“fractureiser” malware in many popular Minecraft mods and modpacks

Re:“fractureiser” malware in many popular Minecraft mods and... by ninth_ant on Wednesday June 07, 2023 @11:54PM (#36236979)

When developers add an official modding interface, then it usually works the way you've suggested. They get access to much of the internal API and a sandboxed environment.

Many mods though, work by just subverting the game by replacing components with custom-made ones. This allows substantially more customization.

In Minecraft, both types exist. The first type are called "data packs" or "resource packs" and would not be subject to this attack. The latter type involves swapping in new .jar files and running them directly, which is unsupported by the developer and gives basically unrestricted access.

[ Parent | on HN ]

Re:“fractureiser” malware in many popular Minecraft mods and... by circuit10 on Thursday June 08, 2023 @03:52AM (#36238585)

This might be a bit nitpicky but resource packs just replace assets without scripting capabilities, and datapacks do let you run commands which are Turing-complete but they aren’t really a great programming language because you can’t do things like loops in a normal way

[ Parent | on HN ]

Re:“fractureiser” malware in many popular Minecraft mods and... by charcircuit on Thursday June 08, 2023 @05:36AM (#36239283)

Graphical mods are still mods. You don't need scripting for a mod to be a mod. It just has to modify the base game.

[ Parent | on HN ]

Re:“fractureiser” malware in many popular Minecraft mods and... by circuit10 on Thursday June 08, 2023 @12:09PM (#36244249)

I’m not saying it doesn’t count, just pointing out some differences

[ Parent | on HN ]