Minecraft Forums

This guy ianbeal is horrible, he can hack into your minecraft account and take over your server.
He took over my account (Omega12, I am the owner) and my friend's account.

Heres the server log
17:48:55 ianbeal connected from IP: 92.28.119.171
17:49:31 ianbeal commands: pinfo Omega12
17:49:43 ianbeal says: can i build plz
17:49:44 Map saved! Players: 5/20
17:49:50 Linkfan71 says: >plz
17:49:54 Daft_Pink says: no son
17:49:58 ianbeal says: please?
17:49:59 noodle976 commands: user ianbeast 1
17:50:01 Linkfan71 says: can't let you do that
17:50:19 noodle976 says: :V
17:50:27 noodle976 commands: user ianbeal 1
17:50:32 ianbeal says: ooook, thanks

17:52:27 ianbeal says: ban?

17:52:46 ianbeal commands: pinfo noodle976

17:53:38 ianbeal commands: pinfo Omega12

17:55:32 ianbeal says: i hate you
17:55:40 noodle976 says: you're not doing anything D8
17:55:44 Omega12 (127.0.0.1) has disconnected.
17:55:44 Omega12 (92.28.119.171) logged in from another computer.
17:55:50 Map saved! Players: 5/20
17:55:51 Linkfan71 says: jesus calm down it's just a game
17:55:51 Omega12 (92.28.119.171) has disconnected.
17:55:51 Omega12 (127.0.0.1) logged in from another computer.
17:56:29 Omega12 (127.0.0.1) has disconnected.
17:56:34 noodle976 says: awat
17:56:39 Omega12 connected from IP: 127.0.0.1
17:56:51 Map saved! Players: 5/20
17:56:51 Omega12 says: i got a messager
17:56:58 Omega12 says: ou ahve logged in from another computewr
17:57:00 Omega12 says: D:
17:57:02 Linkfan71 says: D:
17:57:02 noodle976 says: D8
17:57:11 Daft_Pink says: why's everyone going D:
17:57:14 Omega12 says: i think its cuz my internet restarded
17:57:21 noodle976 says: this ian guy's hacking us omg ban ban
17:57:23 Omega12 (127.0.0.1) has disconnected.
17:57:23 Omega12 (92.28.119.171) logged in from another computer.
17:57:27 Daft_Pink says: what?
17:57:27 noodle976 says: also we're here, daft
17:57:28 noodle976 says: .-.
17:57:38 Linkfan71 says: guys why do i have a scoped shotgun in borderlands
17:57:47 noodle976 commands: user ianbeal 0
17:57:47 Linkfan71 says: shotguns only work up close
17:57:50 Linkfan71 says: but it has a scope
17:57:52 Map saved! Players: 5/20
17:57:53 Linkfan71 says: what is this
17:57:55 Omega12 (92.28.119.171) has disconnected.
17:57:58 noodle976 says: omega left
17:57:59 noodle976 says: D8
17:58:04 Linkfan71 says: oh **** sons
17:58:24 ÿ connected from IP: 92.28.119.171
17:58:42 Omega12 connected from IP: 92.28.119.171
17:58:43 noodle976 (**.**.***.***) has disconnected.

everyone on the server was told to change their passwords. Heads up for all of you admins.

Turn verify-names on, and that shouldn't be possible.

I had to turn it off in order for others to join.

What exactly does verify names work?

Verify Names just verifys if the names are real/true or not, if it's off anyone can hack on the server with it off, and pose as anyone.

Regardless, I don't like the "No son" bit

Changing passwords won't do anything, I had the same guy on a server I hang around yesterday and he ended up explaining what the issue is, where the exploit lies in the source and demonstrating user impersonation.

Since I'd rather not spread it around and have a lot of servers destroyed, I'll just say verify names doesn't actually do anything for the most part. This isn't spread in the slightest so just don't be an asshole to random people who join maybe?

Edit: I should clarify this is only an issue within MinerCPP.

Well since I can't fine a software that allows me to do half the things that minerCPP lets me do, guess I'll just have to be extra careful.

Daft isn't an admin either, hes one of our friends, but he has no real power on the server.

Indeed, considering this is only an Issue for MinerCPP this is also why it is closed.

I know the nature of the exploit, I was discussing it with fragmer and vlk in IRC some time ago.