#general

3141 messages · Page 1803 of 4

void void
#

lol its just that I have my own pvp client and I wanna make sure im 100% secure from it

#

ty

chilly hearth
#

1.8

void void
#

yea i've done the necessary patches i just want to make sure that i haven't been compromised from the last 2 days

ashen peak
#

Affectd by the exploit?

chilly hearth
void void
#

i've did a mcafee scan

#

full scan

golden gust
#

So

full silo
#

We're dealing with a lot of potentially NEW malware

golden gust
#

For all accounts, you're fine

#

if you're still not sure, go reinstall your OS

tropic flame
#

read before talking

ashen peak
#

damn

vernal moth
full silo
#

I said potentially new

void void
chilly hearth
#

I mis read that.

ashen peak
#

malware based on the exploit?

void void
#

not that i'm tryna be smart but people are innately greedy

golden gust
#

> below <

chilly hearth
#

I know

golden gust
#

so, 1.7 is impacted

chilly hearth
#

As I said. I didn't read it well.

void void
#

they'd take advantage of any new vulnerability as soon as it pops up
and this vulnerability seems really easy to be taken advantage of

golden gust
#

long weekend of dealing with people who can't read is getting to me \o/

#

and for some reason, I literally cannot close discord

#

It's like

half hawk
#

addicting

golden gust
#

I love tormenting myself

coarse lily
#

cat if you closed Discord you'd miss me.

golden gust
#

new phone, who dis?

hexed dragon
#

lol

ashen peak
#

laughter

#

hahaha

coarse lily
hexed dragon
#

Cat doesn't miss anyone.

ashen peak
#

true

plucky sparrow
#

YES

#

I got macOS to boot

#

Omg

hexed dragon
#

Is someone typing an essay?

full silo
#

So the full ramifications

Anyone could have been infected by anything any time since 1.7
Any possible infection has the potential to have hidden itself
Any possible infection has the potential to hide from antivirus

The conclusion

There's no reliable way to tell if you absolutely have or have not been infected.
Each of the above ramifications is plausible at best, rarely probable at worst.

And if you think you were recently exposed to a toxic, hidden, new vulnerability, the only thing you can do to be certain is to nuke the system.

Paper is sick of discussing this and they made this clear.
If you are worried, re-install your stuff, apply the patches, and move on.

full silo
void void
#

ok

ashen peak
#

So clients 1.7+ were patched then in the official launcher?

#

cuz of that news thing

full silo
#

The statement from Mojang

unknown.png
ashen peak
#

Hmm they didn't say which vanilla versions were patched

void void
#

Pretty sure they patched all affected versions

peak ginkgo
#

Which is 1.12 and up

mental meadow
#

They patched allllll the way down to even 1.7.something iirc

full silo
coarse lily
ashen peak
#

or pie

coarse lily
#

ocelot is fine.

#

1.7+ is patched in the client.

marble lark
#

i still find it funny that the issue was in a logger of all places :P

ashen peak
#

epic

plucky sparrow
#

I use macOS btw

full silo
#

Its really goofy how this came to be

#

Just 4head

#

I mean the lookups feature fine whatever; worthless as it is, realistically should only have gone in the logger configuration, not logged messages

peak ginkgo
#

So unless something changed AFTER his message

limber knotBOT
#

the fact that this was default behaviour of log4j2 is extremely concerning lol

peak ginkgo
#

As far as I'm concerned I'm right lol

viscid wedge
#

Rip any shitty IoT devices that run apache

#

Been watching some trends on greynoise, concerning

limber knotBOT
#

I doubt an iot device has a logging framework built-in

marble lark
#

this is giving me big event-stream vibes

limber knotBOT
#

at least not the shitty ones that have no resources to even log to

plucky sparrow
#

Now to wait two hours until macOS is installed on my disk uwu

full silo
marble lark
full silo
#

Log4j was supposed to make sure lookups didnt happen outside of permitted interfaces

#

But I think there was probably a logic error that just let it happen everywhere

#

New conspiracy: Apache developers went back in time to create a dumb vulnerability to throw the java community into chaos

limber knotBOT
#

but why provide a function which logs a different message from what was put in? 👀 that just sounds like trouble right from the start

full silo
#

Like I said it would make sense only in the configuration itself, not the logged messages

marble lark
full silo
#

Hardcoded lookups are immediately safer (outside of internal attacks)

coarse lily
marble lark
peak ginkgo
peak ginkgo
mental meadow
#

1.7 and up even

golden gust
#

I mean, it's not a different message that was put in

coarse lily
#

It's in their announcmeent.

golden gust
#

It's part of why we can do shit like %minecraftFiltering in there

coarse lily
#

In the pins in paper-help.

full silo
#

Its just a string template honestly

ashen peak
golden gust
#

the issue is that there was nos sane escape mechanism which was well documented

peak ginkgo
golden gust
#

and, the one which did exist was known by basically nobody

plucky sparrow
# peak ginkgo Clients, ^

Uh actually slicedlime said that they had patched all the versions shortly after the 1.12+ announcement thing

limber knotBOT
#

the replacements of variables inside the message itself seems like a different message to me

peak ginkgo
#

If you can see that message you have literally all the information I know

mental meadow
coarse lily
#

DeJay don't spread misinformation, please.

peak ginkgo
#

noone told me in that server gone

vestal jasper
#

Phoenix I agree that it being on by default in the first place is concerning

mental meadow
#

he tweeted, sec

coarse lily
mental meadow
peak ginkgo
#

I WAS IN THE MIDDLE OF DOING SOMETHING

unknown.png
#

AND DISCORD WAS LIKE "oi look at this instead"

vestal jasper
#

Not sure how much I trust log4j as an option atm

peak ginkgo
#

i know how to use tab and arrow keys thats why im using them idiot

marble lark
#

i mean

full silo
#

I'm sure all this flak has Apache sanitizing properly now lol

#

And under scrutiny of the entire web

marble lark
#

I never bothered using anything besides System.out

#

lmao

limber knotBOT
#

the thing is that there might be more odd design decisions in the project...

#

and finding all of them will not be easy lol

peak ginkgo
worthy geode
#

atleast no security exploits in System.out kekw yet

full silo
#

Not by default

golden gust
#

Well

#

There was that screen bug where crafted messages could kill the server

full silo
#

Would not take long to make one... System.out is a variable, not a constant...

ashen peak
#

Does anyone know if Optifine pushed this to their newest downloads think_smart

golden gust
#

go ask optifine

limber knotBOT
#

but I can kinda understand them. Some devs have the philosophy that logging should only ever be enabled for debugging purposes anyways... so this would always run in a controlled environment

faint crystal
peak ginkgo
#

if you're using optifine you're probably also using forge or fabric so just

#

update your modloader

marble lark
peak ginkgo
#

problem solved?

limber knotBOT
#

if you use optifine with the normal launcher then the launcher should pull it in anyways no matter the mods you are using

peak ginkgo
#

btw who on the paper team was doing the server backports ie 1.8.8

mental meadow
#

I think @wraith trail ? not sure

full silo
#

Whoever they were, it was not without agony

#

So much animosity for 1.8.8

fallen oracle
#

I gave it a shot and it was so annoying

#

Sulu came in clutch though

mental meadow
#

a few people tried iirc 😄

marble lark
peak ginkgo
#

yeah all i could find was glares original prs*

full silo
#

Fixed with a log4j config

fallen oracle
#

We didn't push git data for the others.

full silo
#

But

#

:p

fallen oracle
#

Cause they aren't supported

peak ginkgo
#

yaeh i saw a commit id but it doesnt exist

marble lark
vernal moth
#

That's not the reason

full silo
#

Little bit of magic to remove the log4j config from nms and inject the patched one

#

Should not have needed too much more than that

void void
golden gust
#

pushing to the repo as 0 effect

full silo
#

I saw the spigot patch was to just use the noLookups flag in craftbukkit

golden gust
#

We literally do not have a build pipeline setup

coarse lily
golden gust
#

So, all of this is manual patch, test, and then toss a jar somewhere before it can be uploaded, manually

full silo
#

Time to fund the papermc legacy CI/CD project

marble lark
#

xd

worn ember
tropic flame
#

it's what I've been telling people to do for like 2 days

#

lmao

peak ginkgo
#

I wanted to give Sulu money for the patching of older versions but Sulu doesn't seem to have sponsors enabled, so instead all of you for your work on this literal enterprise grade problem.

unknown.png
charred sleet
half hawk
#

the vulnerability isnt going to work in the anvil or signs probably

limber knotBOT
#

not really necessary

tropic flame
#

Mojang and MultiMC have released updates for their launchers to fix the issue

#

so it's not necessary

limber knotBOT
#

also everyone using the official launcher will have a fix

tropic flame
#

in case of your typical shady launcher then uh, check with them, it's not our problem

coarse lily
tropic flame
#

I have secured the servers I work with already

peak ginkgo
#

sucks to suck then, a decent client still uses the mojang jre and library set as a basis

tropic flame
#

again, check with the launcher maintainers if they have released fixes

#

Optifine, forge, and fabric are safe

#

Mojang's launcher and MultiMC too

golden gust
#

We are, once again, not going to add stupid patches towards an issue which is not ours to solve

viscid wedge
#

It's not, it's just not necessary

golden gust
#

if you want a filtering solution, go grab one

faint crystal
#

github being funny for anybody else?

half hawk
golden gust
#

but, we're not even going to make the faux promise that we can filter out all of this shit

#

nor are we gonna break peoples existing setups where text like that is valid and used for other things just because people are using random 3rd party software which has nothing to do with us

viscid wedge
golden gust
#

and that's our final answer.

#

Stop mentioning.

viscid wedge
#

lmao

golden gust
#

We're not adding arbitary filtering.

limber knotBOT
#

wtf are you going on about

#

just use a plugin and be done with it

worthy geode
#

so much drama for an issue that is already fixed

golden gust
#

blind, over agressive filtering is stupid

tropic flame
#

tell your users to keep their shit updated

golden gust
#

once again, we're not gonna go break everybodies setup because people are using unsupported software

#

there are options out there already if you wanna engage in that potential game of cat and mouse

#

This is free, open source software

#

if you really want that you are more than welcome to go program it and open a PR

#

I'm personally against it and think that it's stupid, but, I'm not the only person with a say in this

limber knotBOT
#

it has already been fixed on the client level

tropic flame
#

the client is not a problem Paper has to deal with

and the client has already been fixed

coarse lily
#

You want empathy for people who use third party clients almost exclusively to cheat.

golden gust
#

How dare you not spend the next few hours chasing an issue , for free, to fix an issue with software which has literally nothing to do with you!

tropic flame
#

what consequences? a bunch of closed issues on GitHub?

true canyon
#

Is that a threat? lol

golden gust
#

Once again

#

if you want it, go open a PR

full silo
#

Its him

golden gust
#

otherwise, if you're not willing to put your money where your mouth is, stfu

limber knotBOT
#

then pay a dev

full silo
#

The man who will cripple the MC community with log4j

gleaming dragon
limber knotBOT
#

the world is really simple like that

golden gust
#

you are not entitled to determine where we spend our time on a free project

gleaming dragon
golden gust
#

we've already told you that there is plugins, etc, out there to fix this

plucky sparrow
#

why is it called ldap

golden gust
#

nor is it our job to roll out agressive filters which breaks peoples setups just because people wanna use janky software

void void
#

if you are using the microsoft store minecraft launcher it shld've auto updated for all clients ystdy right

plucky sparrow
#

I see this as an insult to my name

full silo
#

ldap is a protocol with legitimate uses

void void
full silo
#

But thats the easier exploited jndi interface

golden gust
#

then, you do not understand the effort and the implications of it

#

it costs nothing

void void
golden gust
#

blatently false

limber knotBOT
#

"it costs nothing" is only said by people that don't value their time (or yours)

golden gust
#

if you deem your time as worth 0, that is on you, but, we already pour a substantial amount of cost into this project

plucky sparrow
void void
#

i mean i've heard of adobe flash patches which ended up creating more vulnerabilities

full silo
#

Adobe flash was a trainwreck for its entire lifetime

void void
#

doesnt youtube use adobe flash

worthy geode
#

no

full silo
#

Nothing uses adobe flash

tropic flame
#

the "community" follows a rolling release scheme, where the old version becomes unsupported as soon as a new one comes out. the fact that they've backported fixes should be seen as a courtesy. In addition, Paper has nothing to do with the clients. Go nag Mojang in their JIRA.

full silo
#

It fucking died

void void
viscid wedge
#

Many, many years

full silo
#

Because it is garbage

plucky sparrow
void void
#

wait what

full silo
#

laughs in habbo hotel

void void
#

youtube doesn't use flash

golden gust
#

once again, there is literally already plugins out there which do that

void void
#

i've always thought it used flash

full silo
#

HTML5 made flash go byebye

void void
full silo
#

Not specifically on youtube though

golden gust
#

chances are they miss stuff, I do not wanna waste my time playing cat and mouse towards chasing a moving issue which is already fixed for supported software

#

flash is literally dead and gone

void void
#

i got annoyed clicking allow so i made youtube auto allow flash i think

tropic flame
#

Flash is gone due to the media bashing on it too much and making it seem like a threat

#

and i will die on this hill

full silo
#

Dude if you are in modern day allowing sites to use flash

golden gust
#

flash is a threat

void void
#

^^^

full silo
#

Your browser is soiled

plucky sparrow
#

I’d use flash any day

limber knotBOT
#

I mean, how are you going to play Line Rider without flash?!?

void void
#

coolmathgames

full silo
#

What the hell is line rider

tropic flame
#

any HTML5 port of games like club penguin that i find feels significantly slower than the Flash versions

golden gust
#

Like, flash had yet another massive huge security bug in the thing before everybody tossed it out

full silo
#

HTML5 port of club penguin

plucky sparrow
golden gust
#

idk, I don't keep links towards random software

full silo
#

You mean an unofficial clone of a service that was retired??

void void
#

speaking of flash i haven't played farmville in many years

plucky sparrow
#

Habbo’s new client is stupidly ugly

tropic flame
limber knotBOT
#

yeah, you should not build games in html5 and javascript lmao

#

at least use java

#

runs

viscid wedge
#

Didn't that club penguin recreation have a rather significant data breach

full silo
#

wtf java applets not safe either

plucky sparrow
tropic flame
golden gust
#

java applets have been dead for years too

full silo
#

Games really shouldnt be played in the browser

golden gust
#

I think that there was still some aspects of it around as they've not 100% yeeted it yet

viscid wedge
plucky sparrow
#

I just use shockwave nowadays, super updated

golden gust
#

but, embedded on the browser afaik is gone

plucky sparrow
#

Shockwave > Flash

full silo
#

Congruence

viscid wedge
#

Four million unhashed passwords

worthy geode
#

stuff like hordes.io runs pretty fast with html5, don't think thats necessarily the fault of html5/JS

twin lagoon
#

@viral hornet 🥺

spiral robin
#

Z

plucky sparrow
#

Lord

#

My macOS install finally booted to the setup process

#

It’s beautiful

brave mountain
#

Hackintosh?

plucky sparrow
#

Yea

brave mountain
#

"next project: installing Arch offline"

valid burrow
marsh charm
#

can TPS loss cause problems if tps is at 20?

faint crystal
#

wat

valid burrow
#

i wouldn't be surprised if someone made an automatic tool to scan all available minecraft servers and try exploiting log4j

full silo
#

Theres not a good way to use bukkit api on fabric yet is there

plucky sparrow
#

sent from my hackintosh

brave mountain
valid burrow
#

wait it already happened?

#

lmao

brave mountain
valid burrow
#

what about higher than 20

#

🚎

faint crystal
void void
full silo
#

Problematic

#

Trying to find a way to permit concrete duping but not possible on paper

brave mountain
void void
#

maybe there's any forks that reverts thos dupes

faint crystal
full silo
#

Messing with tickrate is cringe

#

Anything that gambles on tick being 50ms gets screwed by that

brave mountain
faint crystal
faint crystal
marsh charm
worthy geode
#

that usually indicates that you have some lagspikes happening

void void
#

I really hope nobody runs this in prod

marsh charm
#

we're doing a dynmap fullrender but /tps e.g. shows 20.0, 20.0, 20.0

golden gust
#

tps is a useless metric

marsh charm
#

so I should be looking at TPS loss instead?

worthy geode
#

yeah, TPS will stay at 20 because only some ticks take too long.
Take a look at /mspt instead

marsh charm
#

I see

worthy geode
#

Timings also aren't really that useful for lagspikes, you probably would want to look at a Spark report with --only-ticks-over instead
But first I would wait out the dynmap render, that can be a bit heavy

marsh charm
#

yeah good advice

#

(wait out the dynmap render)

full silo
#

Anyone know the patch number for sand duping

woeful dagger
#

Am I allowed to recommend a plug-in that blocks the exploit here? Some people can't update their server or want players to not be vulnerable to the exploit. The plug-in I've found also blocks the exploit client-side.

brave mountain
#

Yeah I'm not expert

full silo
#

No

#

Everyone can fix it

#

It doesnt require an update

#

It only requires a single file and a restart

void void
mellow rover
#

where can i report users trying to distribute a jar via dms?

golden gust
#

DM @upbeat falcon

mellow rover
#

oke

full silo
#

@void void do you know the difference in performance using that plugin vs just recompiling without the patch?

void void
#

Easier to update paper

#

Because you need to remove two patches

#

vs just swapping the jar

coarse lily
#

Aw cat beat me to it.

coarse lily
full silo
#

Theres an update checker built into this simple plugin?

#

I might just fork the plugin and remove all the bloat

magic river
#

There are a bunch of ways to make the client/server log something you provide and the most obvious ways to filter it out can be bypassed using other log4j features

faint crystal
magic river
#

oof

woeful dagger
magic river
#

Yeah, that one don't work

#

Last time I looked it was only filtering chat

woeful dagger
woeful dagger
quasi valley
#

There is exactly 0 chance simple text filtering is going to fix all possible variations of the exploit

golden gust
#

it's stupid, however

worn ember
#

update or suffer

golden gust
void void
#

just update omfg

#

plugin "patches" dont work

full silo
#

This is cringe

golden gust
#

Now I can literally bypass your servers main logs by tossing a $ in my messages

faint crystal
magic river
#

Oh, that's that one

quasi valley
void void
quasi valley
#

there's so many of them, none of them work

woeful dagger
#

It uses Mojang's fix...

full silo
#

You'd be better off considering all string templates

mellow rover
vernal moth
#

Just update lmfao

faint crystal
void void
#

these fixes are all written by people with zero understanding of how this exploit works

full silo
#

You're best off just fixing the problem

vernal moth
#

These plugins suck

golden gust
#

Oh, okay

void void
#

1.8 and 1.12 user move on challenge

worn ember
#

mini, hangar wen

golden gust
#

${Hey, look, now I can say whatever I want, woooo}

trim oracle
#

I've seen someone filter "${jdni", tf is that?

#

like does that do anything at all xd

woeful dagger
full silo
#

replace anything matching /\${.+}/s with empty string

faint crystal
magic river
#

So this one is doing two things

void void
full silo
#

Plugin hackaround = garbage

magic river
#

It's trying to apply Mojang's fix via code and it's trying to filter chat packets

#

They added that first bit since the last time I looked at it

#

Probably since Mojang put out their fix

#

I don't know if it does Mojang's fix correctly or not, I don't care because you should just use Mojang's fix 😛

full silo
#

I'll create a plugin that just puts the fixed logger config into the runtime jar and call it a day

#

Add metrics

#

big brain plugin dev moment

magic river
#

The chat filtering stuff is not going to catch everything though so don't rely on this to protect clients from each other

void void
#

just make a plugin that updates your server to 1.18 thinksmart

#

and sent it to all the 1.8 users

magic river
#

tldr plugin is dumb, apply the real fix and/or update

worn ember
full silo
#

official patches and / or updates

magic river
worn ember
#

well i retract my statement

woeful dagger
magic river
#

Yes it can

full silo
#

You're better off making a plugin that turns the server off if the server isnt patched

magic river
#

No, I'm not going to tell you how

coarse lily
worn ember
quick pasture
#

a plugin is not going to help you prevent your backend or client from being infected, just update

#

it might discourage users from trying more by using a plugin, or just to log who attempt to use it

#

but its not a fix

magic river
#

It'll block the idiots, it won't block the most malicious people

woeful dagger
faint crystal
#

minecraft client is probably not that bad of an issue because launcher updates automatically, no?

magic river
#

If they're joining your server and you know about the exploit spam it in a giant message that takes over their chat box until they acknowledge it

#

Finally a good use for the conversation API

woeful dagger
magic river
#

Someone should make that plugin instead

quick pasture
trim oracle
#

all right, for a modded server with a custom launcher operating on a variety of versions, what's the best way to patch this exploit

coarse lily
faint crystal
magic river
woeful dagger
trim oracle
#

its a custom launcher there is no mojang issued update

worthy geode
#

does your launcher auto-update? then just update them to the latest fabric/forge version

golden gust
#

then you're basically fucked

#

glhf

magic river
trim oracle
lavish compass
#

Did they update log4j in the launcher manifest or not?

magic river
#

What you really mean is an old ass version of the game via some dumb cracked launcher, right?

magic river
woeful dagger
#

But again, I don't say that the plug-in is a full replacement for the fix. I say it's an extra layer of protection.

golden gust
#

Once again

lavish compass
#

shouldn't custom launchers pull from launcher manifest anyways?

magic river
#

You'd hope

void void
#

should

golden gust
#

we're not going to waste our time tryna do stupid chat filtering

#

it's bypassable

#

take whatever false security you want, i guess

magic river
#

Don't share that stuff around here like it's a fix is the main thing

#

It's not a fix

golden gust
#

you're literally dismissing what I'm actually saying

trim oracle
#

so the latest forge does fix this?

faint crystal
magic river
#

Probably, ask them

woeful dagger
golden gust
#

how am I?

worthy geode
#

yeah, they released updates for all supported forge versions that fix it. but, ^

golden gust
#

I've literally already said that it's bypassable

lavish compass
#

We need Minecraft Application Firewall (MAF) /s

golden gust
#

if you wanna use it for the basic security and the false sense of security it offers, go ahead

magic river
golden gust
#

nowhere am I acting like my word is final?

lavish compass
#

bungeecord is not a firewall?

golden gust
#

I literally explained that this is an open source community

magic river
#

You could actually do a filter for this in a proxy

faint crystal
#

I think this is getting too out of hand and personal

magic river
#

Just blindly filter all text that goes through it

golden gust
#

You re more than welcome to create a PR or rally for one

#

I'm just saying that imho its not worth it and not something I'd approve

woeful dagger
coarse lily
#

Be nice - be polite. No personal attacks.

faint crystal
worthy geode
plucky sparrow
#

you can actually check the health % of an iPad

magic river
red timber
#

jfc just do what you wanna do, don't brag about it here and piss off

coarse lily
red timber
#

who cares

magic river
#

We know doing it Mojang's way works

#

The bit about it protecting clients isn't true though

lavish compass
#

Just NOOP the logger, easy fix.

magic river
#

It'll stop the most obvious stuff but that just means people think they're safe until the really malicious people show up

full silo
#

Perfect solve

#

Log nothing

lavish compass
#

Hwiggy woah

#

long time no see

potent fossil
#

i can see paper general is undergoing cancer again, i need coffee before i come back in here

woeful dagger
potent fossil
full silo
#

They DO NOT NEED TO UPDATE THE GAME

fallen oracle
#

Can you make me some too

full silo
#

They only have to download ONE SINGLE FILE

worn ember
#

general is a cringefest again

worthy geode
#

(they should tho)

full silo
#

And it isnt your piece of garbage plugin

magic river
#

You can apply your false sense of security all you want

potent fossil
#

@fallen oracle ill do you one better and review the pr when im awake

magic river
#

Just don't tell people it fixes the problem

full silo
#

Cubxity

lavish compass
#

Hwiggy

fallen oracle
#

You could even implement changes too aromanticheart

full silo
#

Huge brain

fallen oracle
#

I appreciate you

potent fossil
#

oh boy

void void
full silo
#

Yes something can be done to prevent it

worthy geode
#

but... people literally did?

full silo
#

It is called apply the official mojang fix and shut the hell up

woeful dagger
worthy geode
#

Mojang did, Paper did, Forge did, Fabric did. What more do you want?

golden gust
#

We are not going to spend the next few days wasting our time away to patch and filter every single potential exploit vector when there are already official fixes out for the client

magic river
#

I can't tell if @crystal escarp is trolling at this point or not

#

They seem incapable of understanding any point other than their own

worthy geode
#

If people don't use those fixes, its not the fault of the people developing the fixes

vernal moth
#

In my opinion, if a sentence starts with in my opinion, it's prolly full of shit

full silo
#

Its clear his account was compromised by log4j and this is a bot come to spill calamity

golden gust
#

We are not going to play cat and mouse with our time, for free, to patch something which already has official fixes

magic river
#

That plugin will stop the people who think it's funny to open calc on you 100 times

#

It won't stop the really malicious people

potent fossil
#

imagine willfully staying on outdated versions or willfully failing to use official sources and then coming to a free project's chat to complain that they're not doing enough for you

lavish compass
#

Well, this log4j thing is like cat and mouse

magic river
#

So it's a false sense of security

potent fossil
#

probably hasn't donated anything ever either

lavish compass
#

it's like chrome's built in "xss protection"

coarse lily
#

I think these two conversations have run their course.

golden gust
#

!ban @crystal escarp Take your attitude and entitlement elsewhere. We owe you fuck all.

thorny flickerBOT
#

:raised_hands: Banned agustinOut#6413 (Take your attitude and entitlement elsewhere. We owe you fuck all.) [3 total infractions] -- electronicboy#8869.

void void
full silo
#

3 total infractions

void void
#

or are planning on it

full silo
#

Hes been here before

void void
#

says enough tbh

full silo
#

Insert "first time" gallows gif

magic river
#

Nah those are all recent I think

true canyon
#

Darnit I didn't get to screencap the "nice work" message before booped! I wanted it for my collection. Cry

void void
#

irc go brrrr

coarse lily
#

He wants server-side fixes for third party clients that might not be patched.

potent fossil
vernal moth
#

Let's talk about my boss being insane

lavish compass
#

All I want for Christmas is env overrides

fallen oracle
#

Anything you see wrong. I mean tbh the whole backend needs to be cleaned but that still implements that CF support

vernal moth
#

He will drive by all my team members tomorrow to give us gifts

potent fossil
#

oh god

fallen oracle
#

I also want to update it to the latest spring at some point

faint crystal
coarse lily
potent fossil
#

i see the whole project as needing rewrites catjamcry

faint crystal
#

paper hard fork when

lavish compass
#

gift for each person: rewrite x to not use log4j

void void
#

and buy mini beer

faint crystal
#

already did

vernal moth
faint crystal
#

once

potent fossil
#

hangar wen

coarse lily
#

Your boss is Santa Claus?

#

Mini are you actually an elf?

vernal moth
#

I mean, you might mistake my ears for that, lmao

#

And hey, I worked on hangar today simple

coarse lily
#

simple don't badger Mini about hangar

potent fossil
#

good boy

vernal moth
#

I realized that auth is working on staging again, so technically that's progress

coarse lily
#

Elves work hard.

vernal moth
#

Altho I didn't commit anything

#

Lmao

full silo
#

This is hugely frustrating

unknown.png
vernal moth
#

Oh wait, I did, I disabled scroll bars

full silo
#

Both projects Java 17 4838_despair

potent fossil
#

i will have to contribute to your alcoholism soon if you keep it up mini

vernal moth
#

I plan on doing stuff tomorrow before going to my parents

#

But like, hangar needs two things, a designer and a fucking project manager

#

I have no clue what I need to do

#

And that's greatly hurting progress, lol

potent fossil
#

i'll design it

#

but you may not like it

fallen oracle
faint crystal
#

roll random discord members and let them do it

potent fossil
#

my life is a mess, i have no time to do anything but suffer

faint crystal
#

😦

full silo
#

Gradle is making me very angery

red timber
#

git gud

faint crystal
#

mad cuz bad

full silo
#

Oh its intellij problem

#

Intellij cache is not updated or something

#

Build just fine but dum IDE error

faint crystal
#

invalidate caches

#

file>invalidate caches

full silo
#

Yes I am familiar

#

But thank you

faint crystal
#

👍

#

just makingsure

vernal moth
#

Not needed anymore

#

We get repair ide now

#

Which is literally magic

faint crystal
#

what is that

worthy geode
#

would be nice if the IDE wasn't broken in the first place

vernal moth
#

It's software, software always sucks

charred sleet
#

cmon

full silo
#

Yeah I am just gonna permanently have this compiler error but its not even incorrect

charred sleet
#

windows is living proof that software is always amazing

void void
#

said nobody ever

charred sleet
coarse lily
#

I'm running Windows ME.

#

It's A++

#

Wait that joke is too old.

charred sleet
#

you mean C++

coarse lily
#

I'm running Windows 8.

#

It's A++

vernal moth
full silo
#

Microsoft Word perfect example of standardized broken software

faint crystal
#

like battery saving?

full silo
#

@vernal moth is this a plugin?

void void
#

windows me = Misery Edition

worn ember
#

didnt you make a theme for irc? so ur obviously a designer mini, smh stop making excuses

vernal moth
#

No it's a new feature

#

I can implement a design

#

I can't come up with one

#

The IRC theme is a rewrite of somebody else's work

worn ember
#

thats why designers make big bucks

vernal moth
#

They don't actually, lmao

worn ember
#

kek it was sarcasm

coarse lily
#

Hey some do.

worn ember
#

the ones in marketing do

coarse lily
#

That depends.

#

Marketing bullpen designers are usually making not a lot.

void void
#

The ones that designed spotify wrapped used to

worn ember
#

i never got to see my stats cuz the app crashes every time i open it

#

and for some reason its only on mobile

#

great design choices

void void
#

like, wtf is this (not my screenshot)

Spotify-Wrapped-2021-genre.png
worn ember
#

"duitse pop" bruh

potent fossil
#

spotify moment

faint crystal
#

modern design

#

you wouldn't get it

full silo
#

@vernal moth didnt work 😦

void void
#

I'm a mere mortal

worthy geode
#

I 100% assumed something broke with font rendering there

worn ember
#

they're just progressive

plucky sparrow
#

eurovisie songfestival

worn ember
#

lmao

#

its a feature

lapis shale
#

Hello, how can I find this general location? Found in a timings report

unknown.png
worn ember
worthy geode
#

the coordinates are right there

faint crystal
#

is that about log4j?

worn ember
#

nah its about guava

warm anchor
worthy geode
worn ember
#

its just an amplification exploit, no big deal kek

plucky sparrow
#

downloading xcode because why not

worn ember
#

god xcode is so bad, but its also good

lapis shale
#

When I teleport to that area its just an empty ocean

worthy geode
#

its the start of the region, you will need to fly around a bit

lapis shale
#

I see okay 🙂

magic river
#

It's a 512x512 area, right?

#

Forgot how big regions are

worthy geode
#

yep

steel ivy
#

Is 1.12.2 patched from the log4j exploit?

coarse lily
#

No - check the pin in #paper-help and use the Mojang recommended fix.

south matrix
#

Redoing community guilds huh

steel ivy
#

Okay

cosmic raft
surreal karma
#

history's biggest lie:

unknown.png
worthy geode
#

its technically correct, its just a tick taking way too long

remote idol
#

it'll sometimes... not lead to a crash

#

but yeah its just a tick warning message essentially

worthy geode
#

it definitely is a slightly misleading message

coarse lily
#

@twin lagoon GOOD MORNING

twin lagoon
#

HELLO

#

BEST OCELOT

warm anchor
pastel reef
#

So krypton mod optimizes bandwidth usage?

#

I have it on my client.

warm anchor
#

Maybe.

twin lagoon
foggy silo
#

👋 🥺

viscid wedge
plucky sparrow
#

i'm loving macOS

hexed dragon
faint crystal
foggy silo
potent fossil
#

well i opened twitter and see some random person quit from LMG and made a big stink about it by quote tweeting linus' hiring confirmation tweet with "lol i quit" but then refuses to elaborate on it, so they make a huge deal about it on twitter then say "sorry it'd be unprofessional for me to say anything about it", "and also i was not fired"

but will happily raise drama and run with the twitter clout

#

i do love modern society

golden gust
#

random person

#

literally suop

#

mfw

potent fossil
#

yeah and

golden gust
#

LITERALLY. SUOP.

potent fossil
#

and

golden gust
#

I WILL LEARN HOW TO KEYBOARD

potent fossil
#

am i supposed to give a shit about that person

plucky sparrow
#

changed my apple music resolution to the highest and now it just skips all songs kekw

potent fossil
#

you can't handle the truth of high res

golden gust
#

I mean, there was basically a huge episode and drive which got her hired in the first place

plucky sparrow
golden gust
#

You want the high res?

#

YOU CAN'T HANDLE THE HI-RES

#

peasant!

potent fossil
#

yea that's what she quote tweeted when quitting

plucky sparrow
#

so i'll just use my ipad for hi-res

potent fossil
#

and i just see the whole deal as like, "ok? fuck off now"

plucky sparrow
#

apple music just doesn't want me listening to santa baby

potent fossil
#

i don't want you listening to santa baby either

plucky sparrow
#

well i want

potent fossil
#

ask youtube

plucky sparrow
#

this song is kinda addicting

potent fossil
plucky sparrow
#

nice song

#

it's better on mute

foggy silo
#

x)

potent fossil
#

you're better on not alive

#

.kill dap

limber knotBOT
#

crushes dap with a huge spiked rock.

foggy silo
#

I mean... isn't most "Christmas" music addicting?

void void
#

Is it possible to find a server with doLimitedCrafting set true??

#

Can that be searched for anywhere?

foggy silo
#

🤔

faint crystal
#

christmas is addicting

foggy silo
#

Indeed

potent fossil
#

unless they advertise it no it can't be searched anywhere that i know of

void void
#

Hmmm, ok, that splains why Im not having any luck searching

plucky sparrow
#

admit it

hexed dragon
#

Kills him again

potent fossil
#

correct: i did love you

foggy silo
potent fossil
#

that is, until you refused to send me jamon iberico

#

.kill dap

foggy silo
#

Ouch

limber knotBOT
#

rams a grenade launcher up dap's ass and lets off a few rounds.

foggy silo
#

based paperchan

plucky sparrow
#

double kill? 😔

magic river
potent fossil
#

echoing announcement d-d-d-d-d-d-d-d-d-d-d-d-double kill

potent fossil
golden gust
#

Yea

#

madison

potent fossil
#

oh we on a first name basis now

golden gust
#

yea, she was doing the LMG tiktoks and stuff

plucky sparrow
#

why does prt scr not make a screenshot in macOS

faint crystal
#

all the lmg cringe shit basically

potent fossil
#

well anyway i could give less than a single solid shit about her

golden gust
#

she's appeared a few times and such

#

alt-shift-5

plucky sparrow
#

‰

#

LOL

golden gust
#

wait, no

potent fossil
#

it'd be more like one of those dehydrated shits

golden gust
#

cmd-shift-4

potent fossil
#

i know cat knows what im talking about

golden gust
#

or 5

plucky sparrow
limber knotBOT
#

ez

plucky sparrow
#

wdym ez

warm anchor
#

You need more ram

plucky sparrow
#

i dont even have a lot of stuff open

#

i'm worried

#

just firefox and apple music

#

and xcode installing on the background

#

might be that

#

other than that, macOS is amazing

#

super smooth

#

didn't remember it being so good

potent fossil
#

my family is literally watching mariah carey christmas music videos on the tv and dancing to it

plucky sparrow
#

LOL

golden gust
#

That's the UKs christmas anthem

plucky sparrow
#

another reason not to go live in the uk

potent fossil
void void
#

any recommendations for website hosting? It would be just some basic litebans page, maybe forums/wiki too

potent fossil
void void
#

thanks

plucky sparrow
#

also my wifi seems to be better on macOS

foggy silo
#

use the exploit to fix the exploit

limber knotBOT
foggy silo
#

white text on white

plucky sparrow
#

what is that font you deadly bitch

faint crystal
#

is that roblox

foggy silo
#

roblox

limber knotBOT
#

yep

plucky sparrow
#

wait

#

nvm

void void
plucky sparrow
#

1v1 phantom forces naom

limber knotBOT
#

yes, i play roblox with the boys, you got a problem?

#

dude i just got off phantom forces

plucky sparrow
#

LOL

#

i'm joking

#

unless..

void void
#

oh its webhook

#

lol i tought its bot

limber knotBOT
#

would've clapped you anyway

plucky sparrow
#

she's an AI

void void
#

i see

#

ai deez nu-

limber knotBOT
#

bonk.

void void
limber knotBOT
#

this is paper general, not paper horny

plucky sparrow
limber knotBOT
#

1v1 me monkegame onetap

void void
#

1v1 me in rust in minecraft

#

hm

plucky sparrow
limber knotBOT
#

aight tmr

plucky sparrow
#

make sure to remind me

limber knotBOT
#

still on 1.17.1 because

#

dead server

plucky sparrow
#

hmm

#

I can show you one of my latest creations tomorrow

#

you'll see

limber knotBOT
#

why wait until tomorrow

plucky sparrow
#

why not

void void
potent fossil
#

should be able to

#

@spiral robin ur live chat is BROKEN

spiral robin
#

Hi

#

What

void void
#

lol

spiral robin
#

We don’t have livechat, dunno what they’re talking about

potent fossil
void void
safe plover
#

1.18.1 patched that log4j issue, right ?

potent fossil
#

oh extravm livechat

void void
#

lol^2

potent fossil
#

namelessmc is a php application so yes

#

it will run

plucky sparrow
#

stupid

void void
#

thanks

potent fossil
void void
plucky sparrow
#

no u

limber knotBOT
#

my man you managed to bork your arch install by leaving your computer running

plucky sparrow
#

arch's fault

limber knotBOT
#

that's dumb

plucky sparrow
#

it died overnight

#

this change feels so nice

#

font actually looks great!

#

the animations have me wheezing though

limber knotBOT
#

anyway can i just complain about roblox servers?

#

they have a minimum of 50 ping at all times

potent fossil
#

no, it's your fault for playing roblox

limber knotBOT
#

my friend's macbook can't run cs otherwise we'd play that

potent fossil
#

did i ask

limber knotBOT
#

do i care if you asked?

swift root
#

Hi simple

potent fossil
#

hi Larry !

swift root
#

Be kind to each other, Naomi and simple :)

potent fossil
#

this is how i show love

plucky sparrow
#

too good for them

foggy veldt
#

I play irelia but I can never time the cannon minion correctly

plucky sparrow
#

why did macOS create a games folder all of a sudden with chess in it? kekw

unknown.png
foggy silo
#

Play chess.

potent fossil
#

chess is a game dap

limber knotBOT
#

japanese chess > chess

plucky sparrow
foggy silo
#

So what… did you setup a hackintosh or bought a new Mac?

plucky sparrow
#

it is?

plucky sparrow
foggy silo
#

Ah

livid cave
#

what server hosting to yall recomend

plucky sparrow
#

bloom or dedicatedmc

potent fossil
#

extravm, bloomhost, dedicatedmc

plucky sparrow
#

beat you to it

potent fossil
#

you didnt mention extravm so shut up dap

plucky sparrow
#

calm down

potent fossil
#

do i detect toxicity

plucky sparrow
#

maybe

potent fossil
#

im about to be real mf toxic toward intellij, it's not loading at all

foggy silo
#

IntelliJ is a bum for me

fallen oracle
#

It really don't want you working on MCB 😦

potent fossil
#

indeed it doesnt

#

what do you know, yet another WSL issue because jetbrains can't ever get a handle on it

ashen nacelle
#

Meanwhile on America...

#

A absolute historic night is happening as I post this. A tornado that has been on the ground for over two hours, started in Arkansas, and now is in Kentucky has just smashed the all time wind speed record ever recorded. The last wind speed record was on the may 3rd 1999 Oklahoma tornado… this one was just measured at 304 mph with a mobile NWS unit. This storm is unlike anything anyone has EVER seen. We are talking a storm that has radar readings of debris being lifted upwards of 35,000 feet into the storm… It has consecutively been on the ground for over 230 miles. The destruction with this storm will be absolutely insane, in the morning light. a storm of this magnitude has never happened before.

For this all to be taking place in mid December ontop of everything is just unreal.

(Radar photo is around a hour old, current photo of actual tornado)

limber knotBOT
#

that's scary

#

it looks super ominous

peak dirge
limber knotBOT
#

i would if i had money 😔

twin lagoon
#

he also introduced it

south matrix
peak dirge
south matrix
#

geckos are green too

limber knotBOT
#

tux aka velocity and waterfall guy

golden gust
#

no idea who that is

foggy silo
#

Tux 😻😻

south matrix
#

sorry i only use bukkitcord

plucky sparrow
#

who’s tux

foggy silo
#

Nice new role orders and icons 🙂

waxen panther
#

oh my god role changes

#

im confused !!

#

icons r cute tho

south matrix
#

do you want to fight, you weak vegetable?

#

i'll eat you in one swift motion

plucky sparrow
#

damn

foggy silo
#

Thank goodness broccoli is tasty 🍴

plucky sparrow
#

daamn

hexed dragon
#

Wait who made those icons?

limber knotBOT
waxen panther
south matrix
#

1.8 support

#

the best

foggy silo
#

😻😻

#

I prefer 1.6.4 tho 😩😩😩😩😫😫😩

plucky sparrow
#

I only do 1.5.2

south matrix
#

you're not even in there owen

plucky sparrow
#

Wanna learn that language with me?

potent fossil
fallen oracle
#

You get your IDE open yet? pepewaiting

potent fossil
#

trying

#

it's doing some shit

cosmic raft
#

who needs an IDE anyways

potent fossil
#

oh hey look it's indexing libraries

#

that's new

waxen panther
#

all my homies use githubs file editor 😎

foggy silo
#

I manually edit patches thank you very much 😀

plucky sparrow
#

I use nano

foggy silo
#

And hey…. You need to at least use notepad.

potent fossil
#

that just reminded me of a dude in my school who tried to flex on me by saying he doesnt use an IDE and codes in notepad, and he thought it was a legitimate flex

foggy silo
#

Don’t subject urself to the hex editor

potent fossil
#

i was like, ok...cool

golden gust
#

Yea, we get it

#

You don't wanna use tools which help you

waxen panther
golden gust
#

glhf

faint crystal
foggy silo
#

👀

plucky sparrow
#

I’m spying on you

meager tusk
foggy silo
#

Uh oh noah….

plucky sparrow
#

Be careful.

meager tusk
#

that's why

potent fossil
#

not sure if this is problematic or not

foggy silo
#

Green.

waxen panther
#

average groovy file

potent fossil
#

why am i green

plucky sparrow
#

Every once in a while I remember simple is in our walls

foggy silo
potent fossil
foggy silo
#

Just the entire file is all red, I’d ignore it tho

#

Haha you became green haha

potent fossil
#

i should never have submitted translations

waxen panther
#

i am the real green smadge

foggy silo
#

I speak English

plucky sparrow
#

Simple is now a cheap brocc knockoff

foggy silo
#

*was always

waxen panther
potent fossil
#

thanks kash

left swift
foggy silo
#

Undone

left swift
#

brocc

waxen panther
#

hello csgo player

#

twitch watcher

left swift
#

u the type to stream on mixer

waxen panther
#

i do not stream

left swift
#

rite

waxen panther
#

except in my discord server to my LOYAL cult members.

foggy silo
#

What about the UNLOYAL ones

left swift
#

eaters of the veg

waxen panther
#

fuck em

foggy silo
#

Fair

left swift
#

u fuck them??

waxen panther
#

yea, somethin like that

left swift
#

that's alot of fucking

#

thanks to today's sponsor

#

gfuel

faint crystal
#

what if they're minors?

left swift
#

what are they mining

waxen panther
#

no minors in my friend server

#

dont like em

foggy silo
#

Rip

left swift
#

blue oskar

zenith maple
#

Hey. Anyone knows how to add delay in the method? for example:

        for (String cmd : cmds) {
            cmd = cmd.replaceAll("%player_name%", p.getName());
            Bukkit.dispatchCommand(Bukkit.getConsoleSender(), cmd);
        }
    }```
here i want to make delay before command execution
waxen panther
#

use the bukkit scheduler to run a task later

foggy silo
left swift
#

skript

foggy silo
#

Thread.sleep

waxen panther
#

do not do that