Skip to content

Security patch (1.0.6) provided in good faith for potentially dangerous gateway memleaks. Users visiting deceptive sites that do not inform them that a component of their backend contains undocumented memory-related vulnerabilities may put them at risk of their data being used in ways they have not consented to

License

Notifications You must be signed in to change notification settings

eaglerarchive/eagl3rxbungee-memory-leak-patch

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 
 
 

Repository files navigation

EaglerXBungee Memory Leak Patch

Security patch (1.0.6) provided in good faith for potentially dangerous gateway memleaks

Users visiting deceptive sites that do not inform them that a component of their backend contains undocumented memory-related vulnerabilities may put them at risk of their data being used in ways they have not consented to, this patched gateway jar file is provided with no source and no warranty with the goal of maintaining the continued safety of possibly millions of future users over the years interacting with servers built on the ashes of EaglercraftX without proper documentation

This file does not contain any copyrighted code or registered trademarks of Mojang AB and Microsoft

This is not software that is built on or is programmed for use within any modified and unmodified Minecraft Java Edition server distro and does not depend on any Mojang AB or Microsoft products to perform it's programmatic functions as advertised

EULA Disclaimer: This plugin does not in any rational way violate the EULA as a result of allowing some users to play for free, an ounce of research will reveal EaglerXBungee actually includes a fully developed authentication system to respect the rules and ensure players cannot join a server without a real Minecraft Java Edition account but this system relies on the underlying BungeeCord proxy's authentication to be enabled as well to work correctly. I cannot see in any reasonable way how it's my fault that my plugin allows users to play without authentication if the environment these EULA-violating users have set up to run the plugin within has been modified in ways I (the developer) have no control over. If you [Mojang/Microsoft] don't want people to be able to connect to a BungeeCord proxy and skip authentication and play Minecraft without an account then that's between you and the authors of BungeeCord for them to remove the option from THEIR software's configuration file that allows a server owner to disable the BungeeCord proxy's authentication engine, which by the way, also violates your EULA to the basically the same extent except you can't DMCA it because of PR

Again, this is provided in good faith out of concern for the safety of future users that may unknowingly expose themselves to a compromised website as a result of this memory leak being exploited without anyone's knowledge

About

Security patch (1.0.6) provided in good faith for potentially dangerous gateway memleaks. Users visiting deceptive sites that do not inform them that a component of their backend contains undocumented memory-related vulnerabilities may put them at risk of their data being used in ways they have not consented to

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published