Forgot to set online-mode=true RESOLVED

FUCK SAKES! SOME ONE JUST HACKED OUR SERVER AND ACCOUNTS.
THEY SAID ITS A BUKKIT EXPLOIT OR SOMETHING
THANKS ALOT NOW WE DONT HAVE A SERVER OR ACCOUNTS

 

Thats maybe your fault?
This is an unfinished server modification, no one said that is a build without any bugs or exploits.
BUT? Why u didnt backup the server?

 

We have backup of map.
HE BRICKED OUR VPS APERENTLY AND HE CAN PLAY ON OUR ACCOUNTS !
WTF SRS WTF. THERES MY MONEY DOWN THE DRAIN

 

Seems they also 'hacked' your Caps Lock key.

 

Dude im frickin pissed off.
I just lost 20 dollars so did another admin. And he can access our accounts

 

use more difficult passwords next time

 

So how about taking it up with someone who can actually help? Contact support for your VPS company, I'm sure they'll be able to help.

 

Dude. Lame. My password is frickin' long and hard. He doesnt know me. I dont know him.

 

That's what she said when the bed broke

OMG, I couldn't resist. So the dude hacked your VPS account or your Minecraft account or what? It sounds like he hacked your VPS account which means there isn't any reason to post here?

 

If he hacked you VPS then that’s an issue for your VPS company or if it’s you then you’re a poor service provider.

Secondly what do you mean by he hacked your accounts are u talking about your users Minecraft accounts, or VPS accounts.

Of course he could add himself past any of your white list protection if he got into your VPS.
I'm having a hard time giving any sympathy for an issue that would have been avoided if you knew what it was you were doing and how to properly administer it.

So lets start with what we don't know like who is your VPS provider, I'm leaning towards you got scammed by random person offering VPS servers, I find it extremely hard to believe that you got a VPS server for anything less than $150 per month.

 

CAPS LOCK IS CRUISE CONTROL FOR COOL!!!!11!!1!one!!

Seriously - if someone got access to your VPS, either

Your VPS provider was comprimised
Your account was comprimised (weak password)
Or, the most likely, you gave someone access that you shouldn't have, and they told other people about it.

 

The ease in which minecraft servers can be started will probably lead to lots more postings like this.
A double edged sword cuts both ways.

 

Was it the VPS or Minecraft?

 

Okay i found some infomation of him >.<
He uses a exploit or someshit though bukkit.
He doesnt know our passwords but he can access our accounts and play on them on the server...
He threatend us for admin rank or he will brick the vps
He also just banned everyone on teh server

So how the f*** can he use bukkit to hack our server ?>?!?>!>!

 

There aren't any bukkit exploits, he's just messing with you.

 

What does your server.properties file look like for option online-mode=?

 

hmm.. is your password hunter2??

seriously though, it would help if you answered some of the questions you are being asked.. particularly the server.properties one
--- merged: Jan 25, 2011 3:17 PM ---
also.. change your passwords and change the server port

 

Yeh, It does seams like u have set your online-mode=false and that is a bad idé, This means anyone that logs in can use any Minecraft name for example yours. Then they are an admin and can use your power.

Setting your online-mode=true means that the server does a name check and password to the Minecraft.net servers validating u are the true owner of the account.

Hope this helps.

Best regards Toby

 

Wow no srs wow im dumb ty so much guys honestly i love u (No homo) so he was bluffing/lieing all the time

 

AKA: OP made a fail and should've secured the server better.

 

assuming this means your problem was resolved, if you have the option to change the thread topic, please do so. otherwise people are going to think there is a vulnerability/problem w/ bukkit/the site

if not, don't worry too much about it.. it only takes a second of reading to straighten out.


so.. online-mode was false? and the guy jumped in as one of you and acted like he hacked it?
there are separate auth plugins that prevent that without having to use the minecraft.net servers which were messed up this weekend.

EDIT: topic is fixed.. if you did it, good work. if not, thanks whoever Selbram

 

I changed the topic title.

 

Well I dunno what to say to this thread now, First I felt sorry now I'm just in tears laughing at the real outcome.