Posts by Allink

↩ @'Zeo' Why not just password protect the API instead of allowing everyone to download the encrypted jar?

↩ @'Zeo'

↩  gamingto12-mobile 😁

can shadow make chicken tendies for me

hi why don't you squash commits

Pretty sure you can also enable an experiment for this

Vouch, I think you're fit to be an admin.

↩  Deauthorized I change my VPN server quite alot and I don't seem to get the issue. Maybe uvb should try PolyMC instead of MultiMC?

Vouch. When I've spoken to you on Discord you've shown the maturity worthy of an administrative position on this server. And you're pretty active.

PS: I recommend using an encrypted password database like KeePassXC (or the Windows-only original, KeePass) over a browser password database as they may not always be the safest. Programs for extracting browser passwords on Windows already exist, however I'm not too sure if any exist for Linux because Chromium, at the very least, uses Linux's keyring system which to my knowledge is encrypted. As a bonus of using KeePass, you can put the database on a removable drive and there's no need to sync your browser profile (and maybe saved passwords if they're seperate?) between devices. Plus, I don't think Firefox generates passwords as long and unique as they should be.

Object, while I feel that your initial suspension might've been slightly undeserved, the fact remains that you leaked an Executive-Only Teams message. Leaking little shit like that often times than not leads to leaking bigger things. That's why, in places where privacy and not leaking shit is essential, I've found punishing people for leaking small things something that saves time down the line.

The actions you did and said because of your suspension (May 15th etc) were very immature, and is one of the biggest reasons I'm objecting.

I'm usually one for forgiveness, however you've been forgave far too many times and haven't seemed to permanently change your behaviour since your previous suspensions.

↩  Noah There's no "secure" way to bulk-change passwords. There may be some services that accomplish that but I wouldn't trust them. Just do it by hand.

↩  RedEastWood This is entirely possible. In-fact, it's one of the last features I implemented in the legacy RequiemBot code-base. But it should be known that commands executed via Discord will still have to be sent to public chat.

Quote

↩  Allink We should patch it in Scissors anyways, just to be safe.

↩  Telesphoreo this should be patched in Scissors

↩  Alco_Rs11 scissors disables run_command for both books and lecterns.

https://github.com/AtlasMediaGroup/Scissors/pull/39

↩  root Ok

Huge object. prevent-proxy-connections=true, at the moment, is the only thing one of the things that's keeping Mosley and his friends from coming back and raiding. Just because they're stopped for a while doesn't mean they won't happen again. Also, it's not just to stop the raids, it also stops most alt stores that use a custom authenticator in their tracks. It's keeping ban evaders from evading as well.

You and your friend (remixfusion) seem to be the only ones encountering issues due to this option being enabled. All you need to do is make requests to the authentication server with the same IP you're connecting to the server with. Nobody else, except you and your friend, has reported any issue joining the server with this system.

Fix it, ecause IPVanish and whatever Remix uses is obviously broken if I can log-on with my VPN (Mullvad).

Disabling this option lowers the server's security.

Object, I don't think people setting their nickname to obfuscated, bold Chinese text is very good for anyone's FPS.

↩  Telesphoreo Exactly. It's disabled in the new 1.19.1 pre-release (as posted by Riawo in the Freedom Server chat) so if people upgrade there shouldn't really be much of a problem. But knowing this server generally doesn't like the chat reporting, I can't be too certain of that.

We should patch it in Scissors anyways, just to be safe.

10 and my toes

Quote

↩  Deauthorized scissors itself

This is why I mentioned maybe putting it in Scissors...

Quote

↩  Deauthorized a plugin

This has been tried many times in TFM and I haven't seen any amount of success come from it. The matter of the fact is you'd have to rewrite the book to remove the click event. That's something I believe is best done in Scissors.

Patching exploits in plugins can only go so far. You see it with Extras and you see it with TFM. At the end of the day, Scissors beats them all.

No, this is probably the dumbest suggestion I've ever seen in my life.

How is this even supposed to work with TFM?

How are you even going to define a bot? A headless client? Well, how are you going to know the client is headless? Are you going to remote into their computer and check to see if Java is running?

As @"Luna__"#2532 said, bots are exactly the same as players. As such, they should have exactly the same permissions, rights etc.

But a suggestion I would consider vouching on was to remove the low-effort, useless & spammy ones (hint: Seb's bot) from the server.