Live data from Hacker News

Randar: A Minecraft exploit that uses LLL lattice reduction to crack server RNG

github.com

41–50 of 122 posts

Re: Randar: A Minecraft exploit that uses LLL lattice reduction to crack server RNG

#42
post #9

Back in 1999-2000 there was an "International RoShamBo Programming Competition" [1] where computer bots competed in the game of rock-paper-scissors. The baseline bot participant just selected its play randomly, which is a theoretically unbeatable strategy. One joke entry to the competition was carefully designed to beat the random baseline ... by reversing the state of the random number generator and then predicting…

That's me! Thanks for pulling up the quote from long ago: > "With his obvious technical skill, and his "cheat early and often" attitude, Tim could have a promising career as an AI programmer in the computer games industry. :)" Instead took a path of security, authoring the TLS RFC and principal engineer in Google security. Thanks for the flashback.

This makes me happy to see.

Re: Randar: A Minecraft exploit that uses LLL lattice reduction to crack server RNG

#43

Earlier quoted context omitted.

You can make much more by selling items on 2b. This is not little payout, it sounds to me like one of the most significant exploits in anarchy minecraft history, possibly even more than nocom.

RNG vulnerabilities are usually really bad in terms of the systems they compromise. It often means exposure of keys, huge numbers of jailbroken devices, or something similar. Making at most tens of thousands of dollars in Minecraft with one is sort of cute and fun in comparison. Of course, I could be underestimating this by a lot.

This is a bug in how Minecraft does things, not a bug in the generator itself (which has long been known to be vulnerable to such things).

Re: Randar: A Minecraft exploit that uses LLL lattice reduction to crack server RNG

#44
Yo Leijurv this is so sick! As a fellow game hacker this sort of stuff is super inspiring.

My girlfriend and I watch all the fitmc videos even though neither of us play minecraft, and love the ones detailing your insane tooling the most.

Ever since we watched the nocom one I’ve wondered what you do professionally - are you in the infosec space?

With the amount of math and computer science knowledge you put into your work I would guess more in algorithmic trading or something like that. No worries if you don’t want to answer, just curious!

Re: Randar: A Minecraft exploit that uses LLL lattice reduction to crack server RNG

#45

Earlier quoted context omitted.

RNG vulnerabilities are usually really bad in terms of the systems they compromise. It often means exposure of keys, huge numbers of jailbroken devices, or something similar. Making at most tens of thousands of dollars in Minecraft with one is sort of cute and fun in comparison. Of course, I could be underestimating this by a lot.

This is a bug in how Minecraft does things, not a bug in the generator itself (which has long been known to be vulnerable to such things).

Yeah, there is a big class of "RNG bugs" where someone uses a non-cryptographic RNG for secure things, not realizing that those things are supposed to be secure.

The classic example of these is a password manager that gave out recovery codes using a PRNG. This is in that class.

Re: Randar: A Minecraft exploit that uses LLL lattice reduction to crack server RNG

#46
post #30

The video on this is amazing: https://www.youtube.com/watch?v=maMpMOnIJDE . I had no idea how sophisticated the community was.

The narration in this video is so over-the-top you'd think they were talking about Stuxnet or something. I love it.

Re: Randar: A Minecraft exploit that uses LLL lattice reduction to crack server RNG

#47

Pretty cool exploit. The idea of a free for all bug abusing server is pretty neat, a whole ‘nother level of the game. I guess this is what “actually fighting” (rather than just using in-game battling mechanics) would look like if the metaverse really happened ever.

An in-between is Super Smash Bros Melee, where a lot of tournament-legal ingame tactics rely on bugs. But only ones you can exploit manually with a regular controller, not actual hacking, and also one exploit called Wobbling got banned in 2019 (note that this is a 2001 game).

Re: Randar: A Minecraft exploit that uses LLL lattice reduction to crack server RNG

#48

Pretty cool exploit. The idea of a free for all bug abusing server is pretty neat, a whole ‘nother level of the game. I guess this is what “actually fighting” (rather than just using in-game battling mechanics) would look like if the metaverse really happened ever.

> The idea of a free for all bug abusing server is pretty neat, a whole ‘nother level of the game. Balance converging around bugs and exploits is pretty typical for all PvP sandbox games with cutthroat gameplay, even if not allowed by the server. ARK: Survival Evolved and Eve Online are infamous for having huge clans (thousands of players) willing to go extreme lengths at metagaming and bug exploitation. It isn't alw…

The problem is, the optimal hacks usually don't make the game fun. It becomes a war of attrition.

Re: Randar: A Minecraft exploit that uses LLL lattice reduction to crack server RNG

#49
post #46
post #30

The video on this is amazing: https://www.youtube.com/watch?v=maMpMOnIJDE . I had no idea how sophisticated the community was.

The narration in this video is so over-the-top you'd think they were talking about Stuxnet or something. I love it.

Yes, absolutely :) that's why we went to FitMC to make the video, he always delivers.
Post reply on HN