
there mustve been at least some people who knew about it
We mostly see people scanning but not exploiting
I mean, if the lient is updated, then thec client is fine
as for the server, if it's not patched, then it's obviously still vuln.
Because I don't really use irc
you got a link?
Biggest attack vector for Log4j on minecraft was IP gathering probably
https://github.com/MiniDigger/thelounge-theme-mininapse
A dark, minimal theme for TheLounge IRC client. Contribute to MiniDigger/thelounge-theme-mininapse development by creating an account on GitHub.
Minecraft is a cesspool of kids who have nothing better than to perform denial of service over competitive factions
oh wow, that does look better
thats pretty good
This is an english discord
Please stick to English, thanks!
is there anything bad they can do with your ip
Denial of service
isp should protect against it right
yes but realistically nobody cares about your network
@ naomi: restarting lounge for mini theme
Ahahaha no
Thats all minecraft skids are capable of
nvm I don't need to restart
Force op vulnerabilities
That's not true at all and you are downplaying the impact of this issue @full silo
Let's not
wow thelounge has come a long way, last time i had to modify the code to change a theme
I am a Minecraft kid and I can run whatever code I want on your PC if you join my server with an unpatched client
i think i understand the basics of it
It just takes one person tho?
You have experience writing the scripts necessary
Someone will release a one click thing soon enough.
They exist already
I imagine force op will be in popular hacked clients soon enough
they make any log ingame (can be a sign or a chat message)
and if they include a command in it they'll execute it or something
There literally is a service that allows you to append base64 encoded bash commands to an url and that's it
i mean that's what i understand
You can /whisper people to infect them directly (including the server)
Or you can just drop it in chat and get everyone
They can run any code on your system*
yea so something like they can get the computer to download malware from a server right
i just don't really know the limitations
There is basically none
If you join my server with an unpatched client, I own your PC now
You really dont have any solace outside of hopefully you arent elevated permissions
But realistically theres ways around that
Chaining is easy
RCE -> privilege escalation -> ransomware
i hv a few separate accounts
RCE -> script downloading -> cryptominer
there are pretty much priv escalation bugs in every platform
give it a few years or something and somebody will find another one in docker or whatever
Remove 100% of your own input from the game
userspace linux has had a few priv-escs over the years too
and I doubt that many people care to keep their crap updated
Google is reimplementing the kernel in Go to avoid that cat 😂
Realistically might be possible to rewrite the server JAR to backdoor it
can you elaborate?
All from a single chat message
(fuchsia?)
is there a way for hackers to hide the message
You can experience effects of it as soon as you receive it really
i don't recognise a script in the chat from when i was playing in the server
So possible they can manipulate chat?
oh
Its possible for them to infect the server directly through a fake command
And then the server can infect you when you join
And with all the join message text etc it could be impossible to notice
I think modern version of paper are safe?
1.18 latest patch plus 1.18.1; I dont know how far back they patched it
i could see most messages
if it can only be run through chat messages i should be safe
If you updated since we pinged everyone
But Mojang released fixes for clients and servers back to 1.7 (that you have to manually apply)
that info is literally in the pin we keep telling people to read.
but if there's a way to hide the log then i'd be worried
instantaneous?
Pending a few factors, probably
Let's stop this is going nowhere
they can do whatever the fuck they want
If you fear you got infected, which you prolly didn't, just reinstall your system
i mean
i'm worried i've been infected
There is 0 evidence to suggest people have gone that far
if it can only be run through chat then i'm safe
but, this is paper, not your local sysadmin AA group
Until recently there was 0 evidence to suggest there was a vulnerability in the first place...
For Minecraft there isn't, my company is getting hit with actual exploit attempts cat
but if it could be run through other mediums i'll be worried
Theres only a couple things that get put into client logs
ye, I mean, at least in our realm i've not head of anything crazy bar grabbing IPs, etc
ofc, if you've been vuln for too long you probs wanna check your security practices and look for anything odd, or flatten the system
is there a way to check client logs
we're not your sys-admins however, so
ok
does that really work?
i know some technical stuff
Did you know that Ingenuity, the Mars 2020 Helicopter mission, is powered by Apache Log4j? https://t.co/gV0uyE1ylk #Apache #OpenSource #innovation #community #logging #services
379
749
just wanna see what mc puts into clientlogs
if it's only chatlogs i'll be safe mostly
it's helping me understand stuff
Hard to say the level of exposure beyond chat logs
No you get a false sense of security
i've patched everything i can find
now i'm just worried i might have been compromised
ik its old news now but I made my own pvp client, the only 2 libraries that need updating are log4j-api and log4j-core right? (I also have stuff like slf4j-api)
especially if they plant a RAT into the comp
The absence of infected strings does not infer a virgin client
There presence of infected strings implicates a compromised client
there are many ways to obfuscate that
if you think you've been infected, reinstall or run full scans
i've ran full scans
We can't help you fix a computer or diagnose if yours is infected. We only provide Paper software to prevent it.
we are not your sys-admins and we're not here to rub your back
And always remember: bad advice is worse than no advice
Yes
ok
Read official announcements on the topic
where?
