Hacking Help

Discussion in 'Bukkit Help' started by sakuto29, Mar 11, 2013.

Thread Status:
Not open for further replies.
  1. Offline

    sakuto29

    We have a hacker attacking our server, we cant ban him because he isnt in the game but he is accessing it from the console, he is controlling people in chat. Any plugins or recommendations?
     
  2. Offline

    MysteryManX

    Running in online mode? Downloading plugins directly from BukkitDev?
     
  3. Offline

    midnightfang22

    Change your passwords, double check your plugins and so on.
     
  4. Offline

    LaxWasHere

    Turn off your computer.
     
  5. Offline

    Super User

    Stop being total dicks about offline-mode. You guys shun them like they're rats. Offline-mode =/= access to console. Even if it were offline there are plugins that offer late authentication.

    Change your passwords. If they got in again, then scan your PC for RATs.
     
  6. Offline

    Sayshal

    We're not going to stop, the community and the people running it have decided offline mode is unsupportable by our community. If you have a problem with us following rules, yell at TnT
     
  7. Offline

    TnT

    Those plugins don't fully protect you either. I have seen many cases where people get exploited due to running offline mode even with those plugins.

    Simply put: Offline mode is insecure and not supportable. It should not be used for anything other than testing - and if you are using it for testing, you shouldn't require our assistance.

    sakuto29
    If he has control of your console, you need to lock down your OS/Control panel. Speak to your hosting provider (if you use one) and get them to assist. Use strong passwords and remove user accounts you do not need from your system - reset the passwords on the user accounts you do need - resetting them to something secure.
     
  8. Offline

    Super User

    Still they are just allowing cracked players. They are not breaking the law, altering bukkit is anyway. Bukkit offered this feature and I don't see anywhere it HAS to be used for testing. My server runs offline-mode and I cannot request assistance from Bukkit at all.

    Also scan your PC for any keyloggers.
     
  9. Offline

    PapiDimmi

    How the hell can he access console?
     
  10. Offline

    Necrodoom

    correction: MOJANG offering this feature, also, supporting piracy is breaking law in a few countries.
     
    MrBluebear3 and MysteryManX like this.
  11. Offline

    Super User

    You don't need to pirate the cracked client. Googling "<removed>" will give you a download. So you're argument is invalid.

    EDIT: Also Notch said himself, "If you can't buy the game go ahead and get cracked.".
     
  12. Offline

    Necrodoom

    why would you use a cracked client if you arent a pirate..?
    also, Notch never said that, else he would simply give out the game for free and add a donation button, and wouldnt had doubled the price of the game.
     
  13. Offline

    Sayshal

    He did actually say that, over twitter.

    Regardless of whether Mojang supports it, we are not Mojang, and we do not support offline servers.

    EDIT by Moderator: merged posts, please use the edit button instead of double posting.
     
    Last edited by a moderator: May 31, 2016
  14. Offline

    Necrodoom

    more than an year ago, about alpha, i think? a few months after that minecraft got its first RDM, and then, a demo mode.

    its quite clear that notch didnt mean it, or his stance changed.
     
  15. Offline

    Super User

    Nonono, it was not in Alpha. It's a decision to the onwers whether they support cracked clients. I honestly think that we should support offlinemode. Seriously its only one boolean.
     
  16. Offline

    Necrodoom

    "why cant we kill with guns? seriously, its only pressing that trigger..."

    and piracy is against the law in some countries.
    if you want to be thrown to jail, fine by me.
    dont drag everyone else to this.
     
    MrBluebear3 likes this.
  17. Offline

    SirTyler

    The point here Super is that WE do not support offline-mode, Mojang can support it if they would like but Bukkit doesn't not and does not offer support for it.
     
  18. Offline

    AyshineMatt

    Going to be making a final conclusion:

    The Bukkit community simply does not support offline or "cracked" servers due to the fact that offline-mode is insecure and unsupportable. If you do not like this, you're welcome to leave. We are not forcing you to use Bukkit. Yea, sure, Mojang supports it, which in fact, Notch did say over a Tweet. But, by bringing up Mojang and THEIR actions, what does it have to do ANYTHING with the actions of the Bukkit community. Completely irrelevant.

    Staff has been reported for a close on this thread.
     
  19. Offline

    MysteryManX

    Yeah sure, we'll support not only piracy, but the people who comes running to these forums crying about how their server got hacked because of how insecure it is. Just think that through for a few minutes.

    Anyway (not trying to be a backseat admin/mod) I think this thread should be answered directly or be locked, its gonna start a flame war soon.
     
  20. Offline

    stuntguy3000

    Yay flame wars :D
     
  21. Offline

    mastermustard

    Let us see affects of offline mode:
    - Cracked accounts join
    - Your server gets noted on every hacking website
    - It is easier to crash that server
    - Proxying in is easier

    Learn something before making your incredibly incorrect posts that lead to bad things.

    This would not be able to be stopped by plugins, I would contact your ISP about this issue.

    EDIT by Moderator: merged posts, please use the edit button instead of double posting.
     
    Last edited by a moderator: May 31, 2016
  22. Offline

    Super User

    Actually sir, I think it is you with the idiotic posts.
    - Yes people can connect with cracked accounts.
    - No, there are hundreds of cracked servers. I think those communities are more interested in 10GB/s booters, RAT clients, FUD Crypters, etc.
    - How?
    - You can't use proxies on a mc server...

    Learn something before making your idiotic posts. You should also learn the difference between PROXIES, and VPN's.
     
  23. Offline

    mastermustard

    So your saying a server that's in offlinemode is more secure than a server in onlinemode? Are you stupid?
    It's easy to overload a server with max players from a click of a button on cracked servers and crash it.
    I used the term "proxy" because it's the term most hacking clients use not that it is correct
     
    xiMatt likes this.
  24. Offline

    AyshineMatt

    Uhh, Super User , actually he's correct about the last two bullets. They can crash the server easier, using proxies, by simply spamming up the log, it isn't that hard to do with hacked clients. (NOTE: I said hacked, not cracked.) And you can use proxies on Minecraft. Check out a public hacked client, which I will not mention, of course. You may want to edit your post about the "Learn something before making your idiotic posts" - part.

    Now, Bukkit Staff, PLEASE CLOSE THIS THREAD.
     
    mastermustard likes this.
  25. Offline

    Super User

    Actually proxies are spoofed IP's on browsers. VPN spoofs IP leaving the modem.
    Also the "crashing" thing, if you are talking about bot attacks it can be counteracted with AntiBot. These types of attacks do not crash a server at all. Staff do please close this thread before more stupidity arises.
     
  26. Offline

    mastermustard

    Really? It doesn't crash a server at all? A spammed out server by alot of clients doesn't crash a server. It's your stupidity arising.
     
  27. Offline

    Super User

    You must of run into servers run by 9 year old kids. I think you should stop flaming so much.
     
  28. Offline

    mastermustard

    I'm just stating the obvious that you don't know what your talking about at all. I'm going to stop commenting because all your looking for is a fight.
     
  29. Offline

    chad53105

    sakuto29
    Hey OP did you fix your problem

    On another note, I have only ran across two problems in two years of running an offline server. Thus the change to online. Both were my fault for not following what I was taught in security +. First problem was not securing admin and mod accounts when i changed my auth server. second was when i gave a user too much permission. Now with online mode and my training, i only give what a user needs to play or admin the server. nuff said, lets stay on topic.
     
  30. Offline

    Super User

    I do know exactly what I'm talking about, and what you posted up there. Everyone else was supporting their arguments without any flaming. You just came around insulting me. Also the fact that you edited your post to seem like you didn't start it is even worse. You also seemed to have dropped the other points I have mentioned because I was correct on them.

    TnT please lock this thread, OP has solved the issue and this argument is leading to massive flaming.
     
Thread Status:
Not open for further replies.

Share This Page