Severe: LWC Exploit Please Read This UPDATE!

Jigsaw · Feb 15, 2012

The LWC database has been rolled back thanks to an option that the plugin developer found to repair removed protections. That means almost all locks should be back and that the only thing you will have to do is /cmodify them back to any other players that have been added. The result of the database repair removed all the modified names. At least we got our locks back though.

I really hate to be writing this post, but it is essential I inform everyone on the server of this issue that has arose. If you were on in the past 12 hours you would have noticed that people have been talking about their locked chests, doors, signs, etc. being "mysteriously unlocked and free for anyone to use. This is not a bug or a glitch in the plugin, but rather this is a serious exploit that allowed any player to log on the server and essentially wipe out the entire LWC database with a few commands. This exploit was uncovered by a player named "wewinagain" who some of you may have seen on the server last night. The player logged on to at least 10 other servers and was able to clear the LWC database on every server. This exploit was caught only a few hours after the player began to use it and the plugin developer released a fix as soon as he could.

Yes, we do have backups of the database, but I feel it is "safer" to allow everyone to re-lock their chests them self instead of risking more errors trying to rollback the LWC database. I know this is a pain and it leaves some chests open to thieves, but we do log every chest interaction so if you feel like you are missing high value items please let a Moderator or Admin know and we will investigate it.

That being said, you are not permitted to take any items from any chest that is not yours for the next 7 days. This will allow ample time for all players to re-lock their things.

There was not really anything that could have been done to prevent this and it was just a case of bad luck for us because this player decided to come on our server. I know everyone will be frustrated and I do not blame you. I ask of you to just realize that there was nothing to do to stop this and I will do everything in my power to make it right and prevent it from happening again.

I really don't enjoy writing bad news, but this is essential information that all of you must know. Please be mature players and instead of taking advantage of this situation let players know "hey dude, you forgot to lock this chest" so we can all still enjoy this game.

Here is a message from Hidendra who is the LWC devloper:

LWC Devloper Hidendra said:

Hi everyone,

At 2:11 EST last night, an exploit was discovered by the player wewinagain (he also is using alts, but that is his real username). 30 minutes later, he began targeting other servers indiscriminately - most likely larger servers.

SYMPTOMS
Almost every protection disappears, possibly along with the block with it.

It is regrettable it had to come this far without seeing it before. However, the damage has already been done and all we can do is work towards fixing it and ensuring this does not happen again.

Full message from him is here: http://forums.bukkit.org/threads/lwc-se ... ost-966265

tl;dr? Re-lock all your things!
Use Command: /lwcpersist and /lwc private

Jigsaw · Feb 15, 2012

Updated!

Jigsaw · Feb 22, 2012

It has been 7 days from the time of this exploit and therefore any chests that have not been re locked are considered unlocked chests and any items in them may be taken. You do not have a right to grief the chest, but you do have a right to any items inside that chest if it is unlocked.

Log in or Sign up

Severe: LWC Exploit Please Read This UPDATE!

Jigsaw Founder
Administrator

Jigsaw Founder
Administrator

Jigsaw Founder
Administrator

Share This Page

Log in or Sign up

Severe: LWC Exploit *Please Read This* UPDATE!

Jigsaw FounderAdministrator

Jigsaw FounderAdministrator

Jigsaw FounderAdministrator

Share This Page

Useful Searches

Severe: LWC Exploit Please Read This UPDATE!

Jigsaw Founder
Administrator

Jigsaw Founder
Administrator

Jigsaw Founder
Administrator