Viktig For Alle!!!

[Oys]

Ok det ahr blitt leaka en liste med Over 1500 Accounter Det er veldig viktig at dere sjekker om dere er på lista her:http://dinnerbone.com/minecraft.php      Hvis dere er på lista skift passord,selv om dere ikke er på lista bør dere gjøre det uansett!!

[Safew00d]

hmm...
virker mere som en haug med drittunger som har sitti og gjetta passord på accounter og nå legger det ut på nett

[kvarpis]

ja jeg var ikke lista så det er litt små chill

[Dwarfbear]

jeg må nok små le siden en slik sidet kan enkelt være en virus bombe med trojanere og keylogg stuff så hold dere unna slike sider

[Floyd-ATC]

hmm...
virker mere som en haug med drittunger som har sitti og gjetta passord på accounter og nå legger det ut på nett

Dinnerbone = En av sjefsutviklerne bak Bukkit, han er til å stole på.

Listen er lekket av de som står bak "mcbans", de infiltrerte et miljø som hadde laget en falsk klientmod som snappet brukernavn og passord.

Trusselen er høyst reell og det er verdt å sjekke URL'en dersom du har installert en klientmod. Det er nemlig ikke kjent hvilken klientmod det er snakk om.

[Floyd-ATC]

CSI er en uskyldig fantasiserie på TV, Minecraft er den brutale virkeligheten! ;-)

[Safew00d]

CSI er en uskyldig fantasiserie på TV, Minecraft er den brutale virkeligheten! ;-)

true xD

[Cybersyn]

Vet at jeg tar opp et gammelt emne, men har funnet litt mer informasjon:

What is this?

Recently, a list of approximately 1,000 Minecraft accounts were compromised and leaked to the internet. We believe this to have come from a client modification which stole their account details.

You can read more about this here, and use the following form to check if you're on the list.


2011-03-17 update - list two

Another list was leaked on the 17th containing approximately 500~ more accounts. This tool has been updated and you may see if you are on the new list.

Kilde: Dinnerbone (Dinnerbone.com)

It has recently come to our attention that a list of Minecraft usernames and passwords have been posted online and we urge everyone to read the following announcement found on MCBans.com:

We urge everyone in the Minecraft community to change their Minecraft.net passwords ASAP. Please read below for tips on how to create a better password before doing so.

It recently came to our attention that a list of approximately 1,000 Minecraft account names and passwords were made freely available on the internet. We believe this list consists of information collected by a group of malicious users from a well known "griefing team". How the information in this list was obtained is not sure, but we suspect they collected them through the use of hacked clients that pretend to only give you extra features like flying or seeing through blocks but actually send your account information to the creators as well.

The first thing we did when we acquired this information was to inform Mojang of this crisis, however, we feel we can do a bit more for the community while we wait for them to handle the situation properly as we've learned that there's a high possibility that the griefing team is aware that their list has been made public. As such, we are going to be pre-emptively banning compromised accounts with an informative reason. Unfortunately, MCBans did not have a means of merely informing compromised accounts that their username and password have been discovered, so banning them with a brief message telling them so is the only option.

If there is ONE thing you read in this announcement, it should be this: we urge everyone to go and change their passwords NOW, keeping in mind the following tips on creating better passwords:
Passwords should not contain words found in the dictionary
Passwords should contain a mixture of upper and lowercase characters.
Passwords should contain a mixture of letters and numbers.
Passwords should contain punctuation characters and symbols such as: % & + - = #.
Choose a password you can remember but don't make it too easy.
Passwords should be at LEAST 8 characters in length, but 14 or more is preferable.
Please help us by sharing this information with everyone you know and getting them to change their Minecraft.net passwords.

Kilde: MCBans Community (MCBans.com)

To see if you're one of the people on the list, use this site: Leaked Minecraft User List

However, we still encourage everyone to change their passwords anyway.

If you are on the list, please feel free to PM Dinnerbone with a list of 3rd party mods you use so we can figure out what mod it was (if it was any of the public ones found within the Minecraft community).

In light of this security issue, we feel it is time to make our CraftBukkit Recommended Builds public. We've been hard at work plugging up known exploits to prevent them from more easily griefing or taking down your server with whatever knowledge we have. As such, we are moving to make our Recommended Builds for CraftBukkit more official and known ASAP. We want everyone in the Minecraft community to benefit from the exploit fixes we've made to the Minecraft server by switching to Bukkit, until Mojang has dealt with things properly themselves. While we're still in talks with Mojang about licensing and their stance on Minecraft server modding, we feel this is a more than good enough reason to release our Recommended Builds to the public.

To download our latest Recommended Build, visit the following link: Recommended Build

Please note, if you are updating to the latest Recommended Build we cannot guarantee that all the plugins you currently use will work properly so you'll have to do your own testing locally or on a test server. If you're new to Bukkit, please feel free to join our community and ask for help with moving over.

Kilde: Bukkit Forums (Forums.Bukkit.org

Edited Message:

I would like to add to this. Everyone including server admins should be copying and pasting this message on their forums to help spread the word.

The next thing to do is inform your users on how important it is not to download stupid silly hacks from the internet. Almost all the malware keyloggers and crap come from this.

In fact today maybe minutes ago someone on my server seam to have been infected by some kind of malware. It seams to insert it's self into chat conversations. I thought it was packet releated but then it would not make sense why it did not start till the person hit t button.. Notice how it's his where should be this.

Check a look at this image:



Now who knows if this is a Minecraft one but the best part of it was this links to a exe file that clearly is keylogger/malware.

SO EVEN MINECRAFT players are at risk so watch CHAT. Always tell players not to download files from other players. And if you download a texture pack make sure it's just images and not class files.

It's best to not download any client mods that are not from respectable authors who have been doing it for moths and NEVER download special modified mods from say other people in the threads and such. They might just be a trap waiting for you!

Kilde: Bukkit Forums (Forums.Bukkit.org)

Warning: Some malicious client mods are stealing passwords

When you install a mod, the mods gets full access to your computer, and can do ANYTHING to it.
Make sure you absolutely trust the source before installing any such mods.This applies to both server mods and client mods.

I don’t know which mods are the culprits.

When the modding support is added, there will be support for sandboxing mods to give them less access to important stuff. You can chose to trust a mod if you want to, and if it needs to do fancy things, but the default will be to run the mod sandboxed.

Kilde: The World of Notch (Notch.Tumblr.com)