Published Apr 10th, 2012, 4/10/12 9:46 am
- 360 views • 1 today
- 1
- 0
- 9
3
This was posted by Evenprime85(NoCheat Dev) on his dev.bukkit.org submission.
Because I can reach a lot of people here:
Do not login to any MC servers that you don't fully trust, as it is currently possible for the owner of that server to steal your session and use it to log into another server.
E.g. if you are admin on one server, and somone you don't know invites you onto their server (and you actually log into that server), they are able to log into your server (or any other server) with your username without you noticing. This is possible without them knowing your password (and they don't need it anyway for that) and they can connect to "online-mode=true" servers.
To be save, add an additional line of defense like AuthX and make sure it's active for all "important" players (admins, mods).
Because I can reach a lot of people here:
Do not login to any MC servers that you don't fully trust, as it is currently possible for the owner of that server to steal your session and use it to log into another server.
E.g. if you are admin on one server, and somone you don't know invites you onto their server (and you actually log into that server), they are able to log into your server (or any other server) with your username without you noticing. This is possible without them knowing your password (and they don't need it anyway for that) and they can connect to "online-mode=true" servers.
To be save, add an additional line of defense like AuthX and make sure it's active for all "important" players (admins, mods).
| Tags |
764608
6
kencorreia
Have something to say?