| Blockland Forums > General Discussion |
| The Blockland Bulletin |
| << < (15/53) > >> |
| Destiny/Zack0Wack0:
It's funny, that mod actually has two back ends to eval script on the server. I think this should be mentioned to stop people from using it. EDIT: Even worse, you mentioning this on your blog now just made everyone want it. This is going to turn viral and people will have their servers exploited via the secret eval command. |
| Sheath:
--- Quote from: Destiny/Zack0Wack0 on January 10, 2011, 01:47:58 AM ---It's funny, that mod actually has two back ends to eval script on the server. I think this should be mentioned to stop people from using it. --- End quote --- snake mod right? |
| Destiny/Zack0Wack0:
Yes, I have the source code right in front of me. It's called "MrWiggles". Tezuni actually got his goons to go out and release it, including "MrBob00", according to my reliable secret agent D (his real name will not be enclosed here due to the possibility of Tezuni assassinating him). I can send you the source code if you would like to see what I'm talking about. It also seems to include some sort of unfinished encryption function. It's possible he was going to include a method for stealing the user's authentication key as well. This is why people should not trust randomly distributed add-ons/mods. The only source of mods should be the add-ons category, or RTB. These are monitored for the safety of your Blockland key and files. |
| Sheath:
--- Quote from: Destiny/Zack0Wack0 on January 10, 2011, 01:59:00 AM ---Yes, I have the source code right in front of me. It's called "MrWiggles". Tezuni actually got his goons to go out and release it, including "MrBob00", according to my reliable secret agent D (his real name will not be enclosed here due to the possibility of Tezuni assassinating him). I can send you the source code if you would like to see what I'm talking about. It also seems to include some sort of unfinished encryption function. It's possible he was going to include a method for stealing the user's authentication key as well. This is why people should not trust randomly distributed add-ons/mods. The only source of mods should be the add-ons category, or RTB. These are monitored for the safety of your Blockland key and files. --- End quote --- Explosive :O I've added it in. EDIT: I've just patched the article up. A few formatting errors. |
| Destiny/Zack0Wack0:
You forgot to mention the part where it allows anyone on the server to eval a line of script. This can be just as devastating as the possible key stealing I mentioned (I'm not sure if it actually was being made into a key stealer, but I can't see any other use for the code) I for one know a single line of code that can completely delete all of your Blockland files. It is not a hard line of code to create ever, it's very possible someone could replicate this on a server with this mod enabled. |
| Navigation |
| Message Index |
| Next page |
| Previous page |