NOTE TO ALL SERVER OWNERS: DON'T BE FOOLED

[Mariofighter3]

WOW. That really opened my eyes! I'm also surprised an AVO tried to attack the server.

[Paradox]

Okay, let me try to explain this if I'm correct. The hacker asks me to join their server. As I join, my account AUTOMATICALLY does some check to make sure my account is legit. The server asks my account for a number, and my accoutn automatically responds with the number. The hacker intecepts the number so he gets it instead of the server. Now the hacker has my unique number, and when he sends THAT number to a server, the server will think "OH! You're number 1123! That's Paradox's number!" and log him as me.

[Mariofighter3]

That's the basis of it. However, how does one get the number. It also seems if it doesn't sign into your account, but the permissions, right?

[1cec0ld]

It signs in as YOU. Your name, Your IGN, and therefore all plugins see you as you, including bukkit and ops.txt

And I'm not a hacker so I have no idea how they intercept the security randomNumber.

[Warmonger_2]

They can basically use a plugin type program on their server to intercept this number as it goes through their server. It could be very complex or simple but either way it is doable. Hacker nowadays have managed much more complecated and dangerous feats so this surprises me none. Given time Minecraft will be updated to fix this issue

[Paradox]

It signs in as YOU. Your name, Your IGN, and therefore all plugins see you as you, including bukkit and ops.txt

And I'm not a hacker so I have no idea how they intercept the security randomNumber.

I'd guess that Minecraft uses hash functions and the such. I recently learned about it in my programming course, it's pretty complicated.

[Okieskinny]

Listen here hackerz, your days of evil are over, prepare to meet the light!

[hixhen1]

Listen here hackerz, your days of evil are over, prepare to meet the light!

NOOOOO! also i have one of those just would never use it on the pokemonserver.

[Rigby]

I have tons of hack clients in my disposal, use that shit... well.... never actually.

[Tenebrae]

Did not realise the potency of this kind of attack until just now. Literally fifteen minutes ago, I banned a guy just after i was fooled 


Don't remember his name, but its a good thing the owner was on at the same time. Good thing I knew what had happened..

[Nightroado]

Problem: OP People joining servers that aren't the pokemon server.

Solution: Burn them at the stake for such blasphemous actions.

[jassassin11]

Problem: OP People joining servers that aren't the pokemon server.

Solution: Burn them at the stake for such blasphemous actions.

or just simply permaban them insted

[ImStillDead]

What if the rest of team avo comes to grief?

[Tenebrae]

Their problem :P

[jassassin11]

What if the rest of team avo comes to grief?

i have a freind who has a freind of a guy in avo