Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

“Fractureiser” malware in popular Minecraft mods and modpacks

prismlauncher.org

Post reply on HN
Print view View original

101–106 of 106 posts

Re: “Fractureiser” malware in popular Minecraft mods and modpacks

#101

Post by andersa »

kaba0 wrote: post #99
throwaway290 wrote: post #95

Earlier quoted context omitted.

Well if we are talking sandboxing, Windows has it and this malware specifically has sandbox escape functionality for that purpose.

What kind of sandbox does Windows have? All I could find was about a pro/enterprise feature but even that has to be explicitly started and I doubt minecraft users used that. Not having admin rights is almost uselessly crude as a “sandbox”.

There is the one called "windows sandbox" but it's not persistent making it useless.

More recently, I've been following https://github.com/microsoft/win32-app-isolation which seems incredibly interesting! If they can pull it off, we will have mobile-os like security on windows, finally, after all these years.

It has been my #1 feature request for windows for so long... I almost can't believe it's actually happening.

Re: “Fractureiser” malware in popular Minecraft mods and modpacks

#102

Post by phendrenad2 »

andersa wrote: post #14

It seems baffling that we have this massive community making mods with highly insecure raw java code, and somehow nobody thought of figuring out how to sandbox the stuff.

The same could be said about NPM, or pip, or crates. The security model is "they will probably find the backdoor before it affects me", and it's unreasonably effective.

Re: “Fractureiser” malware in popular Minecraft mods and modpacks

#103

Post by throwaway290 »

kaba0 wrote: post #99
throwaway290 wrote: post #95

Earlier quoted context omitted.

Well if we are talking sandboxing, Windows has it and this malware specifically has sandbox escape functionality for that purpose.

What kind of sandbox does Windows have? All I could find was about a pro/enterprise feature but even that has to be explicitly started and I doubt minecraft users used that. Not having admin rights is almost uselessly crude as a “sandbox”.

Idk https://news.ycombinator.com/item?id=36238459

Re: “Fractureiser” malware in popular Minecraft mods and modpacks

#104

Post by Sebguer »

oefrha wrote: post #73

> A CDN compromise or cache poisoning is not out of the question due to Curse's usage of the extremely outdated and insecure MD5 to verify downloads. If someone found an md5 preimage attack, they wouldn’t burn it on some random Minecraft players.

Some of the very first reports of log4j were against Minecraft servers. If you go look at the original Github issue in which it was identified, all of the posts prior to anyone understanding its gravity were from Minecraft server operators.

Re: “Fractureiser” malware in popular Minecraft mods and modpacks

#105

Post by SkylockeScarred »

squeaky-clean wrote: post #16
duxup wrote: post #13

Earlier quoted context omitted.

What does that mean?

People try to get around online moderation bans for calls to violence or such by saying things like "Someone needs to kick that guy's ass... In Minecraft"

Hilarious thing is, that sort of speech I think is protected by the Brandenburg Vs. Ohio. It's when it gets specific in a "do x at y" way it gets you v&.

Re: “Fractureiser” malware in popular Minecraft mods and modpacks

#106

Post by teknico »

thanatos519 wrote: post #55
userbinator wrote: post #10

client.jar searches the entire filesystem When HDDs used to be the norm, that would raise an obvious audiovisual signal that something isn't right. Unfortunately with almost everyone using SSDs these days, and the loss of activity indicators[1] on a lot of machines, it would be barely noticeable. [1] I suspect that it's also in the interests of "officially sanctioned" malware to hide its presence.

I have cpu, network, memory, and i/o graphs in my desktop panel for this reason. MATE desktop but I bet there are equivalents everywhere.

Same here with KDE Plasma. Also GPU usage, and CPU/GPU/SDDs/Wifi card temperatures.
Post reply on HN