Welcome, Guest!!
follow us on... Facebook twitter youtube rss

Author Topic: Handshake exploit  (Read 8612 times)

00petar00

  • Member
  • *
  • Posts: 10
    • View Profile
Handshake exploit
« on: September 21, 2013, 07:16:50 PM »
You send handshake packet and that allows you to use any name without knowing password on cracked and premium servers.
It was fixed in 1.6.4 so i am asking if owner will update it soon, before someone tries to use it since  most of the servers have been updated.
Well if someone who knows how to do this comes on server before it is updated to 1.6.4 version of minecraft, it will be bad. Whole world might need a rollback if he uses worldedit for grief and so on.
« Last Edit: September 21, 2013, 07:18:50 PM by 00petar00 »

Insakna

  • Member
  • **
  • Posts: 40
  • Eat Hotdogs
    • View Profile
    • Greenhole Games
Re: Handshake exploit
« Reply #1 on: September 21, 2013, 07:17:46 PM »
I tried going to other servers in 1.6.4 and something was up, I say wait till 1.7
Hotdogs. Just Hotdogs.

00petar00

  • Member
  • *
  • Posts: 10
    • View Profile
Re: Handshake exploit
« Reply #2 on: September 21, 2013, 07:20:45 PM »
Do you know how fast servers started updating to 1.6.4? You probably don't, this is really bad if it doesn't update fast.
Its better for server to be updated, i am waiting for owner's reply, someone can use his account at any time.
Well alot people know of this exploit, and since alot of servers have been updated they will target the servers that didn't. There are many trolls out there.

Fedgar_Lurch

  • Just Some Guy
  • Founder
  • Member
  • *****
  • Posts: 1408
  • Hey Guys!
    • View Profile
    • SentinelCraft
Re: Handshake exploit
« Reply #3 on: September 21, 2013, 07:59:20 PM »
We have looked into updating, the handshake exploit is something that effects previous builds of CB.

That being said we will look into it
-- Fedgar

Richgotya

  • Founder
  • Member
  • *****
  • Posts: 774
    • View Profile
Re: Handshake exploit
« Reply #4 on: September 21, 2013, 11:09:42 PM »
does not effect us at all as we require are own auths that is a tad more secure

IE even if they "hack" and use your name they would need your second pass thats stored encrypted on our DB packet injecting will not work for this
« Last Edit: September 22, 2013, 06:15:41 AM by Fedgar_Lurch »

superkittyminer

  • Member
  • *
  • Posts: 7
    • View Profile
Re: Handshake exploit
« Reply #5 on: September 22, 2013, 08:08:53 AM »
Even if a second password is required, I still feel that we should update. It'll decrease the security risk that way (the less the security risk, the better), and we need to get the structure data saved for the eventual update to 1.7 anyways (you like having wither skeletons and blazes naturally spawning in nether fortresses, right? Well if we don't get the structure data saved, they won't spawn. Same applies to witch huts.)

I tried going to other servers in 1.6.4 and something was up, I say wait till 1.7
Can you clarify on what this "something" is? "something" is a fairly vague and unhelpful term.

Also, again, we do need the get our structures saved. We can't just wait for 1.7 and lose out nether fortresses and witch huts. Finding new chunks is already going to be a pain for explorers that wish to see new terrain. Don't make it affect those that farm wither skeleton drops naturally too.

Richgotya

  • Founder
  • Member
  • *****
  • Posts: 774
    • View Profile
Re: Handshake exploit
« Reply #6 on: September 22, 2013, 08:24:34 AM »
there is no need to rush 1.6.4 is not stable we wont be uping to 1.7 when it comes out as a good stable build for bukkit usualy takes 1-2 weeks so untill stable builds are out we will not up.

Migas

  • Founder
  • Member
  • *****
  • Posts: 6866
  • I am Migas, the Portuguese Guy.
    • View Profile
Re: Handshake exploit
« Reply #7 on: September 22, 2013, 01:09:24 PM »
Finding new chunks is already going to be a pain for explorers that wish to see new terrain. Don't make it affect those that farm wither skeleton drops naturally too.

When 1.7 is out, We might set up some new wilderness warps on the new biomes.
Dedication is a key factor to reach your goals.

WazBlaz

  • Member
  • ***
  • Posts: 118
  • Don't Judge by mistakes. Give second chances
    • View Profile
    • ]HeLL[
Re: Handshake exploit
« Reply #8 on: September 22, 2013, 08:31:58 PM »
That would be a cool feature. Good luck trying to find them all XD
Victory at all costs, victory in spite of all terror, victory however long and hard the road may be; for without victory, there is no survival.

Winston Churchill

Migas

  • Founder
  • Member
  • *****
  • Posts: 6866
  • I am Migas, the Portuguese Guy.
    • View Profile
Re: Handshake exploit
« Reply #9 on: September 22, 2013, 08:48:56 PM »
That would be a cool feature. Good luck trying to find them all XD

Probably only one of the new ones, It would ruin the fun of finding the new biomes to regular members =P
Dedication is a key factor to reach your goals.

Fedgar_Lurch

  • Just Some Guy
  • Founder
  • Member
  • *****
  • Posts: 1408
  • Hey Guys!
    • View Profile
    • SentinelCraft
Re: Handshake exploit
« Reply #10 on: September 23, 2013, 08:30:58 AM »
Probably will just create warps near ungenerated terrain. still want to have people doing the exploring!
-- Fedgar

Migas

  • Founder
  • Member
  • *****
  • Posts: 6866
  • I am Migas, the Portuguese Guy.
    • View Profile
Re: Handshake exploit
« Reply #11 on: September 23, 2013, 08:32:52 AM »
Probably will just create warps near ungenerated terrain. still want to have people doing the exploring!

Maybe that's the better option of all =P
Dedication is a key factor to reach your goals.