Posts by videogamesm12

I'm going to bump this in light of the backup system causing yet another data corruption issue.

This holiday sucks.

Personally, I think a golf event would be fun. I wouldn't want it to be super organized (I find events to be more fun if they are spontaneous if you get what I mean) though. As I stated before, we should use the golf server we were playing on (Jaygrounds) to do it. Hell, we could probably even have some MBs work on some courses for that server.

↩ @'wxtermelon' Just use the golf server we played on yesterday.

Don't let a select few ruin the fun for everybody.

Keep it the way it is. The map was actually a lot of fun to build from. It was unique, and there was clearly a lot of effort put into it.

IP addresses have been a large part of Indefinite Ban Requests for as long as they have been around circa 2012/2013. In 2019 a suggestion was proposed and approved to make indefinite ban requests public in the interest of transparency. However, this has brought along a whole new set of problems - we have received multiple complaints from multiple users about how their IP addresses have been publicized, and personally I agree with them. I have seen what people can do with just IP addresses (in fact, I ended up getting suspended and indefinitely banned for it once under Seth's reign), and it actually terrifies me if you play your cards right on the telephone.

We have heard the many calls to reform how Indefinite Ban Requests are handled, and we're going to listen. This suggestion calls for a reform of the Indefinite Ban Request system to remove IP addresses entirely from public requests. While IP addresses would still be indefinitely banned, the IP itself would not be included in the public request. This implementation protects the privacy of the individual who done fucked up, while still retaining the transparency that comes from an indefinite ban request.

Mark Zuckerberg.

I would like to point out that in the past, you used to be able to get forum banned way more easily than nowadays.

For instance, in this thread someone was literally banned for having an attitude in the shoutbox: https://totalfreedom.boards.ne…rum-ban-request-nojang153

I think StevenNL2000's greatest accomplishment as of recently is singlehandedly destroying Facebook's stock. Don't believe me? Here's proof:

Thank you, StevenNL2000, for all that you have done. You are our lord and savior.

In June/July 2021, I created an exploit in Minecraft's component handler that allowed someone to effectively crash another user's client by having them hold or even hover over an item in their inventory. In the interest of protecting the community, I had kept it a secret for quite a while, with only a few admins knowing about it. I intended to document it sometime after, but then I ended up getting suspended for unrelated reasons so I couldn't.

When I tried to report the exploit to Paper sometime later, they refused to patch it. Frustrated, I reported the exploit to Mojang directly very soon after 1.18 was officially released. It was officially patched in 1.18.1, alongside the Log4Shell exploit. To protect admins from the exploit before it was patched officially, I wrote a patch in W95 myself which granted complete immunity to the exploit. This is the patch I wrote. Enjoy.

/**  
 * <b>HoverEventEntityPatch</b>  
 * <p>Patches an exploit that causes clients to crash trying to process malicious text.</p>  
 */  
@Mixin(HoverEvent.EntityContent.class)  
public class HoverEventEntityPatch  
{  
    private static final String REPLACEMENT_UUID = "DEADBEEF-DEAD-DEAD-DEAD-DEADDEADDEAD";  

    @ModifyArg(method = "parse(Lnet/minecraft/text/Text;)Lnet/minecraft/text/HoverEvent$EntityContent;",  
            at = @At(value = "INVOKE", target = "Ljava/util/UUID;fromString(Ljava/lang/String;)Ljava/util/UUID;"))  
    private static String injectParseText(String uuid)  
    {  
        try  
        {  
            return UUID.fromString(uuid).toString();  
        }  
        catch (Exception ex)  
        {  
            return REPLACEMENT_UUID;  
        }  
    }  

    @ModifyArg(method = "parse(Lcom/google/gson/JsonElement;)Lnet/minecraft/text/HoverEvent$EntityContent;",  
            at = @At(value = "INVOKE", target = "Ljava/util/UUID;fromString(Ljava/lang/String;)Ljava/util/UUID;"))  
    private static String injectParseJson(String uuid)  
    {  
        try  
        {  
            return UUID.fromString(uuid).toString();  
        }  
        catch (Exception ex)  
        {  
            return REPLACEMENT_UUID;  
        }  
    }  
}  

I would like to mention that with the current way we store player data (combination of IP addresses and names), I am actually inclined to encourage the use of a VPN/proxy under that condition that you are the only one who has access to it. When I was still archiving the flatlands, I had to administrate under a separate user account and use my server as a proxy to avoid fucking up the player data I had in place under both accounts.

Just don't corrupt the worlds again.

Vouch.

↩  Paldiu Ok, sorted.

Good choice.

Can I build penises near spawn?

I'm genuinely surprised to see a thread like this with only 28 replies even though it was made just yesterday.

I have been playing on this server for a little over 8 years now and despite all of the amazing builds I have seen over the years, I have never seen a build with as much time and effort put into it as the Imperium's base. It is the TF equivalent of Space Valkyria.

In the interest of transparency, I have documented my findings more specifically in this bug report I raised on Crackshot's GitHub page (which doesn't actually contain the source code for the plugin, but people can raise issues on it).

Making threads like this whilst also apparently crashing it is only going to provoke retaliation of a similar kind. Something similar has happened before.