News for hackers. Stuff that matters.

A comment on “fractureiser” malware in many popular Minecraft mods and modpacks. Parent comment

Re:“fractureiser” malware in many popular Minecraft mods and... by blacksmithgu on Wednesday June 07, 2023 @09:18PM (#36235939)
I'm sure people have thought about it, it's just hard, annoying, and asking a lot of mostly unpaid OSS contributors. Many mod developers are high school / college aged.

Sandboxing Java code running in process requires ugly and obscure security APIs and restricts you to having to have a common modding API (Forge). Many mods use bytecode patching and would be broken completely.

[ Parent | on HN ]
Re:“fractureiser” malware in many popular Minecraft mods and... by pkage on Wednesday June 07, 2023 @09:48PM (#36236155)
The Linux distribution of Prism actually runs in a flatpak by default, which provides pretty OK isolation.
[ Parent | on HN ]
Re:“fractureiser” malware in many popular Minecraft mods and... by willis936 on Wednesday June 07, 2023 @10:46PM (#36236537)
It's SOP to run MC servers in a tightly constrained and patched docker container and oftentimes also on a VM.

Granted, this is a large concern for clients.

[ Parent | on HN ]