News for hackers. Stuff that matters.

A comment on Many ways of malware persistence. Parent comment

Re:Many ways of malware persistence by DanBC on Tuesday May 05, 2015 @03:28PM (#9494406)
Further to this: mods are so hard that some people use a mod launcher. This replaces the official Mojang Minecraft launcher. But part of the role of the launcher is to log on the player. These alternative launchers just ask the player for their Minecraft username and password! And this is just what the community accepts.

http://www.reddit.com/r/Minecraft/comments/30orgd/is_there_a...

[ Parent | on HN ]
Re:Many ways of malware persistence by fragmede on Tuesday May 05, 2015 @03:36PM (#9494458)
Are Minecraft mods actually securely implemented?

Could a nefarious mod that didn't include a launcher still read the user/pass out of RAM?

[ Parent | on HN ]
Re:Many ways of malware persistence by joecarpenter on Tuesday May 05, 2015 @10:37PM (#9496304)
Mod is just a JAR file that's loaded into Minecraft process. So yeah, no protection whatsoever.
[ Parent | on HN ]