RedHerring

Quick rating

RedHerring

No reviews yet

Simple non-invasive coremod to fix the 'exploit' in 1.8.x that allows the server to get yes/no answers.

Mod Loaders
Forge
Minecraft
Hosting Partner

Want to reach Minecraft players?

We're looking for a server hosting partner to feature here and other parts of the site. Interested? Send us a message!

Get in touch

Community voices

Reviews

Versions
Loading versions…
Match includes

Click once to include, again to exclude, again to clear

Rating Any
Any 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0
Min
Max
Play Status
Reviews
Time Played
hrs+
Verified developers only
Has developer response
List view
Grid view
Compact view
Sort by
Date
Rating
Helpful
Unhelpful
Edited
Sort ascending
Delete this review?

This removes your review from the project. You can write a new review after.
Review submitted for moderation

Your review has been sent to moderators, who will check that it meets our guidelines before it appears publicly.

No reviews yet. Be the first to review this project!

Get it on

Available Platforms

CurseForge logo CurseForge

About

Project Details

Type
Mod
Latest Version
redherring-1.8.9-1.0.0.jar
Authors

For authors

Embed Badge

If you're the author of this project, you can embed a live badge anywhere that supports HTML or Markdown. It updates automatically whenever ratings change.

Custom banner text
ModDex rating badge preview

Use HTML for any page that supports it, or Markdown for README files and Markdown-based descriptions.

Identifiers

Platform IDs

CurseForge ID

Resources

External Links

Source Issues Wiki Discord

About

Description

Simple, clean server resource pack "Exploit" fix.

No external dependencies besides Forge.
The "Exploit" ONLY allows for the server to check if a file exists on the client or not.
And as a side effect cause the game to try and load the file as a resource pack.
There are currently no know issues with java's zip file management that would allow for any extra malicious activity.
So any claims of people being able to steal your passwords/execute code/etc.. is unfounded. Hence the name RedHerring.

For more info refer to: https://ungeek.eu/minecraft-18-file-access/ Ignore the fear mongering bits like:
"Servers can check if a file exists on the player's computer, enumerate users names but maybe even worse. See PHP's issue with file_exists and phar files."

Logo Found at TvTrops, CC-BY-SA-4.0, https://commons.wikimedia.org/wiki/File:Redherring.gif

Screenshots

Gallery

This project has no gallery images yet.

Versions

Files

Relations

Project Relations

More like this

Similar Mods

Suggestions use data such as tags, dependencies, dependents, descriptions, titles, and more to rank how much they overlap with this mod.

On ModDex

Community snapshot

0
Ratings
0
Followers
0
In stacks

By the numbers

Statistics

<1,000
Downloads
Last Updated
Created
Last synced
When ModDex last fetched this project from CurseForge or Modrinth. Every project is re-checked on a schedule, and any project that ships a new file is synced automatically within hours of the release.
New file updates sync automatically
How syncing works