The Chat Message That KILLED Minecraft

[@captainrexie1693]

I was about to log in an anarchy server but I went outside to take some air and it saved my computer.

[@mcbyt]

Saved by the oxygen

[@LRexChess]

@@mcbyt lol

[@DiegoBrando]

The bug was already fixed for all vanilla installations (using the default launcher, we don't know about third party ones)

[@HEJOK254]

Thank God I told my friend I wasn't gonna play minecraft with him yesterday. Instead I was working on an account system for my game. Unity literally saved me.

[@java9245]

@@mcbyt lol

[@wonderstruck.]

Update all your apps and devices NOW!! It’s not just Minecraft and servers. The Log4j RCE vulnerability affected nearly every service that used this Java library. You could do the same exploit by changing your iPhone’s name, thru the login page on Twitter, and even by changing the name of your Tesla car (seriously). This vulnerability is being actively exploited, and companies are rushing out updates to prevent it. Again, it’s not just MC and servers. I work at a software company and we had quite a scare. Update all your apps and devices ASAP. (Reposting because this comment got deleted for some reason)

[@darkmoondeath00]

shut

[@SkylarSpooko]

@@darkmoondeath00 that's exactly what someone who uses a Log4j RCE exploit would say

[@lordkab00m]

@@SkylarSpooko lol

[@darkmoondeath00]

@@creepysmilingcarl9742 learn to call fake things, kid (ment to post on something like this a other post)

[@real_bork7858]

@@darkmoondeath00 how is it fake bruh

[@peegion4742]

My dad was actually notified and had a emergency meeting when this happened (he works in cyber risk), he told me it was about minecraft, I though that it was pretty weird then, but forgot about it in an instant. Now that I see how dangerous this actually was I feel really dumb.

[@lourila]

Say thanks to your dad from Minecraft community to be concerned and a part of a long work to make a place safe to play

[@yourfriendlymemedeliverygu7493]

"your dad from minecraft community" -the commenter above me, 2021

[@KaziiTheAvali_inactive]

never forget anything when it comes to cyber security fields like his.

[@ItsEv]

"My dad was actually notified and had a emergency meeting" among us reference?

[@the_gaming_master]

Sussy

[@Sllce]

Would just like to note that it's NOT required to have java 8 to have this exploit fixed. Mojang has pushed out updates for all versions. If you are a server owner/mod developer etc. you do need to take action though. Mojang has made a statement on their website which everyone should read.

[@craigdavies2598]

everyone should like this comment its full of information

[@leditz5544]

I have Java 8 301 am I safe??

[@Sllce]

@@leditz5544 You just have to quit Minecraft and restart the launcher. After that you should be safe no matter what Java version you're using.

[@leditz5544]

@@Sllce Thanks for the miencraft tip, tho I use Lunar, so what could I do? Lunar 1.8.9.

[@retr0cube]

@@leditz5544 Yeah, you're safe, actually all minecraft versions after 1.17 use Java 16

[@notcryo]

I use lunar client, and I'm pretty sure they were one of the first clients to patch the exploit. Insane how fast they were to do it too

[@mcbyt]

Yeah, Lunar was super quick with it, took like an hour or two

[@superfire6463]

Verifying my account doesn't let me use lunar anymore I'm pretty sure

[@Johnny-hh3dd]

@@superfire6463 sign in using microsoft

[@superfire6463]

@@Johnny-hh3dd Yeah, ik that. But it won't let me use lunar because I am under 18

[@TheBuilderPro2024]

@@mcbyt is it possible to have this done with Bedrock Edition? Because thats what i play on. Nintendo Switch btw.

[@petey5009]

Gonna give some more info 1. Mojang has pushed a fix for all vanilla versions of the game. If you run vanilla you're fine 2. Forge, Fabric, Paper, Lunar, and Badlion all have patched the issue, and individual mods are (most likely) unaffected. 3. This bug affects ALL java programs that use log4j on the specific versions that the bug works on. Which is a lot. Because log4j is one of the most popular logging libraries. 4. Java 8 isn't required for the fix 5. Versions below 1.7 (why are you even playing on these versions) are completely unaffected in any way.

[@mcbyt]

1. yes, just update 2. forge has only patched 1.12+!!! make sure to reinstall fabric/forge as well just in case to get the new version. 3. yes 4. true, but it does mitigate RCE 5. yes

[@ilonachan]

Log4J 2.16 fixes this by disabling the jndi lookup by default, but it's only available for Java 8 or later.

[@kingp1n817]

So that's why when I started my launcher recently after a while both Java and my launcher prompted me with "necessary safety update" written in red. Damn I'm happy I did both and didn't ignore them

[@bombie]

lmao i ignored that but good thing that i only played single player at the time

[@memegod0166]

@@bombie Same dude, I was going to play multiplayer but I thought why not play single player. Saved me lol

[@lilyydotdev]

Just to be clear, a 0-day can also be a vulnerability the developers do not yet know about - and this is perhaps the more common use of the term. But it of course also includes vulnerabilities that are known but have not received a patch.

[@retr0cube]

I haven't seen in my life a logger that execute what's it's logging

[@TorutheRedFox]

@@retr0cube it's an ace attack, and can take many forms, such as glitch items executing code from a specific memory address in gen 1 Pokémon games

[@DoomsDave.]

How do I pronounce your name

[@peterdagrape]

There are sooo many examples of websites doing this, you’d have thought that major developers would not do this

[@EpochIsEpic]

Fun thing about this is that any website running a Java backend was at risk for this as well. This exploit quite literally affects millions if not over a billion servers/devices. Minecraft is the least of the concerns in grand scheme of things.

[@s-kee2928]

It was from a coder 14 years ago, not today.

[@FoxyAnimater]

Fun fact: Users of MultiMC were NEVER at risk. it uses the most up-to-date version of the logger regardless and prevents arbitrary code from launching in the first place via instances even legacy versions are safe like 1.5.2 or 1.0.

[@FinnSpins_]

Cool

[@gcookie572]

are you sure?

[@ilonachan]

The most up-to-date version of Log4J was affected. Unless MultiMC was using a different logger, users were DEFINITELY vulnerable. And no, instances don't sandbox the game enough to prevent exploits like this, they are literally only for your convenience.

[@no-ld3hz]

Multimc just downloads the jar file and loads its dependencies, log4j is embedded in the jar iirc and multimc isn't even coded in Java, don't spread misinformation about this topic please. Also as someone else posted all versions of log4j were affected previous to 2.16.0

[@lolin6379]

I remember watching a Tom Scott video similar to this issue. He explained how on some websites you could set a certain string of characters as your username and it would cause, if my memory serves, a database wipe of that website.

[@ChainArtsMotion]

You are talking about SQL Injections. But this is different since the exploit is in the Library of Log4j which is being used by a lot of java applications.

[@robertsharp2633]

@@ChainArtsMotion Well, both are Injection attacks where the program wrong interprets sent data as a command. SQL is just the language the program was written in, much like Log4j which uses Java. So Lolin is right, they are similar, I would go as far as saying that they were the same.

[@Duckboyfi]

There was also that Tom Scott video about using tweets to execute code

[@ChainArtsMotion]

@@robertsharp2633 oh yea yea, now that im not sleep deprived my comment sounds stupid xd I wrote the comment before i knew, that the command was literally injected into the chat itself

[@Nyerguds]

Ah, the good old "Bobby Tables" XKCD joke.

[@RedditTophat]

"i remember it like it was yesterday, because it was" comedy gold

[@Jansel_osu]

The Vanilla Launcher also already sent out a patch for all versions from 1.12 and onwards. Good thing I always use java versions newer then 8, like 11 and 17

[@LighterPvP]

1:30 It didn't spread, it wasn't just Paper servers, it was all MC servers since they all inherently use the Log4J library. Same with all those other companies, it wasn't a virus spreading, just the same exploit being used on different software/services.

[@mcbyt]

I didn't literally mean it was a virus, just that it spread like one. Even though all of the different companies were vulnerable at the same time, people didn't exploit them all at the same time, it started with Paper and spread outwards

[@LighterPvP]

@@mcbyt Ah okay just wanted to clarify because you stating "At first it was just something that worked on servers running PaperMC" makes it sound like it didn't work on any other software at the time.

[@TorutheRedFox]

not all because there's a number of servers, including mine that are for a version of Minecraft that predates the use of Log4j

[@XENON2028]

not even all mc servers its every single java application using log4j

[@TorutheRedFox]

@@XENON2028 which doesn't include all MC servers ;P

[@ColRealPro]

I feel so bad for the kids who got traumatized after someone forced them to visit an 18+ site

[@HumbleMagikarpFisher]

yeah thats just horrible :(

[@v01d93]

Or killed the gpu in pc by overloading it with overclocking, better not play minecraft before there will be normal fix of exploit

[@corruptedmodz9797]

I'm sorry for the kids that got NUKED BY THE NASA BECAUSE THE MISSLE LAUNCH CODE WAS EXECUTED

[@Nyerguds]

...did that actually happen, or are you just speculating?

[@HumbleMagikarpFisher]

@@corruptedmodz9797 whats so funny is you're sarcasm meant to make anybidy laugh?

[@surajitsadhya]

Thank you so much for explaining this exploit as I didn't understand what this was and what would it had done.

[@mcbyt]

No problem, happy to help :)

[@ehdhdshehh6677]

The rick roll potential is unlimited

[@expertoflizardcorrugation3967]

I got a friend of mine to cook just that up so that I could test whether or not I had properly protected myself

[@ehdhdshehh6677]

@@expertoflizardcorrugation3967 perfect. Now ask your friend to do that in a server so people who hasnt update to the lastest version will get rick rolled

[@expertoflizardcorrugation3967]

@@ehdhdshehh6677 that sounds like a fast track to downtown bannsville

[@xdnsvexd1401]

Just imagine playing 2b2t during this period, i cant imagine the chaos there

[@mcbyt]

It was... a lot.

[@xdnsvexd1401]

@@mcbyt im gonna stay away from anarchy servers for a while now i guess.....

[@mcbyt]

Good idea, haha

[@YouTubeLover123]

In early 2020, you could impersonate people using a session ID exploit. Things could be wiped in seconds, but this 2021 exploit went as far as hacking your computer. This is actually scary as doing nothing wrong can mess up your whole device. I'm glad Mojang patched this as soon as they could. Very informative 10-minute video :)

[@mcbyt]

Thank you! And yeah the session exploits are pretty crazy, there was another one back in 2012 iirc and there might even be a new one right now :eyes:

[@XENON2028]

to be fair mojang did nothing they just updated their log4j version not to say that mojang is bad tho im so happy they use the new version now

[@trplnr]

me using bedrock edition: haha my competitor has a massive security issue

[@latexwhistledown342]

It’s very fun seeing you calmly battle someone else in pvp while explaining this stuff

[@mcbyt]

LOL thank you

[@RealisticVoiceRecapped]

@@mcbyt do you think you could use java code injection in mc

[@fxbar9765]

It’s a voice over LMAO

[@mcbyt]

Mayhaps, SZN

[@latexwhistledown342]

@@fxbar9765 brruuuuh I know I’m just saying it’s calming

[@Cygnus_MC]

A small correction for this otherwise very accesable video on the exploid: With the 1.17 update, Minecraft forces you to use Java 16 as it uses the new G1GC algorithm. For 1.18 Minecraft will activally search for an Java 17 installation. Java 17 has a partial fix for the LOG4j exploid and thus updating to this version of Java will give u some extra protection against these attacks

[@questionfakegaming6774]

I'm glad that no hacker rick rolled the entire minecraft community

[@7evan7]

currently binge watching all ur vids edit: for the 4th time

[@ramadrops]

AYO 8even8 upload pls

[@w7u]

AYO 9even9 upload pls

[@mcbyt]

LOL, happy you enjoy them :)

[@ethboom.]

evan man

[@xytq4692]

dude your finally back

[@Wolfs2019]

This happened to me yesterday. I was playing 1.8 on hypixel and my computer literally turned off randomly and wouldn't turn back on (all the cables were still in) and then when it did finally turn on it was on this code screen. Luckily I managed to take control of the computer and it's fine now

[@SuperPandaGamingYT]

Were you using forge they have not patched it? If you use multimc they have patched it and vanilla or use lunar/badlion

[@expertoflizardcorrugation3967]

@@SuperPandaGamingYT forge has not updated any pre 1.12 version. Not that I expected it they literally stop carrying documentation for older versions after a few years

[@tillson8686]

Alternative Title: The Chat Message That KILLED Minecraft and soon the whole internet

[@mcbyt]

yeah pretty much LOL

[@LeBonkJordan]

4:15 Family Guy season 7 only has 16 episodes. The 337th episode of Family Guy overall is season 18 episode 8 "Shanksgiving". 7:49 also Gumibär is literally pronounced like "gummy bear". The ä makes a sound almost exactly like the "ea" in "bear".

[@mcbyt]

I was not being serious about Family Guy LMAO. And yeah, I didn't notice the accent mark when I made the script

[@TheDuperTrooper]

great video aidan! I was debating making a tutorial on this but decided it was way too wacky to do

[@mcbyt]

LOL yeah this is kinda a lil dangerous

[@tnt_cam]

I am an owner of a small server on minehut, I was away on vacation when this happened. Luckily from what I know my players are ok. This is one of the worst hacks to happen to a game, up there with the DDoS attack on roblox a couple weeks ago.

[@PyroBlank]

Your video quality is just the best. Keep it up, and you will easily hit a million in a few months if you expand your content

[@mcbyt]

Haha, much appreciated man, I'll do my best

[@AmenChildOfGod]

Crazy how this stuff can just happen like this also subbed!

[@mcbyt]

haha, thank you!

[@tottallynotkong]

1:08 i also thought that it was just chaos and panicking , until i read a random reddit thread explaining how bad it really was...

[@irdc]

I'm actually kinda happy I had a pretty back headache while this was going on since I'd probably forget abt this and just keep joining servers lol. Anyway really good video! :)

[@mcbyt]

Much appreciated! And yeah haha, good that you weren't really at risk

[@Stickman_0420]

I was going to join some random server but I then went to just watch some television. Doing that really saved my location.

[@addisontucker6771]

I'm so glad that my minecraft stopped working a little while ago and I'm still working on fixing it, I could have been in grave danger if that didn't happen

[@MythicaIl]

I'm glad I'm to poor to get Minecraft seriously on Android it's like $10 and as a kid I only have 2

[@addisontucker6771]

@@MythicaIl That's to bad, atleast you don't really have to worry about much while this is going on.

[@pseudoforceyt]

"I remember like it was yesterday... ...because it was yesterday" got me lol

[@Sarwoh]

I thought this was going to be a documentary on the terrible gamer terminology "ez" 😥😥

[@marinadela1361]

This was quite something. I play on Purity Vanilla a lot and the entire thing had to be shut down.

[@mcbyt]

RIP

[@nathansnail]

A zero day is when nobody knows about the exploit until it was used this wasn't a zero day and minecraft was definitely not the first target. When RCE is discovered you go after far more than just people playing minecraft.

[@mcbyt]

That's not what zero day means (at least, not always). Please look up the definition

[@mycelia_ow]

@@mcbyt you're right, but logj4 still doesn't fit the actual definition of zero day either.

[@funisinfinite.]

@@mycelia_ow Log4Shell does. That was the official name given by Log4J.

[@TitanTubs]

Hey thanks, I thought I heard something about a launcher argument but when I went online try and find it all I could find was something you add to servers.. Thanks! 💜

[@pompomaddons]

log4j must be the largest back door exploit in history, mark my words

[@mcbyt]

Yeah, it's pretty crazy!

[@no-ld3hz]

it's not a backdoor exploit, it's a zero day. But we don't fully know, me and some other guys were confused as well around 2018 about log4j having jndi lookup support but we never really delve into it.

[@Technic6343]

I was playing on a 1.8.9 anarchy server today and a guy joined. He started asking what clients we were all using and I told him I was using lunar. At the time I thought he was just being friendly but then a few minutes later he started typing the log4j command. At first I didn't think anything of it but then I realised what he was typing and I instantly left as I wasn't sure whether lunar had patched it or not

[@OfficiallyAPerson]

Thank you for informing us!! Great video

[@mcbyt]

My pleasure, thank you :)

[@Ricos-]

Level 69 on hypixel, credit music artist, good thumbnail, good explain and good gameplay. This is what i wanted :D

[@mcbyt]

Haha, perfect :)

This is movie material. Amazing video, deserves to go viral ❤️

[@Kuino]

imagine buying a verification badge

[@richardstefan2636]

@x imagine having to buy a channel with a checkmark to get more likes

[@mcbyt]

Lol, thank you

@@richardstefan2636 i really don’t care about the likes Lmao

[@vampexia]

@ k

[@meowmeow9617]

I was at school and my class always watched news for free time, one of them showed how there is a bug in almost everywhere electronic and hackers are using that bug to hack people. It also showed some guy having fun on an obstacle course

[@WinterGamesYT]

2:06 i swear, Java developers can be SO LAZY sometimes. its insane

[@mcbyt]

LOL fair

[@LighterPvP]

It's an open source project, most are unpaid volunteers. It was fixed way before it was involved with Minecraft and such, just the library in all these different services weren't updated which is why it's an issue. There wasn't a proper CVE or anything quickly enough because as I said before, most are unpaid volunteers.

[@WinterGamesYT]

@@LighterPvP maybe they should have updated the library then

[@maggiekarp7100]

@@WinterGamesYT Updating the library is the responsibility of the users of the library, such as Minecraft devs, not the developers of the library.

[@TarporLegend]

Been waiting for the video talking about this exploit. I appreciate this, MCBYT, thank you!

[@mcbyt]

No problem, glad to help :)

[@XinaboxGaming]

Let’s gooooo mcbyt upload

[@wetols]

ok xinabox

[@Zadem]

Owo

[@mcbyt]

LET'S GOOOOOOOOO and just a few days after a nickZ xinabox upload too

[@utkinator3591]

I have been going CRAZY hoping I dont get hacked. Thank you so much dude

[@jdnnnnnnn]

my code developer brain is going to rot after hearing him call github as 'jithub' lmao, but other then that, I really enjoyed this video! new sub from me :P

[@mcbyt]

Giraffe Github see what i did there? thank you though! happy you enjoyed :)

[@hajagameznstuff6956]

entity 303 would've been drooling with malicious intent to hack and slash, makin a doomguy coffee meme face too lmao

[@mcbyt]

LOL

[@Crystalstone67]

Thanks for explaining this to us. Now I will be careful with chat playing Minecraft and watch for that message that will show up

[@mcbyt]

No problem, stay safe :)

[@oworcaph]

I'm glad I was asleep during this whole thing, great vid Aidan!

[@mcbyt]

Haha you got lucky it was all fixed before it could be an issue for you ;) and thanks!

[@hazelsnep]

"Everyone's at risk." Does that include the IRS?

[@doufmech4323]

Depends if they use java

[@ieoq330]

THANK YOU SO MUCH!!! I love the explaining and everything, and thanks for letting me kno2 about the exploit! glad i now know im safe

[@mcbyt]

No problem, happy to help :)

[@arttukettunen5757]

Malicious hackers/exploiters would be far less common if they weren't poor, weren't bored or didn't have a bad social situation. Instead of fighting sickness, fight more what may cause it. Instead of fighting crime, fight more against its roots. It works and we would have to address security less, but we would still have to address it.

[@thenerdkid351]

ah yes tell them to stop being bored

[@sammyschafer5356]

@@thenerdkid351 commit stop being bored idiot on them. Simple.

[@tamamshud5879]

Hacking is a puzzle for smart people. They can be rich and have pretty well off social situation. Hacking is a game for them

[@wonderstruck.]

Some hackers are like that, but many hackers are organized criminals or state-sponsored. A lot of ransomeware attacks are by Russian/European gangs, and the WannaCry ransom attack was traced back to the North Korean government.

[@Zebra_Paw]

My 2007 Dell Inspiron runs Windows 11 without bugs, has its hardware almost maxed out, boots in 5 seconds! if you got one don't throw it away! Unlike Macs, these have been supported kind of officially for 15 years and it's not even the end!

[@RetroPiglin]

This exploit was created by mojang trying to get people to play the newest version LMAO

[@mcbyt]

LOL

[@AliBananiii]

Omg i was waiting for someone to make a vid on this!

[@dabled3]

There is no way someone isnt using this to rickroll people

[@amritraychaudhuri9438]

good idea

[@mcbyt]

oh guarantee someone has

[@XENON2028]

time to do that, I have the exploit set up aswell as a vulnerable mc server jar for testing (and test client if it doesnt work) so nothing should stop me (but still I will only test it on myself because im not stupid)

[@eviewuzhier]

i remember when this happened, I got pinged at least 69 times telling me to NOT play on any servers. I got really scared, because i was literally on a server when it happened.

[@MrBelles104]

I rarely play on servers so I'm pretty sure im safe. Did this exploit in 4J work on all OS?

[@mcbyt]

It does, I believe

[@retr0cube]

@@mcbyt all platforms that log4j support are affected

[@XENON2028]

you are NOT safe. ANYTHING using log4j is affected. log4j is used very very widely

[@its.parsley]

I heard about this instant it happened. Never understood it. thx for the vid

[@mcbyt]

No problem, happy I could help :)

[@GREATRJ1]

is this happening on bedrock/windows 10 edition and will it go over to single player cause thats what im worried about if it does

[@maggiekarp7100]

No, this only affects the Java version of the game. The Bedrock and Windows 10 editions are written in C++. It does not and will not affect singleplayer.

[@retr0cube]

@@maggiekarp7100 what a shame java devs will waste their time on an exploit that wasn't their fault

[@GREATRJ1]

@@maggiekarp7100 thx just wanted to know

[@GREATRJ1]

@@retr0cube yeah

[@mcbyt]

No, this is Java-only. And it should not carry over to single-player

[@jacobevanhughes]

"And for a while, nobody was safe, until they downloaded Raid Shadow Legends the sponsor for today's video."

[@YansiTheParrot]

Claim your "I was here early" ticket here

[@potatocouchtwo7181]

I love your style of video documentaries! Very entertaining

[@mcbyt]

Thank you!! I really do my best :)

[@mkks4559]

Thank you for making that video! I am using fabric client mods on a vanilla server that I own, what should I do?(Also nice background footage, next time put some less cool videos of you so it isn’t easy to get distracted.)

[@benfll]

That Dell Inspiron PC you showed was literally the same PC my family used to have

[@mcbyt]

Same

[@savageice9948]

really doing good, everytime I come back to your channel you just be doing better. Congrats

[@mcbyt]

Much appreciated man, and yeah, really on the grind rn (dunno how even, since this is finals week)

[@savageice9948]

@@mcbyt yeah bro I remember when you just did pocket edition raids, keep up the grind.

[@niftty_]

Holy shit 0_0... Great video man

[@mcbyt]

Much appreciated! And yeah, this is pretty crazy

[@niftty_]

@@mcbyt ofc np

[@Cozmxc]

as someone who was effected by this glitch, PLEASE UPDATE. this happened to be back in august, but I was lucky enough for the attacker to not steal any of my info (that I know of). All the attacker did to me was destroy windows (I assume from deleting system 32). it took me 20 mins to load windows after putting my pin in, and my desktop and everything was wiped, I ended up having to reset my pc and lost all my data. so please take all the necessary steps to avoid this bug

[@doufmech4323]

I doubt this is actually true. Maybe you got infected by something else, but this issue was not found in august. Yes it might have been found before then, but I seriously doubt Minecraft would be the target if anyone knew about this back then.

[@Hoodrattt]

The effort you put Into your videos are Insane

[@mcbyt]

Haha, I really try. Happy you enjoy them!

[@Nathator97]

thank you for making this video! i am going to put a link to this in my discord server to get the word out

[@mcbyt]

Much appreciated, and I'm happy to help!

[@nimadara]

0:43 thats a funni number

[@meolsei]

"When your hardware predates the Gummy _Bar_ song"

[@stellarx20]

I didn't hear about this all, sounds absolutely f*cking great.

[@__nico__6957]

I havent been able to play java for 4 days because i was scared they would steal my account or hack my pc this was really helpful ily so much thx for the vid

[@mcbyt]

No problem, happy to help :)

[@sillyguy_2009]

me who plays by my self: hahaha i am incredibly lonely

[@ax0rz0]

I’ve never had to reinstall windows on my GAMING PC so far.

[@manaphygames]

i love how people do/can do powerful things over/on a cube simulator for children

[@albrickeinstein1085]

I actually rickrolled the entire P2W server using log4j and it dropped the playerbase by 20% lol

[@ees4.]

"DDoS" means _Distributed_ Denial of Service. So at 5:15, it is a _DoS,_ Denial of Service.

[@plasim.]

“I remember it like it was yesterday.. Because it was.” LOL

[@lamp6909]

I haven’t been playing Minecraft for a while(or games overall) so this is nice to know I should stay off

[@murkpool]

Thanks for the great video! my friend told me about this a day or two ago and im glad to have some more detailed information on it.

[@mcbyt]

No problem, happy to help :)

[@BlueTree242]

also about this exploit, the good part is that it did not affect 2b2t that much, although everyone would expect it went wrong there due to nature of the server. However, one person used that exploit to patch the exploit lol, before anything malicious could be used on the server, and as hausemaster really failed to protect people from the exploit at this time, after some downtime.

[@mrsomebody1]

I was using Java 8 and my server still suffered this exploit, but it appears you can completely block offending chat messages by using log4j's filtering capabilities.

[@Bluey]

3:51 well... that's surprising. i guess i could have played used my pre-1.17 anarchy client the whole time and only IP addresses and location would have been taken from me

[@Flightkitten]

this was a big thing, i thankfully have not been affected yet...

[@Zaptosis]

Yet another reason why VPN's are ESSENTIAL & it's evil that servers try to block them. I always have a VPN on 24/7!

[@doufmech4323]

VPN's will in no way protect you against this.

[@kosmonautofficial296]

Great video! Going to be interesting this week to hear what companies were breached.

[@mcbyt]

Absolutely, I think this is gonna run the cybersecurity news cycle for at least another 2 weeks

[@memegod0166]

@@mcbyt So true

[@PlokgiH]

This is the guy at the world trade center frantically warning everyone about the important documents that are at risk. It's a touch bigger than that. Minecraft isn't the only program that uses Java and losing account details should be the least of your worries.

[@redacted8220]

cool that you are spreading this info(bit late tho), but there are a few things you said that are not correct or would prolly need a bit more added to them to be 100% correct props for even doing such thing

[@mcbyt]

well this video was uploaded sunday! but happy you enjoyed

[@redacted8220]

@@mcbyt sorry for being nitpicky what I meant that it was discovered and exploited already on 10th, but I was just angry at some things so was like "who cares if making videos, especially for someone who ig is not a dev, on this topic is time-consuming"(tho there were some things you could but didn't mention and I don't really understand why) sorry for such a rude comment have a nice day

[@LeBonkJordan]

Thank fuck I always use an up-to-date java executable instead of the one pre-packaged with minecraft (and also I haven't played minecraft online in two and a half years so that probably helps as well)

[@pamaguin]

good thing recently i’ve been obsessed with shaders again playing survival

[@Aaradhya777i]

Moral : Don't underestimate a Chat Message !! Lol 😂

[@kingchicken9381]

This happened right when I started 2b2t not knowing it existed.

[@contademez]

Its awesome that you visited Bedwars Practice ! 😯

[@mcbyt]

Mhm! Very fun server and great for intros/outros