Your Server might be in Danger... (Placeholder API Exploit)

Want more? Check here...
=Socials=
Second Channel: @LunarVods
Twitter: / cygnus_mc
Discord: / discord
Want access to the full interview and support my work?
Join the Patreon: / cygnusmc
Thumbnail by: / apollyonx69
Pebble art by: midnightmorpha.carrd.co/
=Summary=-
In this video, we discuss the recent exploit in Placeholder API (papi for short) wich allowed players to infiltrate servers and run scripts on the backend, simmilar to Bleeding pipe
#minecraftserver #minecraft #malware
=Timestamps=
None
=Credit&Sources=
Footage by ItsDrowned
/ itsdrowned
Music provided by Infraction No Copyright Music
Spotify: spoti.fi/3DzsedZ
Special thanks to Mosemister for his help!
If You've Read This Far Comment Pebble :)

[@dgs3]

(first) im loving these kind of videos keep it up! Also what editing software are you using?

[@zaj5924]

That's why I avoid using 3rd-party APIs at all costs and create my own from scratch

[@originalname7176]

What is an API ?

[@devilish_crow]

​@@originalname7176As a developer I say that you touch grass, unlike us.

[@m64diamondstar2]

@@originalname7176 it's like public code from others that you can use in your own project so you don't have to repeat what someone else already made :)

[@mosemister]

​@@originalname7176api stands for application programming internet. Its essentially code that is designed to be interacted by other code. So with the example from the video which is placeholder api. It allows you as the user to insert data into messages with plugins that intract with it talking to its api to give it a message for it to insert your data and it would then give it back to the plugin. By nature in most programming languages, by simply writing code you build a api

[@Sytex6452]

​@@devilish_crow😂

[@byquanton]

There are many reasons I never deployed Placeholder API on any of my servers. How many Plugins are there that **require** Papi?

[@SupersuMC]

This is why I play on a vanilla server.

[@RealTreester]

i dont own a mc server but if i do ill check even better

[@15placekd]

damnation

[@csharpcoffee]

Actually, even vanilla players aren't safe: Log4j was a viable vector to hack vanilla players.

[@SpigotRCE]

We the griefers chilling xD

[@peklyis]

My servr got hacked that way

[@crafty_kritter410]

Gee, I guess I've been right all along not to install any plugins, mods or resource packs

[@Idani2]

resource packs are fine lol and plugins too if you're running it on an external host

[@mimiaumeow]

everything you use is an attack vector. there is no way to be 100% secure. minimizing hard-/software means more security - but of course, less utility. youre only ever really safe if you go live in a cave.

[@Kalphalus]

What about things like CoreProtect? Resource packs arent a risk, I make them and use them all the time too!

[@GGLVXD]

Too late for me❤

[@catergamer1]

shadersssssssssssssssssssss

[@PizzaFrog1]

Wrong were This is a joke