#Add a warning about accounts security with lunar files

1 messages · Page 1 of 1 (latest)

glass jay
#

add a warning on the website and discord not to give logs files, since it contains the players account and there are many who do not know this and fall into scams, this has already happened to 9 people in another discord who did not have knowledge that the account data was stored in the lunar files and a player, pretending to be a friendly person, asks them for the files to supposedly copy a profile, and trusting the client that it is 100% safe, they pass them on without knowing the risk of this. The most vulnerable to this are people who trust the client and have no knowledge of this issue.

glass jay
#

Add a warning about accounts security with lunar files

spare garden
#

logs files doesn't have account information.

small tree
#

log files do not contain account information, the only file that you need to care about is the accounts.json file, which the name says everything

glass jay
#

The method(gl traslating):

glass jay
small tree
# glass jay The method(gl traslating):

translated this, and yeah accounts,json is present in the exact same folder they're asking the other guy to share. However:

  1. How would you want to detect if a user is sharing a file, so you can show a warning for it?
  2. That file has your account(s)' access tokens, and it cannot be used to change the account details. All you can do with an access token is to login to the player's account in minecraft, and play on their behalf. Obviously not a good thing to happen, but no one loses their account if they share that accidentally or by falling for a scam.
glass jay
# small tree translated this, and yeah accounts,json is present in the exact same folder they...

If the client has these files, the least they can do is create a sign warning of this when opening the launcher and opening the folders so that at least those who read are sure that if this happens to them they are already warned, adding texts to the FAQ will give more information than if nothing is said. Just adding prevention texts will give more security than if nothing is said and fewer people who do not know about the subject will be safer

small tree
#

yeah I'm not against the idea in any way, it's a good thing to happen if it's possible to do

chilly prairie
#

I really like the idea that at least they put a message when opening the Lunar Client or Lunar (Minecraft) that says about account stealings. And warn us that we do not have to pass Logs/Settings to unknown people since it contains an unencrypted Access token :I

spare garden
#

if u gave your logs to someone he can't access to your account, because logs does not contain this

chilly prairie
void edge
#

meh

#

unneeded

mint pulsar
# glass jay add a warning on the website and discord not to give logs files, since it contai...

I mean, you shouldn't be sharing any type of log files with anyone. Even if it's your friend it is best to be safe overall and not share it. Sadly we can't really do anything discord wise as that is fully up to discord, we already made a announcement a while ago when the scams kinda started and sadly people still fall for them. All we can do is spread awareness by telling people not to click on suspicious URLs, Files or random discords. For more info: