❗-1-18-experimental

[dapper lotus]

ptero doesn't always leave enough ram free for the heap and java itself

[hoary atlas]

because of the docker limit

I see now

[devout musk]

A better one than the official openjdk image?

[solid goblet]

there are no actual official ones

The whole scene is pretty fucked

The docker images that is

[devout musk]

It had an "Official Image" badge on the docker home page

[solid goblet]

I know

Try what Noah said

[devout musk]

Oh shit, "The OpenJDK port for Alpine is not in a supported release by OpenJDK, since it is not in the mainline code base. It is only available as early access builds of OpenJDK Project Portola." TF

I'll try to switch to lite slim

[hoary atlas]

thanks!

[proven crest]

does the cat want the heapdump? 😺

[solid goblet]

🐱

[vapid prawn]

Wait so anyone who has glow berries has had their server crashing for 4 days and no one noticed?

https://docs.oracle.com/en/java/javase/17/docs/api/java.base/java/util/Random.html#nextFloat()

[worn robin]

[vapid prawn]

https://github.com/PaperMC/Paper/blob/7c8fdc1fb60212217e26040593b03d30642b5bcd/patches/server/0820-Fix-kelp-modifier-changing-growth-for-other-crops.patch#L28

[peak pulsar]

IntellIJ says its fine ¯_(ツ)_/¯

[devout musk]

Apparently there was also something weird going on with my java version due to alpine not being officially supported by openjdk

[vapid prawn]

Patch is making it call Random#nextFloat(float) but the javadoc says that doesn't exist

[peak pulsar]

https://docs.oracle.com/en/java/javase/17/docs/api/java.base/java/util/random/RandomGenerator.html#nextFloat(float)

[vapid prawn]

Is this not a java.util.Random then?

[peak pulsar]

Random implements RandomGenerator

which has a nextFloat method with a bound

[vapid prawn]

Oh, this is a Java 17 addition

So yeah, if you have a some prerelease version of 17 you might not have it then, makes sense

[fossil hound]

Is there a config/commandline argument/environment variable that automatically enables timing on Server start?

Bc I dont want that but the Server seems to do that

[dapper lotus]

paper.yml

[devout musk]

Now I remember why I used alpine instead of slim, apt is just a nightmare to use with docker (and scripts in general)

[covert jolt]

it's not

i mean it is a downgrade from apk add --no-cache but i wouldn't call it a nightmare

apt update && apt install -y <package> && rm -rf /var/lib/apt/lists/*

[fossil hound]

Thanks

[devout musk]

Yes, and then have it constantly scream at you that cli inside scripts isn't supported. I call that a nightmare, especially compared to apk

[covert jolt]

then use apt-get which doesn't have that warning

[vapid prawn]

Why are you using apt instead of... yeah, that

I should read the whole screen before I start typing 😛

[covert jolt]

i just use apt tbh

the warning doesn't make too much sense for basic commands because they won't be changing that any time soon

[devout musk]

At some point I got tired of typing apt-get in the terminal, and found apt does basically the same. When making containers and scripts I kinda forgot the full command existed 😅 And I didn't expect them to behave differently to be honest

[glad vapor]

Does anyone have a decent config for antixray? Specfically for 1.18 PaperMC? Most configs I've found are for older versions of MC which in my experience does not always fully work

[half walrus]

Anti Xray configuration guide: https://gist.github.com/stonar96/ba18568bd91e5afd590e8038d14e245e

[glad vapor]

ty

[gleaming quartz]

Apt complains that it's stdout is not stable in terms of what it prints, nothing else. It's in case you'd parse or grep it.

[devout musk]

It looks like the server is stable now

[next owl]

BTW i dont know what happened but all my crashes stoped

maybe cuz I lowered render and sim

[peak pulsar]

Has there been any config changes for Paper or Spigot following 1.18 release?

[next owl]

paper.yml

yes

[vapid prawn]

1.17 to 1.18 has some changes, mostly from patches not being updated (yet?)

[runic dune]

I have troubles with the generation or the view distance everytime im in water this things appear in the border

[next owl]

what da

[runic dune]

i changed the view distance but that borders appear

[vapid prawn]

The main change is https://is.paper.sexy/ViewDistance.png?1

Eww discord is still caching the ugly version

[peak pulsar]

So no more no-tick view distance?

[vapid prawn]

There we go

Right now there is no more no-tick but vanilla has their own version of it

That has some Paper-specific bugs but otherwise seems to work just as well?

[peak pulsar]

Why is no-tick in the 1.18 update tracker

[vapid prawn]

I dunno, leaf didn't like it

Leaf was threatening to rip out the vanilla system and put his back in 😛

But someone at the very least needs to fix the bugs and add a per-world config for it

[peak pulsar]

Probably would be better tho

[runic dune]

someone has a solution for the buggy view distance

[peak pulsar]

I have ^

[vapid prawn]

I don't think his is functionally any better, the only things his did better are actually Paper bugs and simulation-distance seems to work just as well as no-tick in vanilla

[peak pulsar]

Everything looks like on render dist 2 even when having it on default (10) for server.properties and paper.yml

[vapid prawn]

His might be faster or cleaner code though, would depend on if there is enough difference to make the patch worth having

[peak pulsar]

Is this gonna be fixed for 1.18.1?

[runic dune]

x2

i have the same problem

[vapid prawn]

Do you have view-distance set in spigot.yml?

[peak pulsar]

nope

every config is on default

[tawdry spoke]

How do you know so much about it? I just go it looks cool, it’s good

😂😂

[vapid prawn]

If you don't have it in spigot.yml (or it's set to -1 there) and your view-distance in server.properties is set to 10 then you should be good

[peak pulsar]

Hmm

Odd.

I suppose it's likely a mojang bug

[vapid prawn]

Actually I think the one in spigot.yml needs to be set to "default"? I would just delete it entirely to be sure 😛

[runic dune]

i have view distance with 10 in server.properties but it has the same view distance

[peak pulsar]

yep

It works now

Delete your spigot.yml lads

[vapid prawn]

The only cause I've heard of for why view-distance doesn't work is spigot.yml

You don't need to delete the whole thing, just that line 😛

[exotic magnet]

Can we get an update da checklist update?

[peak pulsar]

The view dist line?

[exotic magnet]

Last one was 9 days ago

Aka 53 fixes ago

[peak pulsar]

Also nothing in paper should be changed right?

[vapid prawn]

Yeah, just the view-distance line in spigot.yml needs to go

[peak pulsar]

Or should I just delete no-tick line

And leave it at that...?

[vapid prawn]

I mean, you could remove no-tick-view-distance from paper.yml since it doesn't do anything now and you don't want it to surprise you later if it starts doing something again

But nothing needs to be changed in there, no

[peak pulsar]

kk

cheers for the help

[vapid prawn]

I don't think any of those 53 fixes were relevant to the checklist though

Those are unrelated broken things that weren't known ahead of time

This (and the lack of progress on the checklist items) is why everyone says no ETA

No idea what all is wrong or when people will have time to work on things

[peak pulsar]

Wait

[gleaming quartz]

I believe Mojang ticks more stuff outside of simulation distance, than Leaf does within no-tick

[peak pulsar]

I just realise latest paper has sync-chunk-writes default to true

[vapid prawn]

The block scheduler ticking is a Paper bug

[dapper lotus]

paper ignores that option entirely

[peak pulsar]

I thought it was best meant to keep that to false and paper has done that in the past?

[dapper lotus]

(and is literally only relevant on windows in the first place iirc)

[peak pulsar]

How does sync chunk writes only have to do with windows? 🤔

[vapid prawn]

https://github.com/PaperMC/Paper/issues/7054 although this is supposedly fixed now

Ah, Leaf fixed it last night

https://github.com/PaperMC/Paper/pull/7053 is somewhat related but I think might only be about making Spigot/Paper range-based settings limit themselves to simulation-distance

Instead of letting you set simulation-distance to 3 chunks then set the mob spawning range to 8 chunks and have it do spawning for 8 chunks

[feral spire]

You can set it to -1 too before

[next owl]

https://cdn.discordapp.com/emojis/798951090539987004.png?size=44

[runic dune]

i still with this borders with the unloaded chunks

[gusty trench]

Might be the fog client issue that'll be fixed in 1.18.1

1.18.1 launches tomorrow iirc

[potent pilot]

will i have to use forceUpgrade to upgrade chunks so they dont have to get converted always or doesnt the game do it itself automatic?

[vapid prawn]

Don't forceUpgrade, just let the server do it as the chunks are loaded

It's fast enough to not notice and forceUpgrade has caused issues in the past (including in 1.18)

And might be why for some people they don't get any blending between old and new chunks on 1.18, don't know if anyone has confirmed that yet

[potent pilot]

well i tried out the blending seems not working for chunks which have already generated beyong 0

also very weird is that the biomes generates different but have the same seed

[runic dune]

i have a problem everytime run the chunks around me are loading and cause a little lag

[covert jolt]

https://paste.lucko.me/Hd8uLC4lhS pretty good chunk gen speed

[potent pilot]

my chunk gen speed in 1.17.1 is around 50cps

[jade gorge]

I have a weird problem when exploring for shipwrecks, opening mostly on 1 of the 3 chest in a shipwreck will result the server to hang for a moment

[ornate salmon]

Sync chunks can cause lag and are disabled by default in paper. So I would just set the setting to false for be on the safe side.

[jade gorge]

I'll try to reproduce it tomorrow with no plugins if it still occurs

[runic dune]

what is the name of the setting

[ornate salmon]

Server properties set sync-chunk-writes to false

[runic dune]

thanks!

[peak pulsar]

Paper didn't have it on default false

[ornate salmon]

Had no issues with it disabled and seems to be more stable off.

[ornate salmon]

I think some forks do but just turn it to false

[tidal widget]

hey, everytime someone joins the server it freezes for a second. Also when you join the server after restart, chunks aren't loading for 1 minute.
there is no error log in the console

[runic dune]

other config for the chunk loading lag?

[jade gorge]

huh, somehow mine is set to true

[next owl]

didnt

[half walrus]

https://eternity.community/index.php/paper-optimization/

[peak pulsar]

Same

[jade gorge]

weird...

[ornate salmon]

Idk I’ve heard some people say paper Ignores it even if it’s set to true but it causing lag so just set to to false anyways. Doesn’t hurt

[jade gorge]

is it enabled by default?

[ornate salmon]

The setting yes but some forks and stuff ignore it,

[quartz hare]

Do we get a Status Update regarding how the development is going?

[half walrus]

https://github.com/PaperMC/Paper/issues/6136#issuecomment-982297893

[peak pulsar]

and #❗-1-18

[quartz hare]

Thank you

[nova parrot]

Does 1.18 patch new dupes and glitches?

Or will we have to patch them ourselves

[covert jolt]

paper will patch dupes/glitches when reported

[nova parrot]

Alright

[peak pulsar]

Paper patches known dupes ^, if you can reproduce a dupe on the latest, report it in #869651180698099732

[sturdy mason]

eta

[half walrus]

__There Is No ETA__

Updates to Paper do not have any sort of estimate for when they release, ever. Any and all updates will arrive when they are ready, and the only thing to do is wait for them patiently along with everyone else.

ETA means 'Estimated Time of Arrival'!

[sturdy mason]

thanks bot ❤️

[nova parrot]

So is there a way I can

Patch dupes myself

?

[rocky nest]

I mean you can fork paper, but dupes will be patched by paper

[nova parrot]

Alright

Thank you so much

[stable violet]

Is anyone running chunky on 1.18 to just generate the worlds? Had any issues on a new world in 1.18?

As well, I was hoping to upgrade to paper but it's not production ready yet, has anyone had any issues with a couple plugins to get by with?

[peak pulsar]

only things missing are a few performance patches

it works fine

[hot parrot]

What's are the major bugs at the moment

[peak pulsar]

none

[stable violet]

I was trying to see if there was a way to find some servers who are running 1.18 but not via version, wanted to see how it was going for them.

[peak pulsar]

at least none that I've encountered

[hot parrot]

That's great, I will be moving my server over soon

[peak pulsar]

a lot of plugins haven't updated

[stable violet]

the ones i need, have been ready so they say

[vague falcon]

which most of the time isn't an issue

only plugins that use nms (anger) would be affected by a version bump

[nova quest]

aka the most important for servers

[stable violet]

do you think it's okay to use latest paper and all?

[stuck mural]

my theory is that a "stable" paper build wont come out till 1.18.1 is officially out. that or the team is waiting until no tick view distance is properly implemented into paper

[nova quest]

Thats guessting on an estimated time....highly illgal 😛

[stuck mural]

dont worry about it its just a conspiracy theory

[half walrus]

https://github.com/PaperMC/Paper/issues/6136#issuecomment-982297893

[vague falcon]

weird way of forcing an eta out of me...

[stuck mural]

ah shit my bad

[vague falcon]

lmao kidding

[stuck mural]

haha

[nova quest]

there is being said its already kinda stable to run. only few perfomance fixed are coming

so just wait for a christmas present which has nothing to do with the release of paper

[jade gorge]

well, I'm fine running chunky, just mind your memory due to leak

[vague falcon]

"There is no ETAs for a "stable" release. Repeat, THERE ARE NO ETAS!"
These builds are still experimental, so don't forget to make backups and do not use them in production environments
etc etc

[stuck mural]

yea ive had no issues as of yet. electroniccat told me that the dev working on the no tick view distance implementation is quite busy which is why it hasnt been merged yet

[stable violet]

wasn't asking for a eta, okay -

[vague falcon]

lol

[stable violet]

what kind of memory leak? what happens?

[nova quest]

there seems to be a lot depending on no tick distance. is that a paper thing or a vanilla to paper thing? (just learning here)

[vague falcon]

you're like "is the eta of stable now or in the past?"

[jade gorge]

oh, just crashes and stops the server

when your jvm is full

[quasi panther]

No tick distance is papers version of simulation distance

[stable violet]

I see now, do you do backups? how often?

[stuck mural]

originally, paper implemented no-tick-view-distance. i think it was originally a tuinity thing. then minecraft added simulation distance which is the same thing as no-tick-view-distance, essentially

[nova quest]

which i didnt asked for to mojang in the first place 😛

[nova quest]

ahhh oke

[jade gorge]

because its still experimental, I bumped mine to every 6 hours

[stuck mural]

i already do mine every 8 hours lol

[stable violet]

I was thinking every two hours, lol - Okay yeah even in vanilla I do every 6 hours

[jade gorge]

tbh, I'm still pre-gening chunks till now, at 71.81%

[nova quest]

ive been running my(20 player) server since version 13 i guess and no crashes or plugin issues. backup every 24 hours (waiting for stable version to go to new season)

might have lost 1 or 2 bee's in the progres

[plain solstice]

making a backup every 6 or 24 hours isn't a proper backup system, having it hourly and save up to 2 weeks worth of backups is tho

[stuck mural]

my backups take over an hour to complete in the first place. how am i supposed to do them hourly??

[jade gorge]

true on this, but I lack some space from 20gb worth of pre-gening worlds

[stable violet]

having them hourly and save up to 2 weeks worth...

How?

I am only able to do 3 back ups

[jade gorge]

are you doing it manually?

I have 10 backups in my storage

[stable violet]

both, when I am on - I will do it like 3 times that I am - save the recent one and then download the latest one on my computer as back up back up.

[jade gorge]

and auto deletes the old one

[jade gorge]

I see.... what hosting service are u using btw?

[stable violet]

The best I've ever found. DedicatedMC

[nova quest]

Depends what you doing with the server in the first place.
Im now giving everyone creative to practice for the 1.18 season. No real need for backups sooner than 24hours.

Yeah if you running mr dream youtube channel servers i would backup every minute or so

[jade gorge]

mine is just baremetal, hosting from home

but yea, I haven't really encountered some serious problems, except the leak issue

[stable violet]

does it ruin the world tho? Players loose something?

[jade gorge]

no

[stable violet]

okie okie cool

[plain solstice]

just any basic survival world should have a hourly backup system just incase a crash does happen there is less complain by a community to rollback a hour but with 24hours rollback things are eh💩

[jade gorge]

it saves the worlds and stuff before shutting itself down

[jade gorge]

ye

[halcyon spindle]

30 min saves and 3 hour backups and restarts for normal production server but i do have a good 2 TB of backups at all times that covers like a week

[jade gorge]

kinda jealous right there....

[topaz nymph]

I mean… is the data rly important here? That seems a bit overkill x)

But if you have the storage… why not I guess?

[jade gorge]

true

backups are backups

[halcyon spindle]

if i backed up every hour it would be backing up constantly lol and i would have 40TB of storage to keep a week

[plain solstice]

https://www.borgbackup.org/

[halcyon spindle]

your worlds must be puny

[halcyon spindle]

used to keep 2 weeks of backups just in case but they got too big lol

[mighty spade]

out of curiosity, how big is one full world backup?

[halcyon spindle]

only 1 world.. idk the server backup in entirety is close to 30 gigs we have 5 worlds all pregened out about 20000 blocks

[mighty spade]

so about 6 GB per world then, that's not too bad

[halcyon spindle]

nope

[formal matrix]

If you like dedicatedmc I recommend you take a look at bloom host

[stable violet]

why? curious

[formal matrix]

It’s like dedimc but cheaper and more features

[stable violet]

same support system?

43 seconds to respond or less? Discord support tickets?

[formal matrix]

Yep, maybe not 43 seconds but usually within minutes

[stuck mural]

does bloomhost have Tehlo though????

[stable violet]

right!!!!

[formal matrix]

The owner is very active in the discord

[mossy wigeon]

WHERE IS THE CSS on this website idk if I wanna use it..

[topaz nymph]

Not all developers are web devs x)

[plain solstice]

Bru do you really need ping me for that ....

[unique nymph]

Do you get a shell account with shared MC hosting?

How about SSH access (instead of FTP)?

[exotic magnet]

Can we get an updated checklist

Been 9 days since the last one

Aka 60 fixes ago

[dapper lotus]

SSH access is pretty much never a thing on shared hosts

The checklist is afaik updated

if you keep pestering you'll be booted

[mossy wigeon]

Apologies, I wouldn’t like to be pinged for that either.

oh my god.. sorry I forgot to turn off the ping

[plain solstice]

Bru..

[mossy wigeon]

I know that seemed rude

my bad I’m on mobile

Life is harder on mobile for me, used to PC

[plain solstice]

discord reply sucks

[mossy wigeon]

yeah I would prefer if I could have mentions off by default

[terse hamlet]

off topic go to general

[vapid prawn]

Didn't I explain this to you a few hours ago?

Do you want them to add more things to the checklist just to check them off right away as they fix other bugs?

The checklist is more of a high level thing anyway

[mossy wigeon]

Sorry, mini mod.

Back onto topic, i wonder how many servers will be ignoring 1.18 because they think the server performance is gonna be bad

And maybe they don’t like the whole render distance rename

[vapid prawn]

About 0% 😛

Close enough anyway

[cedar hill]

Anyone encountered serious performance issues?

[mossy wigeon]

Hmm alright, we’ll see because 1.18 performance looks scary if you aren’t pre generating

[vapid prawn]

There are a couple perf issues with 1.18 but they seem like we already know how to fix them and Mojang might even do so in a future patch update

The only slowdown that you can't escape from is chunk generation but you usually either pregen, have small worlds, or don't do enough generation for it to be a problem

[cedar hill]

Sounds good

Pregen probably will be the best bet

[mossy wigeon]

The thing is since I have a world map, I don’t necessarily want the chunks pregenerated because then people will just use it to explore non touched areas

[vapid prawn]

Like, goats are really slow but the implementation isn't just poorly done, it's pretty obviously bad

You can improve it both algorithmically and via micro optimizations without too much effort

I think Paper might have already done so even?

[mossy wigeon]

Interesting, I’ve not had time to test goats

I’m kind of deviated the update was split up again

I just wanted a simple up to date world no old chunks

[vapid prawn]

Lithium has already fixed goats too

So the fix is known and wasn't too much work, Mojang just did a dumb

[cedar hill]

Not unusual

[vapid prawn]

It wasn't split up again?

The original 1.18 stuff isn't in 1.18, it's in 1.19 now, sure

But I don't think they ever said it would be in 1.18 after they did the split on caves and cliffs

1.19 is going to have more worldgen changes though, yeah, which is kind of a pain

But the biggest change is something I think they said they'll still generate in existing chunks (deep dark or whatever)

[mossy wigeon]

The warden 😦

[vapid prawn]

afaik those are basically just underground villages so it'll probably work like ocean temples did

[mossy wigeon]

I wanted him the most

[vapid prawn]

That was never going to be caves and cliffs content though afaik

[mossy wigeon]

One day I’m gonna have the warden as a pet to show how awesome I am.

[vapid prawn]

It's coming 1 release later just because 1.17 got split in half, not because they bumped it again

[mossy wigeon]

Hmm at least the devs are getting the opportunity to work on the new gen and make sure servers don’t end up draining in performance

[polar quarry]

how does mojang even run realms?

vanilla runs like shit

[cedar hill]

Which is why no1 uses realms

[polar quarry]

they must have a farm of overclocked amd 5950x for their stuff

[mossy wigeon]

Bedrock people use realms, works fine for them

[peak pulsar]

Pretty sure realms used to run on AWS and now runs on azure

[mossy wigeon]

I would know, bedrock realms are so simple everyone can join basically

If I remember, you can even join with second controllers?

[vapid prawn]

1. They have a small player cap
2. They charge a decent amount of money for it
3. Economies of scale
4. They moved it to Azure so probably get a huge discount

Although they probably also got a huge discount on AWS too, only small fries pay the listed rates

[ruby pecan]

Vanilla MC runs actually really good now compared to a few years ago.

[mossy wigeon]

AND, realm owners actually pay heir bills from making the realms p2w

[vapid prawn]

If you're spending more than $10,000/mo on AWS you get to talk to a sales rep and negotiate custom stuff

[mossy wigeon]

Compared? Ehhh.. maybe, I have 225 fps on 1.17 and my computer is a potato

[vapid prawn]

Vanilla probably runs better now than it did in, say, 1.12

Not better than it did in beta 1.7 though 😛

[mossy wigeon]

Anyone know any insane projects in the works yet for 1.18?

No insane developer trying to multi thread Minecraft?

[vapid prawn]

btw it's really funny, the page for java realms is full of bad links

[ruby pecan]

I mean yeah, but who the fuck is playing a 10 year old version of Minecraft at this point outside of nostalgia?

[polar quarry]

me, hi

[mossy wigeon]

Java realms are a joke basically

[vapid prawn]

The only links that work are the ToS and ones to buy stuff

[mossy wigeon]

Any Java realm owner is basically laughed at because they can use proper hosting and get a better deal prob

[vapid prawn]

Realms are easier to join though

[mossy wigeon]

Maybe on bedrock but for Java it’s probably barely any better

[vapid prawn]

And easier for a clueless parent to buy/run

[mossy wigeon]

Absolutely, it’s hard to tell my mom I run a server tbh. That’s why I rely on donations and yard work

So I simplified it to oh yes, I code… I have a server that runs the code for money per month

[exotic magnet]

I didn't mean to. Sorry

[mossy wigeon]

That’s why I use bootstrap!

Great for my server’s website. Been working on it for 1.18

[minor stream]

pog exploit

[crude glacier]

https://tenor.com/view/walter-white-shocked-fall-4k-4160p-gif-21623835

[ancient sun]

when will the details of the exploit be released?

[subtle spear]

can we get a quick overview of the threat model so server ops can decide how urgent the update is

[ancient sun]

considering its a 0day i think they should be soon

[ancient sun]

yeah this

[vapid prawn]

The CVE isn't even public yet

It's an exploit in a dependency, not some cheat in your game thing

[sharp zodiac]

What was the exploit?

[vapid prawn]

Nope 😛

Wait for the CVE

[warm halo]

what does cve mean?

[subtle spear]

ok but at least tell us what the effects are?

[next ibex]

Been running 1.18 #20 and it's been quite a nice experience (Only a few guys). I'd like to know if I have to yeet the server temporarily.

[white robin]

It's "let's @ everyone and update all our platforms" urgent

[hoary atlas]

RCE?

[hollow escarp]

Common vulnerabilities and exploits

[arctic oracle]

Where will we find the CVE when available?

[subtle spear]

is this like execute arbitrary code on my server urgent or mess up my minecraft builds urgent

[soft dust]

ah, so it's a legitimate security vulnerability in the server and not just like a "players can dupe/get creative" or whatever?

[stray hull]

you can't just tell us what it does

like is this a backdoor

[hollow sparrow]

lmao

just tell us what the fuck the effects are

jesus

[ancient sun]

is it an other deserialization thing

[subtle spear]

great disclosure policy

[warm halo]

yikes, someone woke up on the wrong side of the bed

[subtle spear]

10/10

[royal shadow]

the chance of your server being attacked by this exploit is small.

[kindred basalt]

Sting. Mate. They just said you're not getting info.

[strange umbra]

Asking whether it effects crashing or backdooring etc gives nothing to anybody trying to abuse it so i dont see the issue

[hoary blaze]

what is the exploit

[subtle spear]

security through obscurity 5Head

[devout wharf]

I respect your decision, but security through obscurity is controversial for a reason

[kindred basalt]

FOR NOW. Jfc can y'all read?

[autumn comet]

Keep topic channels on topic

[warm halo]

why not just update and ask questions later?

[hidden cargo]

I can!!!

[glad vapor]

What is the nature of the exploit that was just patched?

[autumn comet]

!kick 435732383963021313 Kick topic channels on topic

[wheat heart]

:raised_hands: Kicked jakey1995abc#4476 (Kick topic channels on topic) [1 total infraction] -- NotMyFault#3732.

[stuck mural]

info on it is coming out can yall please chill

[hidden cargo]

not immediately posting details to an exploit is normal

lol

[arctic oracle]

You guys are dumb, if you discover a security hole, you fill it before telling everyone how to use it or hinting where it is

[hoary atlas]

slow mode

[subtle spear]

if you're notifying sysadmins of an exploit and telling them to update with a fix you're at the stage where the vulnerability needs to be disclosed, including instructions on how to tell whether existing installations are compromised

[atomic smelt]

Wow...

[neon shard]

The timing of this exploit is unfortunate, since it probably disrupted 1.18 progress

[subtle spear]

now this is just "panic right now, no we won't tell you why"

[minor stream]

if a bank finds a security hole, they aren't gonna go around telling everyone what it is so the people "dont do it"

[gusty latch]

is the exploit upstream(spigot) or paper and its forks only

[vapid prawn]

If they had all the details they could tell you 😛

[waxen spire]

People aren't the smartest and this is just panic. No point telling them how dumb they are

[hidden cargo]

some of yall like @subtle spear sound dumb

[subtle spear]

if a bank finds a security hole it discloses it to the software vendor

i have worked for a bank

[kindred basalt]

It's not papers job here to disclose the private cve.

[vapid prawn]

The upstream project hasn't released anything yet so you (or paper devs) could guess and probably get close based on the patch but there is nothing public to tell you

[hidden cargo]

we arent the vendor though

[autumn comet]

!kick 143531770288013313 Take your entitlement somewhere else

[hidden cargo]

were the bank client

[wheat heart]

:raised_hands: Kicked javascript sucks#7449 (Take your entitlement somewhere else) [1 total infraction] -- NotMyFault#3732.

[kindred basalt]

Whatever I'm done

[waxen spire]

At least they provided a quick fix to the exploit so we arent sitting here panicking about an exploit that isn't patched

[lethal mango]

[atomic smelt]

This is actually insane....

[vapid prawn]

https://logging.apache.org/log4j/2.x/security.html is where you should see the details, yeah, but they aren't there yet

[scenic merlin]

Thanks for letting us know about the security vulnerability quickly

[sharp zodiac]

I am going to wait for the next build with the patch to update my server.

[waxen spire]

Ty

[atomic smelt]

They really didn't though. There is no way for people to properly asses the risk.

[minor stream]

better idea imo is to just wait until the stable build is finished before updating anyway 🤷

[hidden cargo]

oh thats not fun

[dapper lotus]

We've already alterted people towards the general issue

[glad vapor]

What does "Kick topic channels on topic" even mean? Please at least give a reason in English

[lucid hare]

that does not sound good

[scarlet summit]

Thanks for alerting us so quickly, instead of just keeping quiet. The people asking for the exploit/the effects of the exploit need to chill down

[pastel wedge]

Uh oh

[burnt stone]

Nice

[hidden cargo]

ty mr electrocat

[waxen spire]

Its a exploit to do with a dependancy

[covert jolt]

, yeah, but they aren't there yet

that is not the issue

[lucid hare]

can a firewall prevent it?

[wild falcon]

what is the exploit ?

[covert jolt]

please read before spreading misinformation

[dapper lotus]

and that thing on the security page is literally irrelevant

[warm halo]

Idk where to ask this but i only have a small 30 people whitelisted server. Should i update right now or can i wait until i have time?

[hidden cargo]

no but its fun to read

[waxen spire]

Update your jar either latest 1.16 or 1.17-1.18

[wild falcon]

Like what does the exploit do?

[vapid prawn]

This is from the release in April 2020

[strange umbra]

Lmao this is fun to watch

[vapid prawn]

The information you're looking for isn't on that page yet

[waxen spire]

Mhm

[wild falcon]

anyone know?

[waxen spire]

Good job on informing us

[final mango]

Stop spreading misinformation, do not try to guess at what the exploit is, you will likely be unable to do so.

[waxen spire]

Not sharing

[minor stream]

if they're all trusted you dont necessarily need to do it this very second, but definitely do it soon. it opens up a pretty big vulnerability

[sharp zodiac]

[waxen spire]

Details will be out later so be patient

[atomic smelt]

According to moderation we aren't allowed to know.

[plush ore]

Makes sense

[vapid prawn]

I'm not sure anyone knows for sure what it is yet

[waxen spire]

^

[warm halo]

Okay yea i trust them all, its just a friends server. Ty tho

[vapid prawn]

So you're asking them to guess for you

[waxen spire]

Honestly should have added a slowmode

[stuck mural]

homie. the cve isnt out yet. you will know at some point

[final mango]

people know what it is, but it will not be made public.

[hidden cargo]

amaranth please guess for me

[atomic smelt]

The info sec community would like to disagree.

[minor stream]

take what i say with a grain of salt though, im no security consultant

[arctic oracle]

This conversation (stupid as it is) should be in #general not here

[waxen spire]

It really is

[sharp zodiac]

:e:

[dark nymph]

just like every exploit there is

[waxen spire]

I thought people would be smart and actually think with a good mindset

[scarlet summit]

Just throw this channel on lockdown for the next 1 hour or so

[waxen spire]

^^ could but ppl will be dumb

[marsh mortar]

anybody here should be updating their servers as new builds come out anyway, given stable isn't here yet.

[autumn comet]

Yes, move this to general please

*if your question is not asking for it lol

[gusty latch]

set slowmode to 5 minutes

[unkempt marsh]

paper found out aobut the exploit

trole

[plush ore]

Imo it makes sense for a couple days until people switch.

If you want to continue we can do it in #general

[atomic smelt]

The problem becomes that admins cannot asses the risk for themselves. If the exploit is in the hands of attackers already its to late...

[hidden cargo]

hey so, is 1.18 stable?

[junior gorge]

No

[arctic oracle]

No*

[pastel wedge]

Tldr; no we don't know what it is nor the severity

[hidden cargo]

kk

[peak pulsar]

hmmmmmmmmm hmmmmmmmmmmmmmmmmmmmm

[atomic smelt]

Thats fair, I have no reason to argue about it anyways.

[hidden cargo]

idk how often people update names

¯_(ツ)_/¯

[signal swan]

c'mon it's #❗-1-18-experimental

[hidden cargo]

yea ik

[hazy hawk]

I am having a server problem and I'm going to guess this is the right place to ask about it

[hidden cargo]

im not familiar with the paper team :(

[stuck mural]

you telling me you dont see #1-18-stable?

[unkempt marsh]

light them eusert

[arctic oracle]

If it's 1.18 related

[hazy hawk]

I'm guessing so

[hidden cargo]

no I cant see very well, my glasses are out of date

[hazy hawk]

I'm running latest version I think until the exploit ping

[hidden cargo]

[hazy hawk]

and my server murders itself when a player dies and respawns

we had a graves plugin, disabled that and issue persists

[arctic oracle]

Murders how? Like a crash?

[hazy hawk]

tps just plummets

[arctic oracle]

Do /timings report

And paste link here

[uncut storm]

why i cant import spigot 1.18 on eclipse?
https://prnt.sc/22hzcdx
on spigot 1.17 is working fine

[autumn comet]

See https://papermc.io/using-the-api

[hidden cargo]

worked just fine for me

[unkempt marsh]

use intellij

pls

[uncut storm]

i want to use eclipse

[hidden cargo]

do you use maven

[autumn comet]

!kick 715319643249705030 If you're not helpful in topic channels, just leave it

[unkempt marsh]

config issue

[wheat heart]

:raised_hands: Kicked Aamber#6015 (If you're not helpful in topic channels, just leave it) [1 total infraction] -- NotMyFault#3732.

[uncut storm]

i not want maven

[lethal mango]

what kind of sadist uses light theme

[hazy hawk]

I forgot timing existed

[hidden cargo]

alright

[hazy hawk]

https://timings.aikar.co/?id=fa4eb7b90a4f4334a191a98360b7996a

[hidden cargo]

id make sure you are using the right jar in depends

[peak pulsar]

timings is very very useful!

[hidden cargo]

the api itself works

id guess its imported wrong

[uncut storm]

no maven i want to import jar manually

[autumn comet]

No you don't want to do that hell of a ride

[hidden cargo]

then download the jar and import it

[uncut storm]

not work on 1.18

[autumn comet]

Stick with the industry standard

[hidden cargo]

then make sure you have the right jar path

lol

[uncut storm]

i have right

[hidden cargo]

NotMyFault, some could say theyre on the highway to hell

[autumn comet]

And yes, that is intended, paperclip is just a bootstrap, it has no server code.

[uncut storm]

im trying with spigot and with paper but nothing on 1.18 jar

on spigot 1.17 is fine

[autumn comet]

glhf, nobody will hold your hand in unsupported environments

[hidden cargo]

idk id ask someone who uses eclipse

[unkempt marsh]

what r u trying to do

[arctic oracle]

Anyone able to assess this for me? Timings are impossible on mobile lol

[uncut storm]

to use spigot 1.18 instead of 1.17

and cant find any package of spigot

[unkempt marsh]

just change the jar

[uncut storm]

i did

not working

[unkempt marsh]

what do you mean?

[hidden cargo]

reindex then lol

I dont use eclipse lmao

[unkempt marsh]

hm

did you download the jar from the papermc website?

[uncut storm]

i download from getspigot for spigot

and on paper

but nothing

[unkempt marsh]

hover over the error and what does it say

[vague falcon]

Don't ever use getspigot

[arctic oracle]

Did you actually run the jars to build the server?

Because they don't contain server code on download

[ancient sun]

eclipse is so terrible

[uncut storm]

buildtools?

[grand osprey]

use intellij and gradle 👍

[uncut storm]

yes i use intellj

but now i want on eclipse

i have 100 plugins on eclipse

[grand osprey]

then open them in intellij

[uncut storm]

no

eclipse is more easy to export

[unkempt marsh]

bruh i have like 300X

XD

[uncut storm]

and to use

[unkempt marsh]

idk then

[uncut storm]

eclipse is quick

[unkempt marsh]

im not a eclipse expert

[arctic oracle]

Eclipse is not supported

[haughty kiln]

what was the exploit being abused?

[grand osprey]

intellij with gradle is one doubleclick lol?

[unkempt marsh]

and maven

too

[uncut storm]

must wait few minutes to complie it

[unkempt marsh]

..

[uncut storm]

i have slow laptop

[grand osprey]

only on first compile

[arctic oracle]

Read #announcements and go to #general

[spice hedge]

And most of the Time it ddoes on it's own

[uncut storm]

anyone to help me with eclipse?

im not gonna to use intellj

[hidden cargo]

nobody asked you to

[uncut storm]

i use intellj for specified projects only

[autumn comet]

The time you wasted here to refuse to use the industry standard could be invested thrice the time into setting up gradle or maven lmao

[wheat sphinx]

lol didn't know people still use eclipse

[arctic oracle]

I mean you were already told no by more than one dev

[hidden cargo]

not my fault, im sitting waiting for my ride

I'm fine with wasting time 😉

[hazy hawk]

if I can't get help with misc lag issues here should I go to #paper-help

[arctic oracle]

Sorry it's been kinda a mess here, link the thing again

[hazy hawk]

https://timings.aikar.co/?id=fa4eb7b90a4f4334a191a98360b7996a

[uneven pagoda]

Just migrate to Intellij. I also have ~50 plugins in Eclipse from 1.8 to 1.17, but with 1.18 there was simply no choice left

So just don't waste ur time

[hazy hawk]

the only thing that makes sense to me is a lot of red numbers then yellow numbers then one big red number in discordsrv

[uneven pagoda]

I migrated, spent a couple of days.. but now I'm getting high

[ocean finch]

Can someone please DM me what the exploit is from the announcement?

I want to know how high-priority it is and if I should restart my network right now

[autumn comet]

Yes

You should

[hidden cargo]

yes

[unkempt marsh]

what

[autumn comet]

!ban 526741661922099218 Cheap troll

[rough creek]

chill out chief

[wheat heart]

:raised_hands: Banned Taito#3984 (Cheap troll) [1 total infraction] -- NotMyFault#3732.

[arctic oracle]

We don't know, it has nothing to do with paper read #announcements and go to #general

[unkempt marsh]

logj4

i think

idk

its smth to do with logj4

cuz every commit is logj4

or smth with fixing it

[autumn comet]

in #paper-help

[ocean finch]

🙂 Thanks guys

[arctic oracle]

Your problem seems to have something to do with saving but I am having a really hard time reading it on mobile

[hazy hawk]

OK ty for telling I'll go check perms and maybe wipe userdata

[unborn parrot]

Hey! Can somebody please give me a tip how can I start 1.18 paper using java -cp ?

[autumn comet]

You'll need the classpath of paperclip then

[unborn parrot]

I'm not shading any libraries to custom plugins and prefer to add them to classpath instead to avoid repeating
I used to do it like java -cp "paper.jar;libs/*" org.bukkit.craftbukkit.Main

Where paper.jar is patched file from cache folder

[dapper lotus]

can't do that

should just be able to -cp and then -jar?

[unborn parrot]

No, sadly it's not possible

[dapper lotus]

Just, that will have some caveats due to the classloader

You're probs SOL there actually

[unborn parrot]

Is it possible to somehow make paperclip to assemble full jar again? Or do it manually

[flat harbor]

Whats a promoted build

[unborn parrot]

Does it actually loads full libraries folder to cp?

on -jar

Or it's only used on patching stage?

[grave charm]

you can look at the bootstrap Main class. org.bukkit.craftbukkit.bootstrap.Main and see what it does re the libraries, and versions folder

[devout wharf]

Thanks for doing good work devs. ❤️

[unborn parrot]

Do server actually include kotlin runtime now? 🤔

[dapper lotus]

no

[obsidian pivot]

what’s the exploit?

[peak pulsar]

^ ?

[rocky nest]

potential RCE

[peak pulsar]

Need to ensure my server is safe

[dense river]

see the pins in #paper-help

[rocky nest]

Update asap

[dense river]

This is not the right channel.

[peak pulsar]

What is RCE

[vivid iron]

RCE: Remote Code Execution Explained - N-able

https://www.n-able.com/blog/remote-code-execution

Aug 29, 2019 ... What is an RCE attack? In an RCE attack, hackers intentionally exploit a remote code execution vulnerability to run malware. RCE can have ...

Requested by aurora - About 8,070,000 results (0.30 seconds)

[dapper lotus]

it's not an RCE unless you're really stupid, ignore that aspect

[unborn parrot]

So, no actual way to load deps with the server anymore? 😕

[rugged bone]

In what scenario would it actually be an RCE?

[vapid prawn]

Anyone in this channel shouldn't have that problem, you have to have ancient Java versions

[foggy blaze]

Any news on a stable build? like time frame? 1-2 weeks?

[rocky nest]

no eta.

[rugged bone]

let me check

[half walrus]

__There Is No ETA__

Updates to Paper do not have any sort of estimate for when they release, ever. Any and all updates will arrive when they are ready, and the only thing to do is wait for them patiently along with everyone else.

ETA means 'Estimated Time of Arrival'!

[foggy blaze]

why is it taking so long though? is there an issue?

[polar quarry]

wtf is that attitude

[rugged bone]

paper devs work for free

[polar quarry]

as if you were entitled to fast updates

[foggy blaze]

im not

im just asking

[tribal lotus]

A lot of new/changed stuff in the game

[foggy blaze]

i dont mind the wait

just wanted to know why its taking long? is there a problem or is it just all the new items?

[polar quarry]

complexity, i guess

[dapper lotus]

Stuff takes time

people have other things to do than work for free on a piece of software

[timber ridge]

Yeah end of year is tough for updates.

[foggy blaze]

yeah i know, im not saying they need to do it now im just asking, dont be so hostile, i know these people work for free. im not rushing them.

[kindred basalt]

They get asked that hundreds of times a day

[timber ridge]

Holidays, work, cat shitting on your rug, etc. End of year can be tough.

[feral spire]

It’s ok leaf finished his CPU. It will be anytime now /s

[rocky nest]

https://f.u11.io/6pweok

[foggy blaze]

so rude here....

[kindred basalt]

You'd get tired if answering the same question after the 300th time.

[foggy blaze]

all i asked was a question

[timber ridge]

I think when you say “what’s taking so long” it comes off as kind of rude and demanding. So people responded negatively to that.

[rocky nest]

https://f.u11.io/vWDLgy wow ok that's a few

[foggy blaze]

maybe maybe

didnt mean for it to sound bad though so i apologise. :)

[kindred basalt]

I'm explaining the situation. If you don't want to read my responses block me. We're here to provide help and answers not be your friend.

[foggy blaze]

i was just curious as all

[timber ridge]

It’s all good. People come in here dozens of times a day asking the same question.

So folks are kind of burned out on answering it.

Especially when you can usually scroll up a few pages and see the answer.

[foggy blaze]

i get that, i was just curious as all :) i know now :)

also, what was this "exploit" found in the update?

[feral spire]

Read

[foggy blaze]

.. read what sir.

ooo

i see

well

thats

not good.

[polar quarry]

lmfao that's depressing

[pale cedar]

eTa wEn /S

[hoary gazelle]

technically kenny got paid while developing on his last streaming sessions

[uneven pagoda]

random(week, year)

[arctic oracle]

this isn't even remotely the longest update time

[timber ridge]

It’s been 9 days.

[hollow cairn]

hmm wonder who thats for? 🤔

[timid wolf]

What’s the result of the exploit?

[timber ridge]

See the pins in #paper-help

[fossil hound]

Sooo... Is java 17 the only supported version?

[dapper lotus]

yes

[fossil hound]

BC I tried a Java 18 Beta and it didn't work 😦

[dapper lotus]

oversleep is where the server has too much work to do between ticks so it "sleeps" for longer

[plush ore]

That's weird...

There are tons of people exploring but my 9900k should be able to handle it.

[clear steeple]

Could be that your disk sucks?

[plush ore]

That could be a possibly, let me make sure I'm on an nvme

[plain solstice]

Pregen might help somewhat but eh of it's bad disk gl

[plush ore]

I pregenned to 10k in overworld and 5k in nether

[clear steeple]

Hosts can give you a good CPU and cheap out on the disk, so I'd just be 100% sure

[plush ore]

I might switch back over to my 5800x server

[clear steeple]

sudo lshw -class disk may give you info on your disk

[plush ore]

Just to see if it's a 1.18 issue or the 9900k or the disk

My current disk is a 1 TB nvme

Can I write in some settings in the 1.18 paper.yml that's present in the 1.17 paper.yml?

Will they take effect or will it mess up everything?

[peak pulsar]

Who here knows if I can update the server to 1.18? I am unsure what the instability is. I'm running a small public server on 1.17.1 at the moment and I have all the plugins I need ready for 1.18

[warm ravine]

just take a backup and try it

worst case you rollback

[peak pulsar]

thank you lad

[rocky slate]

anyone else have mobs stutter occasionally?

[polar quarry]

isnt that just lag?

[rocky slate]

possibly. server is at 20 tps

I shall investigate. I don't recall 1.17 doing it

[polar quarry]

perhaps client network lag instead of server processing lag

[rocky slate]

I don't have a very high upload throughput because my server's ISP has no competitors. even though it's a business connection. nonetheless it could be that. I'll watch network usage and see.

I think it's a QoS problem. I'll do router work later. not important since it's just like 5 people max on personal server. thanks for suggestions 🙂

the VM does have NUMA enabled for 2 CPUs so I'm wondering if that's causing an issue
may be better to use just one CPU. mostly single threaded isn't it?

[plush ore]

It's an HP SSD EX950 1TB

Speeds:
Sequential Read 3,500 MB/s
Sequential Write 2,900 MB/s

Will send CPU Profile in DMs if needed.

[steep arch]

That happened for me a lot (the mobs stuttering in movement server-side) when I was on Spigot and decreased the max-tick-time, just saying in case it's related

[vivid iron]

message.txt by @cyan oasis: https://paste.gg/9e397c2724f545178c8b92d7f22b8625

[boreal apex]

does the recently found excploit matter if ur just running a private server some friends that you can trust?

[dapper lotus]

it's an exploit

they're able to take advantage of it

Will they? how are we to know

update.

[peak pulsar]

when do we get a detailed explaination? im interested

[boreal apex]

i dont know much abt exploits but ok

ty

[clear steeple]

I'd update anyway if you have friends like mine

[boreal apex]

yeah but im not at where the pc running the server is rn

but ill do it soon

[peak pulsar]

Probably not soon.

[fringe verge]

Sorry if this has been asked already, but given that MC 1.18.1 is due out soon (I think I read tomorrow) will you your dev team continue and complete the Paper 1.18 version, or will you be integrating the new vanilla changes and the first stable version will be 1.18.1?

[vapid prawn]

log4j2 release is apparently a few days away so... try again Monday

[vapid prawn]

That might be true, not confirmed by anyone I've talked to but it's plausible

[peak pulsar]

thats from the minehut updates channel

why isnt there any news coverage about it

is log4j kinda irrelevant?

i guess this shit happens daily

[clear steeple]

This is not it.

[steep arch]

Yeah sorry wrong link

[clear steeple]

This is not true. We've seen no successful RCE's. I'll notify their team in dms I guess

[peak pulsar]

alr, sorry for posting it

[prime pike]

I think I found bug but I am using version 49 I think so it can be fixed already I found more threes like another 10

[indigo dove]

https://github.com/apache/logging-log4j2/commit/d82b47c6fae9c15fcb183170394d5f1a01ac02d3

this is the commit upstream that fixes it

[peak pulsar]

wait RCE on client

unironically ive been asking fo dat

you can install mods to vanilla

bruh!!

think about it

[vapid prawn]

If you go there on vanilla (new map, same seed) does it generate correctly? If so, what about in Spigot?

[steep arch]

Hahahahahaha

Chaotic good

[prime pike]

im not sure i will try it next day

[peak pulsar]

hey

eh?

https://twitter.com/pyn3rd/status/1209446292390215681

Xu Yuanzhen (@pyn3rd)

#CVE-2019-17571 Apache Log4j 1.2.x RCE via Socket Server Deserialization https://t.co/fwfQ8c63N0

Retweets

147

Likes

295

▶ Play video

Twitter · Dec 24, 2019, 12:10 PM

this is from 2019

People have suggested I change my JVM argumeants to this -Dlog4j2.formatMsgNoLookups=true

multiple exploits same module?>

is that right

why don't they just remove it

[peak pulsar]

does this fix it for time being?

Do I just edit the arguments on the launcher

[vapid prawn]

1.18 has a fixed build out

Why would you use that flag?

[peak pulsar]

I am not sure it was what I been told by many people

[pure oracle]

I think it is a suggestion for the minecraft client, if you end up on an unpatched server

[fringe belfry]

purpur suggests using this flag

It's also been reported that adding -Dlog4j2.formatMsgNoLookups=true to your server's launch arguments can mitigate most, if not the entirety of the exploit.

Not confirmed yet, just reported. It might help.

[vapid prawn]

Yeah but you're using the latest Paper 1.18 build so should be fine

[fringe belfry]

Nah

unstable doo doo

[vapid prawn]

That's for older builds (but not too old, I think for example MC 1.12 is too old for that flag to work)

[mellow quiver]

but paper 1.18 not stable

[fringe belfry]

exactly

[peak pulsar]

Hey could someone help me out with putting in the launcher and server launch

[vapid prawn]

What are you doing in this channel then?

[mellow quiver]

does anyone know if regular spigot has fixed it yet

[dapper lotus]

We're not spigot.

as well as, literally their forums.

[fringe belfry]

not everyone is on 1.18 paper. most people are not actually... lmaoo what do you mean

[mellow quiver]

yeah fair enough i gotta go join their clusterfuck of a discord

[ivory sandal]

No fix will be provided in client-side until the release of 1.18.2 by Mojang itself...

[peak pulsar]

My bad wrong place to ask sorry

[mellow quiver]

ty anyway electronic

[peak pulsar]

why is it only an rce for older java versions?

[plush ore]

does paper antixray cause much lag on 1.18 using engine mode 1?

[vapid prawn]

This channel is for 1.18 Paper

[ivory sandal]

So, you better shut down your multiplayer gaming in public servers.

[dark wigeon]

even engine mode 2 is fine.

it really will be the least of your worries

[plush ore]

Okay good, I disabled it due to bad TPS spikes earlier.

[dark wigeon]

which probably came from elsewhere

[plush ore]

1.18 is killing my server lol

[upper crater]

Jeez so you tell me people could actually RAT your pc via a Minecraft server?

But how

[ivory sandal]

Yes

[upper crater]

And for how long

[ivory sandal]

By sending packets.

[upper crater]

Since what version

[dark wigeon]

theres no reason to turn off anti xray because of lag

[steep arch]

I think no-tick is not really fully fuctional ~ for 1.18 yet?

[ivory sandal]

Every version, except 1.18.1 and 1.7.*

[steep arch]

You can always simply reduce view distance, that'll help for sure...

[dark wigeon]

looks like a bit render distance, Impactic

[upper crater]

How haven’t they discovered this for years?

[plush ore]

Yeah I'm going to re-enable it, my server wanted to kill itself at 25 players but I did a lot of changes in the settings and now I'm at a stable 20 with 39 players with only small spikes.

[dark wigeon]

lot of it is taken by chunks

[plush ore]

Yeah I decreased it from 10

Probably gonna lower it to 7 from 8

[dark wigeon]

oh at 25+ players you want it at max 6

[plain solstice]

Did you pregen the map ?

[plush ore]

Yeah sim distance is set at 6

[dark wigeon]

and sim dist should probably be 3 or 4

[ivory sandal]

I suggest you guys to not play in public and populated servers

Like Hypixel.net

[steep arch]

You could also just reduce the activation distance of the entities by a lot

[ivory sandal]

Render distance will not solve the problem lmao

You send a packet

When you join a server

[upper crater]

Happy I only played on my own server

[dark wigeon]

man what are you talking about

[upper crater]

But still

[plush ore]

My server can probably handle it, lowering sim distance is a last resort for me tbh.

PM for current timings

[dark wigeon]

yeah you still have a massive amount going towards chunk ticking

[steep arch]

Are you on SSD?

[dark wigeon]

but if it works it works

[plush ore]

Hoping it'll run smoother as the builds go on

Yeah I'm on an ssd

[steep arch]

(Okay good, Timings only measures TPS as a whole and I didn't realize before what impact my HDD was having on chunk times haha)

[plush ore]

Yeah HDDs are a nightmare with chunks

[steep arch]

Maybe consider ViewDistanceTweaks plugin

[plush ore]

I might switch back over to my other dedi before it expires to see if a 5800x would make that big of a difference over my 9900k...

I know a 5800x is faster by ~15% in single core

[slender walrus]

yo what was that exploit lol

[rocky nest]

#paper-help pins has all the info paper is disclosing at this time

[rocky slate]

the same way shellshock bug was in bash since 1989 and only discovered in 2014 x)

[steep arch]

Yeah I don't usually read Log4J or linux source code randomly, do you? 🤔

[rocky slate]

usually stuff discovered by accident.

I mean not always. Some actively look for vulnerabilities. Some stumble upon them during normal usage which generate unexpected results

[peak pulsar]

this is minecraft solarwinds omg ‼️ panic ‼️

Bruh i thought experimental gonna end 💀

[topaz nymph]

It still very much needs time for testing

[peak pulsar]

Poor English

[plain solstice]

^rude

[sacred shale]

How is that poor English

[topaz nymph]

Yea, it really isn’t.

[peak pulsar]

I mean me

[sacred shale]

oh

[topaz nymph]

Ahhh..

[peak pulsar]

Bruh u already see right

💀

[topaz nymph]

Well, for it to be stable there just needs time to make sure that there are no more issues reported.

Just try testing it yourself, it helps!

[peak pulsar]

Wait what it waterfall and vilocity

[topaz nymph]

? Can you explain

Those don’t need to be experimental because they are proxies.

[half walrus]

__There Is No ETA__

Updates to Paper do not have any sort of estimate for when they release, ever. Any and all updates will arrive when they are ready, and the only thing to do is wait for them patiently along with everyone else.

ETA means 'Estimated Time of Arrival'!

[upbeat jacinth]

so.... basically, you are saying only play on servers we/our friends own that we have full control over, that are updated to the latest paper builds?

[peak pulsar]

ive lost my villagers

[topaz nymph]

That doesn’t rly tell us much, what version, any logs? If there’s nothing not much we can do..

[peak pulsar]

i think it happened after patching from 1.18#60 to #64, but not for sure, ill try to check, also if there was some kind of error in log .. i think it could be related to some other problems i still have with this dimension, which i imported from 1.17 in form of custom dimension

[hoary gazelle]

revert your backup and try to replicate i guess? 😉

[peak pulsar]

yes ill check if there is something to find ^^

[hoary gazelle]

im also having an 1.17 migrated map running at build 64, previous build 61 and my villagers didnt disappear

[hexed panther]

So what was the exploit?

[peak pulsar]

you have problems with rain indoor? or some barrows dont hit target, or other coords related stuff .. i also had to import my old nether and end via map editor amulet, to get the right dimension settings like no bed/water/sunrise .. always when i tried to set dimension settings in level.dat, i got chunk error

[topaz nymph]

Read paper help pins

[hexed panther]

Was it to with chat

[topaz nymph]

But, this isn’t the place to discuss this.

[vapid prawn]

Try again Monday, if you haven't figured it out by then

[topaz nymph]

Can you send logs?

Also I’m a bit confused what you mean…..

[sacred solar]

is the exploit only work at 1.17 and 1.18?

[half walrus]

All the info we can provide is pinned in the #paper-help channel

[topaz nymph]

Thank you for that command.

[vapid prawn]

It's probably 1.6+

[peak pulsar]

i know its a bit confusing, but i thought if @hoary gazelle also imported his 1.17 maps, he may also got some of those errors .. meanwhile i got most of my dimension problems fixed, already posted some code here and got many hints, at least as i sead used map editor amulet to get some of my dimensions fixed. only my "second overworld" from 1.17 which i imported as custom dimension still has some problems, ill check if i find something about the villager problem first .. then ill go back to rain indoor problem again

[vapid prawn]

Or 1.7+, whenever log4j2 started getting used

I thought log4j2 was older than that but I misremembered

[hoary gazelle]

i cant recall having that rain issue. but im not running a multiworld setup, just the three stock dimensions

[peak pulsar]

got error like this - okay first check i found out villager lost already before #60 in #52

[still spoke]

would this cpu Xeon E3-1271v3 be decent for 1.18 performance or no?

[gusty trench]

That's a weak CPU, I'd expect it to start struggling at 20 players

[void pine]

no

[still spoke]

alright thanks

what is a good benchmark for 1.18 servers then?

[amber mica]

You would want to look at single core performance. Server CPUs tend to be bad at that

[gusty trench]

Benchmark against what, specifically? There's passmark for single core performance where higher is better (usually, within a certain margin ofc), but the lowest you can go depends on what you're trying to do with kind of server, # of players, etc

[still spoke]

something that could handle 40ish players (with the right other hardware) and where would I check the performance for singlecore

[idle quarry]

this might help https://www.cpubenchmark.net/singleThread.html

[still spoke]

thanks

[peak pulsar]

happened in #52 but iam not sure if it could be my fault? is there a way of restoring them from backup file? 😅 i was in the_end dimension while i run kill command, but villagers etc were on overworld .. what do you think was going on there?

[vivid iron]

message.txt by @solar bear: https://paste.gg/3eee1c214a5d4b40b1289d2faa7e8277

[pulsar dagger]

is there a way of restoring them from backup file?

if you have a backup, yes

[timber ridge]

Not unless you have some sort of plugin or backup

If not, then no, they are gone.

[pulsar dagger]

just restore the world from latest backup

[peak pulsar]

i think i was having issues with my end gateways at the moment

[pulsar dagger]

if the backup was like 5 minutes ago I guess you could just restore the entity files

but I would recommend doing the whole thing

[peak pulsar]

you think i killed them? or was it another problem

[pulsar dagger]

/kill @e will kill every loaded entity

[timber ridge]

Yeah you killed them.

[peak pulsar]

good to know . . is it normal that is says "fell out of the world" ?

[pulsar dagger]

yes

[peak pulsar]

oof

[pulsar dagger]

that's just the message for /kill

uses void damage or something iirc

or no

it just calls kill and that's the fallback message I think

[peak pulsar]

btw i also lost map placed in frames

[pulsar dagger]

yeah item frames are entities

[peak pulsar]

okay that makes sense :/ well backup is some days old .. you say restoring "by hand" is much work?

[pulsar dagger]

you probably wanted /kill @e[type=enderman] or something

not sure if that's exactly correct

[peak pulsar]

yes, i should do in future 🙄😬

[pulsar dagger]

You could experiment with just restoring the entity files, but then they will be out of sync with the regions

so I would recommend just restoring the whole world

up to you though

[peak pulsar]

okay thank you for your patience and help guys! is this correct filepath? villagers were on overworld_old dimension

[pulsar dagger]

yes those are the entity files

[prime oak]

I have a player reporting that spawners do not work near the new max height. I didn't look into it yet as I'm just waking up but I am wondering if anyone else had this issue?

[pulsar dagger]

what paper version

!warn 680976685851738171 spamming

[wheat heart]

:raised_hands: Warned _ImDenji🎄#0001 (spamming) [1 total infraction] -- jmp#3822.

[prime oak]

64

Bruh stop

[pulsar dagger]

!ban 680976685851738171 continuing to spam after being warned

[wheat heart]

:raised_hands: Banned _ImDenji🎄#0001 (continuing to spam after being warned) [2 total infractions] -- jmp#3822.

[pulsar dagger]

were you maybe running an older build when that was happening? there was a similar thing which was maybe fixed in build 61

[prime oak]

I am for sure running 64. I got the announcement today and upgraded. My server does have plugins in it but they shouldn't have an effect on spawners. Once I get up, I'm gonna check to make sure it is the same with a bare bones stock paper runtime

[pulsar dagger]

Was the issue reported to you before or after updating, is what I'm asking

[prime oak]

After updating

[pulsar dagger]

ok interesting

[prime oak]

As I said. I want to verify it isn't any of the plugins causing this. I doubt any would be. I can give you a dump of my config file then too if you'd like.

[pulsar dagger]

well, if you can confirm it's not due to plugins and can reproduce it easily, the best thing would be to open an issue with that info

[prime oak]

Okay I will. Where would I do that if it still doesn't work?

[pulsar dagger]

https://github.com/PaperMC/Paper/issues

[peak pulsar]

you have software recommendation for editing .mca? 😬

[pulsar dagger]

you shouldn't be editing the files

[frigid willow]

Wow I’m really surprised that such an exploit was able to exist for so long

[pulsar dagger]

replace them with the ones from your backup

[frigid willow]

Btw I’ve coded a tool that adds one layer of bedrock to y=0 for people having issues migrating worlds to 1.18 since bedrock might be missing

Made it for someone who asked me it in dms

[peak pulsar]

where can we find it? 🙂

[frigid willow]

But could prolly release it to public

If people want it

Should prolly first let it be tested and add some warnings

It used direct MCA writing so no plugin but will be pretty fast, it checks all the existing region files

[trim abyss]

Have anyone mentioned that this vulnerability also works on clients too? (Sorry, I meant to post it in #paper-help)

[long edge]

yes

[trim abyss]

Okay

[fervent fog]

with paper my server does not have my logo anymore how do i fix it?

[coarse gull]

servericon.png?

[long edge]

add a file called server-icon.png to the root of your server that is 64x64

[steep arch]

If you can code a bit, I use the Querz NBT library on GitHub

Has a special mca package for region files

Oh but it doesn't read those in the /entities folder, sorry now that I see you need that, the code for doing that is present in "mcaselector" on GitHub though

and there's also NBTExplorer for visual insight

[quasi panther]

it kinda does, you just have to work at it a bit; read in RAW mode and then traverse the tags manually

works for the poi folder too

[steep arch]

True, but then the mcaselector package is easier

depends depends depends I guess, anyway, either will work

[quasi panther]

even for modifications? it says "export or delete"

[hidden cargo]

https://gyazo.com/54806686b3f167ef40c7117ac8b14618

glow squids spawning in the village farms

lets go

[steep arch]

Oh good point, don't know, I only read

[hidden cargo]

https://gyazo.com/5c617674d872f002daf67a7aaf357409

I dont have any other info or logs associated with this

just running latest

[quasi panther]

plugins?

and what is "latest"?

[hidden cargo]

#65

[quasi panther]

then say "#65" instead of "latest", it's clearer and shorter to type

[hidden cargo]

alright

https://gyazo.com/8ba81ffff489d3e802083a3ff8d69063

gonna try reproduce without any plugins

[quasi panther]

if you can, then https://github.com/PaperMC/Paper/issues

[steep arch]

If you slaughter the glow squid, don't place any blocks within like 20 or so blocks, fly up a bunch in creative to be at the right distance for them to spawn, and they spawn again, but when you place torches next to it they stop spawning, I guess it's a block light init glitch

[modern lintel]

so, I think I saw it on GitHub issues about the server crashing when teleporting to lush cave. Can someone link it to me?