add a warning on the website and discord not to give logs files, since it contains the players account and there are many who do not know this and fall into scams, this has already happened to 9 people in another discord who did not have knowledge that the account data was stored in the lunar files and a player, pretending to be a friendly person, asks them for the files to supposedly copy a profile, and trusting the client that it is 100% safe, they pass them on without knowing the risk of this. The most vulnerable to this are people who trust the client and have no knowledge of this issue.
#Add a warning about accounts security with lunar files
1 messages · Page 1 of 1 (latest)
Add a warning about accounts security with lunar files
logs files doesn't have account information.
log files do not contain account information, the only file that you need to care about is the accounts.json file, which the name says everything
The method(gl traslating):
This for people who have knowledge will know it and it will be obvious, but for those who do not have any information or are minors using the client they will not know about this
translated this, and yeah accounts,json is present in the exact same folder they're asking the other guy to share. However:
- How would you want to detect if a user is sharing a file, so you can show a warning for it?
- That file has your account(s)' access tokens, and it cannot be used to change the account details. All you can do with an access token is to login to the player's account in minecraft, and play on their behalf. Obviously not a good thing to happen, but no one loses their account if they share that accidentally or by falling for a scam.
If the client has these files, the least they can do is create a sign warning of this when opening the launcher and opening the folders so that at least those who read are sure that if this happens to them they are already warned, adding texts to the FAQ will give more information than if nothing is said. Just adding prevention texts will give more security than if nothing is said and fewer people who do not know about the subject will be safer
yeah I'm not against the idea in any way, it's a good thing to happen if it's possible to do
I really like the idea that at least they put a message when opening the Lunar Client or Lunar (Minecraft) that says about account stealings. And warn us that we do not have to pass Logs/Settings to unknown people since it contains an unencrypted Access token :I
if u gave your logs to someone he can't access to your account, because logs does not contain this
I mean, no logs, Settings there is a Access token, if u give that they can access to your mc account for the next 24 hours
I mean, you shouldn't be sharing any type of log files with anyone. Even if it's your friend it is best to be safe overall and not share it. Sadly we can't really do anything discord wise as that is fully up to discord, we already made a announcement a while ago when the scams kinda started and sadly people still fall for them. All we can do is spread awareness by telling people not to click on suspicious URLs, Files or random discords. For more info: