Question regarding Online Vs Offline mode

Hello. When a server is "Offline" what security features does it lose? That I am aware of, the only protection that it removes is the users are not verified with the Minecraft authentication servers. When a server is "Online" however, are the hacks that are available in offline mode available to be exploited with a online server?

 

The security an offline server loses is player-identity, as you said.
Of course that could be fixed by plugins, using xAuth or similar, but still you don't know for sure that is the real person or a person trying to hack his password, if you have an online server the players can migrate to email login instead, that makes it harder for a hacker to know what email they are using.

What kind of hacks are you talking about?
A server that is in online mode is still not secure, there are hacks where if you get the IP of someone with admin access you can trick the server believing it's the right person, to fix that problem you could have a second password login on the server. (Although I think advanced hackers could easily get that password anyway, but it's a start.)
Do you mean hacks like xRay and Nodus? They can still use it.

You should be fine with an offline server, but online is recommended for sure.

What does it say in console when you try to log in?
(The actual log.)

When you entered the server and you got the "Banned" message.

What else plugins do you got on the server? Essentials perhaps?
If so, do ./pardon-ip YOURIP

And ./unban YOURNAME, or if it is /pardon YOURNAME

EDIT by Moderator: merged posts, please use the edit button instead of double posting.

 

console overrides essentials ban/kick exempt.
is your server hosted?

 

You don't got some kind of auto-kick/auto-ban with NoCheatPlus or any other plugin?
You should add MCBans too, it keeps alot of bots away.

 

what host? some hosts had hacking issues in the past.

 

Fluctis Hosting is good, I have it right now on a temporary server.
No hacking so far on mine.

 

'offline-mode' means that anyone can log in as you. Even with auth plugins. Servers not in online-mode=true receive no support here.

Also, there is no "exploit in craftbukkit" that an external program would utilize to take over your server. That's a fake youtube video that links to a virus (or a survey page that then links to a virus).

Until you put your server to online-mode=true, your server is completely insecure and we do not provide support for that. Closing this topic as it's been answered.