WARNING: Look Out For This Person

[Pryzmm]

This is NOT a joke, a serious matter that is to be taken seriously.

If you meet a man "Arellanes99" on your server, do 1 of 2 things:

• ban them IMMEDIATLY
• Ignore their request for creative

This has happened from experience..

 

I met this player on minehut on my server. (In my about me if you want to play). They asked for creative for 3 seconds to give some "Artwork". I was skeptical but I had a permission "Spawn.Edit" so he couldn't do anything to my world. I gave them creative and proceeded to give me a sign in blue underlined named "Custom Pixelart!" DO NOT RIGHT CLICK THIS ON YOUR SERVER / WORLD! This will instantaniously CRASH everyones clients. I didn't bother to check but I doubt you would be able to reenter without having to backup or reset the server. How i know this is because when i saw the sign, i was immediatly skeptical since i knew you could add clickable commands to signs. I saved the sign to a hotbar and switched to a singleplayer world. Sure enough, it crashed.

If they send a supposed youtube link, clear chat immediatly. I have not experienced this myself but what I'm told, it's a grabify link that shuts down your internet. For everyones safety, i have included a skript that has /cc (clear chat)

If you see this player. Watch out, they might have more tricks, and take everything they say and do with a grain of salt.
Here is the clear chat skript.

 

command /cc:
	aliases: /clearchat
	permission: Chat.Clear
	permission message: &cYou cannot execute this command!
	trigger:
		loop 200 times:
			send "&a" to all players
		send "&3&lThe Chat Has Been Cleared By %player%" to all players

 

[CoolProgrammer]

3 hours ago, AgentGamerPro said:

This is NOT a joke, a serious matter that is to be taken seriously.

If you meet a man "Arellanes99" on your server, do 1 of 2 things:

• ban them IMMEDIATLY
• Ignore their request for creative

This has happened from experience..

 

I met this player on minehut on my server. (In my about me if you want to play). They asked for creative for 3 seconds to give some "Artwork". I was skeptical but I had a permission "Spawn.Edit" so he couldn't do anything to my world. I gave them creative and proceeded to give me a sign in blue underlined named "Custom Pixelart!" DO NOT RIGHT CLICK THIS ON YOUR SERVER / WORLD! This will instantaniously CRASH everyones clients. I didn't bother to check but I doubt you would be able to reenter without having to backup or reset the server. How i know this is because when i saw the sign, i was immediatly skeptical since i knew you could add clickable commands to signs. I saved the sign to a hotbar and switched to a singleplayer world. Sure enough, it crashed.

If they send a supposed youtube link, clear chat immediatly. I have not experienced this myself but what I'm told, it's a grabify link that shuts down your internet. For everyones safety, i have included a skript that has /cc (clear chat)

If you see this player. Watch out, they might have more tricks, and take everything they say and do with a grain of salt.
Here is the clear chat skript.

 

command /cc:
	aliases: /clearchat
	permission: Chat.Clear
	permission message: &cYou cannot execute this command!
	trigger:
		loop 200 times:
			send "&a" to all players
		send "&3&lThe Chat Has Been Cleared By %player%" to all players

 

This is quite common. People will create signs and books with custom NBT data that execute commands as soon as they're opened/clicked. They can configure it such that it will sudo you to make them a server operator or even give them permissions.

[pnguin]

4 hours ago, AgentGamerPro said:

If they send a supposed youtube link, clear chat immediatly. I have not experienced this myself but what I'm told, it's a grabify link that shuts down your internet.

What has the internet come to this point. Like man shutting down someones internet... why do some people do this

[fuzzy5576]

 

 

[Houlton]

Good message but wrong way to do it from @AgentGamerPro.

As @CoolProgrammer said, these kind of attacks are common for servers owned by people or people with little/no experience having dangerous permissions.

Put it simple:

• Do not give dangerous commands to players that you don't know well (/gamemode, /op or deop, /stop, etc).
• Teach the players with access to dangerous commands the risks of giving someone else dangerous commands and maybe not give them at all without the owner/manager's permission.
• If you end up giving someone creative mode and they write a sign and they tell you to click on the sign placed or not, DO NOT CLICK ON THE SIGN for the safety of the server.
• Make daily backups of your server via your server's panel, run /save-all hourly or have a skript to do so atleast you have a save.
• Use DiscordSRV or Skript with Vixio to log all commands ran by operators/players with * permissions if you need to.

Due to how customizable Minecraft is, these kind of attacks are very easily done if someone with dangerous permissions doesn't know any better, the community just needs to learn how these attacks are done and avoid them from happening at all costs.

If a attack is done on Minehut and you have very clear evidence/proof that they attacked, you may report them here.

Please note: when I say "dangerous permissions", this means /op status or * (all commands) permissions given by someone via a permission plugin such as "LuckPerms" and "PermissionsEX".

Edited July 21, 2021 by Houlton

[boxboxbox]

That sucks! I suggest that you make a report here if you have evidence to back this up so we can take a look into this.

[Yodexx]

12 hours ago, CoolProgrammer said:

This is quite common. People will create signs and books with custom NBT data that execute commands as soon as they're opened/clicked. They can configure it such that it will sudo you to make them a server operator or even give them permissions.

Something similar happened to me once. Someone wrote a book named "Book For the Owner", I for some reason turned the pages, and can you guess what happened next?

It tried to OP everyone on my server XD (even tho it didn't work)

[Cxnnors]

You probably shouldn't have gave them creative regardless if you have skripts / plugins setup...

[Lighting_Fury]

M4RS5M3LL0W Banned me with one book when i opened it.

If You See M4RS5M3LL0W Do These Things

• ban them IMMEDIATLY
• Ignore their request for creative
 

 

[DuckyProgrammer]

Please make sure that you aren't responding to posts that haven't been responded to in over a month. Thanks!