Yea my server that I'm a moderator on got hit pretty hard by this. Someone logged in as the owner and kinda had fun with spawn(if you get what I'm saying). We got the issue resolved by rolling the owners IGN back(sounds odd doesn't it?). The way I would go around banning the player that did the actions would be. Check the logs around the time that the accident happen. Try to find when the owner logged in and find the IP address, Ban that IP and make sure that account can still log in under the right full owner.
I'm glad that they have fixed the issue takes a lot of pressure of my shoulders.
Rollback Post to RevisionRollBack
A Lie Is Just A Great Story That Someone Ruined With The Truth
-Barney Stinson
It took a long time for Mojang to notice this. This session exploit has existed for a couple years. However, there was only a small group of hackers that knew about it and the effect was quite diluted since there are so many Minecraft servers out there. Apparently the account abuse became more of an issue recently when the exploit became well-known, which finally brought the issue to Mojang's attention. I'm surprised the issue was resolved without any mention of a future client update.
Mojang, you guys are the best. You aren't like the snotty uptight game developers that care more about their financial status than the community. You guys actually acknowledge our wants and needs and never let us down. I hope you Mojangstas continue to make Minecraft the best game in the world and never let the hate of others get you down. Without you I never would've had the creative side of me awakened by playing Minecraft!
Wow somebody changed my pass to my account and changed my skin...but I like the skin...hahahahhahaha
Thats awesome.
Hey:) I have a very annoying problem with minecraft I deleted my .minecraft and now i cant get it back When i try to download it again i just get an error? Help!
Try getting another .minecraft.When youre about to login to minecraft.exe, click on options,then force update. Then it should work
Well I guess the Notch on my server yesterday really wasn't real. :/ I still remember the first time someone named Notch came on my server...I got hacked...
Dang, I'm glad this is getting fixed... I wasn't even aware!
I consider myself lucky that my server wasn't griefed... (though it is very small and private, so thank god!)
Rollback Post to RevisionRollBack
Define Cute (choose 1): A) Creepers Aerbunnies C) Herobrine. If you chose A): You appeal to destruction and to stereotypes. If you chose B): You are a perfectly normal person, and enjoy the Aether Mod. If you chose C): Please leave the planet now before you set off a nuclear warhead--no one enjoys mass murders, however nice they might seem to you.
It took a long time for Mojang to notice this. This session exploit has existed for a couple years. However, there was only a small group of hackers that knew about it and the effect was quite diluted since there are so many Minecraft servers out there. Apparently the account abuse became more of an issue recently when the exploit became well-known, which finally brought the issue to Mojang's attention. I'm surprised the issue was resolved without any mention of a future client update.
This wasn't a session exploit.
Apparently these were specific to accounts that have been transferred to the new mojang account system. The exploit was web based , thus there was no need for a client update.
My account got hacked and I've tried to reset my password about 5 times and never got an email. I also sent emails from the mojang support page nothing has happend yet
this seems like a perfect time to use caps MY EMAIL ACCOUNT WAS HACKED AFTER I WAS TOLD NO INFO WAS LEAKED. OBVIOUSLY NOT TRUE SINCE THE EMAIL ACCOUNT TO IT MY HOTMAIL ACCOUNT WAS HACKED AND HAS BEEN TERMINATED FOR SPAM AND THE RESTORE EMAIL ISNT EVEN OF MY OWN as far as i know no one has even so much as responded to my issue.Making it worse i use this account for job applications and have many of my accounts connected to it.As far as i know theres no way for me to contact microsoft about this because i dont have a phone
That was me. However the the loophole that allowed it to be exploited was more of a harmless coincidence. I apologize if your account happens to be "SirCrashALot".
I'm glad that they have fixed the issue takes a lot of pressure of my shoulders.
-Barney Stinson
also you should check out Tall Worlds
Guess a lot of admins will have lots of cleaning up to do today.
-
View User Profile
-
View Posts
-
Send Message
Curse Premiumcouldn't play at 5 am!
i can be happy to know my account wasnt vulnerable in the first place. i hadnt migrated it.
Thats awesome.
Try getting another .minecraft.When youre about to login to minecraft.exe, click on options,then force update. Then it should work
-
View User Profile
-
View Posts
-
Send Message
Curse PremiumI consider myself lucky that my server wasn't griefed... (though it is very small and private, so thank god!)
This wasn't a session exploit.
Apparently these were specific to accounts that have been transferred to the new mojang account system. The exploit was web based , thus there was no need for a client update.
not their problem