Blockland Forums
Home
Help
Login
Register
Blockland Forums
»
Off Topic
»
Drama
»
Key Compromise
« previous
next »
Print
Pages: [
1
]
2
3
4
5
6
...
24
Author
Topic: Key Compromise (Read 50653 times)
Badspot
Administrator
May 02, 2020, 09:53:04 PM
A number of Blockland keys have been compromised. The method is currently unknown.
Current hypotheses:
Remote code execution
- A malicious server would exploit a buffer overflow or similar flaw to execute arbitrary code on clients that joined (or vice versa). Exploits of this nature have been found before, and a number of bad actors are constantly looking for them.
Exploit in Blockland Glass
- I don't know anything about this mod. Beyond social engineering attacks (ie making a fake 'enter your key' dialog), script code should not be able to read the key data, but there may be bugs/exploits/oversights around this protection.
Database compromise
- This seems extremely unlikely to me because no famous retired accounts have been compromised. My key has no special protections and I doubt an attacker could resist the temptation.
I have taken the following actions to mitigate the chaos while this plays out:
Disabled non-steam authentication
Disabled linking keys to Blockland forum accounts
Disabled converting Blockland keys to steam accounts
Email or message me if you have actual knowledge of the problem.
Edit:
Blockland r2005
released.
«
Last Edit: May 03, 2020, 04:34:33 AM by Badspot
»
Ad Bot
Advertisement
_OXBADCODE#
May 02, 2020, 09:53:45 PM
oh my
Chris72003
May 02, 2020, 09:53:51 PM
damn
RockyDoctor65
May 02, 2020, 09:54:01 PM
god dayum
Swollow
May 02, 2020, 09:54:11 PM
it could also be a leak of an old stuffty hosting service key database
TypicalName
May 02, 2020, 09:54:21 PM
damn
exit
May 02, 2020, 09:54:32 PM
thank u baddy <3
fuzzytoastedcoconut
May 02, 2020, 09:54:45 PM
im scared
lellyjellybelly2004
May 02, 2020, 09:55:10 PM
I just want to block... me JIZZCAKE first forum post c'mon bro..
New Years
May 02, 2020, 09:55:14 PM
you able to provide the compromised with a new key? I have more than a few friends on there, and I don't wanna see em SOL
DataProxy
May 02, 2020, 09:55:22 PM
And the search continues...
Gytyyhgfffff
May 02, 2020, 09:55:57 PM
lots of overlap with the CBM leak from years ago:
https://forum.blockland.us/index.php?topic=269222.0
Biqus
May 02, 2020, 09:56:18 PM
104 Keys are taken
maxymax13
May 02, 2020, 09:56:33 PM
so do we get new keys or are we just forgeted
Mr.Annoying
May 02, 2020, 09:57:21 PM
Is there any plan to salvage the 'compromised' accounts? A couple of well known veterans where hit, like Wrapperup, Sugar and Filipe1020.
Print
Pages: [
1
]
2
3
4
5
6
...
24
« previous
next »
Blockland Forums
»
Off Topic
»
Drama
»
Key Compromise