Minecraft Blogs

Heartbleed - Bleeding Out Your Password

  • 2
  • 1
  • 3
avatar Whoever01
Level 46 : Master Princess
For those of you who are currently unaware, there is a new bug on the loose called Heartbleed.  It is a serious bug that had affected Minecraft recently, just before 1.7.8, and forced the discontinuation of the Legacy Launcher.

The Rundown
OpenSSL is the most widely used encryption software on the Internet, and it has been fully comprimised, whicch allows anyone to see any information shall ttey press F12. This means two thirds of the entire Internet have been affected and that any information can be retrieved.

This includes, but is not limited to: passwords, Email address, personal info, BANK DETAILS, private notes, cloud storage etc. It s recommended that you change your password IMMEDIATELY so that no hackers can get into it. It's not just the hackers that created HB, also any other person that wants to snatch this.

There is a patch avaliable for any website owners that have OpenSSL. Chrome users may download Chromebleed, an app that notifys you if the site is affected by Heartbleed. Also, do not log onto any OpenSSL site, or imput anything unless they have the patch.

How it Affects the Minecraft Community
For starters, the Legacy Launcher has been discontinued so that users are safe when logging in. IF you use the legacy launcher, switch to the New Launcher, and update to 1.5 if that is why you didn't download the launcher.

Users who logged into Minecraft 48 hours before the shutoff, please CHANGE YOUR PASSWORD ON ALL SITES as hackers HAVE comprimised Mojang accounts. I am a moderator on Minecraft Pocket Edition Forum and guess what, the shoutbox was removed due to a hacker, possibly from HB related purposes.

Also, 1.7.8 may have things to help with this, so update now and update your server too. It will take a couple of seconds, and is well worth the trouble. NB: 1,7,6 and 1.7.8 servers aren't backwards compatible, so you should tell all players to perform the quick update.

Chromebleed hasn't told me anything yet about the safety of PMC. Although unlikely, PMC might be affected and you should not log in or relog under any circumstance until patched. This is why it is a good idea to save you info so that you can still use while in a bad time like this.

Thank you for reading and share Heartbleed with the world!


04/12/2014 8:25 pm
Level 56 : Grandmaster Pyro
You have exaggerated rated the problem here. Not anyone can view the information, it's not as simple as pressing the F12 key. I suggest people watch this video. It's not a new bug either, it has been around for 2 years. 

PMC has not been affected by Heartbleed. Whilst it is a problem, it is not as major of as threatening as you make out.
04/12/2014 8:33 pm
Level 46 : Master Princess
1.0.1 has been out for 2 years
04/12/2014 8:15 pm
Level 32 : Artisan Pixel Puncher
o no!
Planet Minecraft Logo


© 2010 - 2020